Off-Topic: Thunderbird Addon

Hey Guys,

I just found this really sweet add-on for the Thunderbird email client.  
The add-on is called Lightning and it adds a calendar and task list to 
Thunderbird!  I know there are plenty of other PIM options out there, 
but I like to have my email right next to my calendar in the same 
application if possible. 

https://addons.mozilla.org/en-US/thunderbird/addon/2313

~Ross

Re: Off-Topic: Thunderbird Addon

Just for grins, I checked to see if it was also avail. to IceDove which 
I use w. Debian.  Yep!!  Had to install it and the extension w. Syaptic 
but when I then fired up Icedove again, there it was.  Haven't played w. 
it yet but it's there.  Only bad thing I can see is that it makes my 
email page all that much smaller but I'll get over it, i guess.
Whit

Ross Gregg wrote:
>
> Hey Guys,
>
> I just found this really sweet add-on for the Thunderbird email 
> client.  The add-on is called Lightning and it adds a calendar and 
> task list to Thunderbird!  I know there are plenty of other PIM 
> options out there, but I like to have my email right next to my 
> calendar in the same application if possible.
> https://addons.mozilla.org/en-US/thunderbird/addon/2313
>
> ~Ross
>
> _______________________________________________
> Jaxlug-list mailing list
> Jaxlug-list@...
> http://mailman.jaxlug.org/mailman/listinfo/jaxlug-list
>

Re: Off-Topic: Thunderbird Addon

*64-bit users:

http://releases.mozilla.org/pub/mozilla.org/calendar/lightning/releases/0.9/contrib/linux-x86_64/

*Ross Gregg wrote:
>
> Hey Guys,
>
> I just found this really sweet add-on for the Thunderbird email
> client.  The add-on is called Lightning and it adds a calendar and
> task list to Thunderbird!  I know there are plenty of other PIM
> options out there, but I like to have my email right next to my
> calendar in the same application if possible.
> https://addons.mozilla.org/en-US/thunderbird/addon/2313
>
> ~Ross
>
> _______________________________________________
> Jaxlug-list mailing list
> Jaxlug-list@...
> http://mailman.jaxlug.org/mailman/listinfo/jaxlug-list

--

-- 
LyX: http://www.lyx.org/ OpenOffice: http://www.openoffice.org/
Inkscape: http://www.inkscape.org/ Scribus: http://www.scribus.net/
GIMP: http://www.gimp.org/ PDF: http://www.pdfforge.org/

_______________________________________________

Re: crazy idea

I just wanted to update you on the July 21st meeting topic.  I will be
available to speak as well as Frank DiMaggio will be my co-presenter.  We
will be presenting an open source tool to help scan and test web
applications for PCI compliance. We believe this would be interesting to the
group as  it covers an open source tool, security which is always fun and
PCI which affects more of us then we think.
A quick synopsis is:

PCI compliance and web application security are major concerns for
businesses. With looming compliance deadlines and IT budgets being
scrutinized, the challenge for organizartions is how to effectively mitigate
web application vulnerabilities while avoiding costly fines and excess
impact on security operations. It is important to know that PCI offers a
couple of solutions to ensure compliance, and that these tools act as a
starting point for identifying vulnerabilities in web applications. In this
presentation, Kevin Johnson and Frank DiMaggio will be exploring the w3af
open-source tool that can help test your web applications. The presenters
will also reveal best practices for preventing attackers from exploiting
application vulnerabilities as well as discussing proven solutions such as
Web Application Firewalls (WAFs) that can be used to significantly mitigate
these threats.

I look forward to the
meeting.  I have also copied my main email address on this note sothat
you all have it.
Kevin

Re: crazy idea

I'll be there.  Looking forward to seeing this tool.

Kyle Gonzales
kyle.gonzales@...
GPG Key #566B435B (NEW)

Read My Tech Blog:
http://techiebloggiethingie.blogspot.com/

On Thu, Jul 2, 2009 at 12:45 PM, Kevin Johnson <kjohnson@...>wrote:

> I just wanted to update you on the July 21st meeting topic.  I will be
> available to speak as well as Frank DiMaggio will be my co-presenter.  We
> will be presenting an open source tool to help scan and test web
> applications for PCI compliance. We believe this would be interesting to
> the
> group as  it covers an open source tool, security which is always fun and
> PCI which affects more of us then we think.
> A quick synopsis is:
>
> PCI compliance and web application security are major concerns for
> businesses. With looming compliance deadlines and IT budgets being
> scrutinized, the challenge for organizartions is how to effectively
> mitigate
> web application vulnerabilities while avoiding costly fines and excess
> impact on security operations. It is important to know that PCI offers a
> couple of solutions to ensure compliance, and that these tools act as a
> starting point for identifying vulnerabilities in web applications. In this
> presentation, Kevin Johnson and Frank DiMaggio will be exploring the w3af
> open-source tool that can help test your web applications. The presenters

IP Tables Help

I have a development host that keeps trying to contact the production mysql
server.  What I'm trying to do is catch any traffic heading to the
production server on 3306 and redirect it to 3306 on an internal IP (in the
dev environment).  Here's what I've tried:

iptables -t nat -A PREROUTING -p tcp -d <external mysql server> --dport 3306
-j DNAT --to <internal mysql server>:3306
iptables -t nat -A POSTROUTING -j MASQUERADE

which doesn't error out, but also doesn't work

and:

iptables -t nat -I OUTPUT --dst <external mysql server> -p tcp --dport 3306
-j REDIRECT --to <internal mysql server>:3306

which gives me:

iptables v1.3.8: IP address not permitted

Any help would be appreciated in getting this thing working.

Thanks,
Gene

OT Why Obsidian-Studios, Inc. does credit card processing in house

Just FYI Obsidian-Studios, Inc and our clients are un-affected by the
following. We process our credit cards, in house. With no additional per
transaction fees ;)

http://www.techurbia.com/2009/07/authorizenet-goes-down-one-datacenter-fire-knocks-multi-billion-dollar-business-offline.html

David vs Goliath?

For all your credit card processing needs,

http://www.monetra.com/

--

-- 
William L. Thomson Jr.
Obsidian-Studios, Inc.
http://www.obsidian-studios.com

This message (including any attachments) contains confidential
information intended for a specific individual and purpose, and is
protected by law. If you are not the intended recipient, you should
delete this message. 

Any disclosure, copying, or distribution of this message, or the
taking of any action based on it, is strictly prohibited.

Re: IP Tables Help

On Tue, 2009-06-30 at 19:03 -0400, Gene Cronk wrote:
> I have a development host that keeps trying to contact the production mysql
> server.  What I'm trying to do is catch any traffic heading to the
> production server on 3306 and redirect it to 3306 on an internal IP (in the
> dev environment).  Here's what I've tried:
>
> iptables -t nat -A PREROUTING -p tcp -d <external mysql server> --dport 3306
> -j DNAT --to <internal mysql server>:3306
> iptables -t nat -A POSTROUTING -j MASQUERADE
> 
> which doesn't error out, but also doesn't work

Try dropping the destination ip address. All my prerouting stuff doesn't
have a destination IP, just a --to. Might be why it's not working. Worth
a try ;)

Otherwise looks correct offhand. Other than you might want to specify an
interface via -i option. I always do :)

--

-- 
William L. Thomson Jr.
Obsidian-Studios, Inc.
http://www.obsidian-studios.com

This message (including any attachments) contains confidential
information intended for a specific individual and purpose, and is
protected by law. If you are not the intended recipient, you should
delete this message. 

Any disclosure, copying, or distribution of this message, or the

Re: OT Why Obsidian-Studios, Inc. does credit card processing in house

On Fri, 2009-07-03 at 13:23 -0400, Deny IP Any Any wrote:
> are you PCI compliant?

OMG don't go there... I spent about 3 weeks educating Elavon account
executives and supervisors on PCI compliance. In short vendors/software
must be PA-DSS compliant. While Merchants are required to be PCI-DSS
compliant. Which we have been for years and so has the software we
run...

Obsidian-Studios, Inc is fully PCI-DSS compliant, and has been since
before that standard existed.

Monetra is fully PA-DSS/PABP complaint. They have been so before either
standard existed ;)

However there is new software to scan daily, etc for PCI-DSS compliance.
Elavon tried to shove this down my throat for a per month fee. However
it only runs on windows. Whoopy for me :) It took a bit to even inform
Elavon that these were servers in a secure data center. Which included
sending them pics of the server, dc, terminal screen shots of logging
in, etc.

The credit card processing server is a virtual machine with ssh. No
access to that machine directly from the outside world. The java
application server, and applications communicate internally on the
private firewalled lan for credit card processing. Till the external
request is made to Tsys/Vital. Which I basically showed all that to
Elavon as well. More secure than most of their merchants :)

Despite using the #3 merchant bank/clearing house, Elavon. We still

Re: IP Tables Help

Unless the box that has that rule on it is actively in the routing path
of (or listening to) the destination IP in question, it won't redirect
it. You can't redirect on the behalf of some other box (fortunately,
since there's all sorts of potential for grief in such a world.)

On Tue, 2009-06-30 at 19:03 -0400, Gene Cronk wrote:
> I have a development host that keeps trying to contact the production mysql
> server.  What I'm trying to do is catch any traffic heading to the
> production server on 3306 and redirect it to 3306 on an internal IP (in the
> dev environment).  Here's what I've tried:
> 
> 
> 
> iptables -t nat -A PREROUTING -p tcp -d <external mysql server> --dport 3306
> -j DNAT --to <internal mysql server>:3306
> iptables -t nat -A POSTROUTING -j MASQUERADE
> 
> which doesn't error out, but also doesn't work
> 
> and:
> 
> iptables -t nat -I OUTPUT --dst <external mysql server> -p tcp --dport 3306
> -j REDIRECT --to <internal mysql server>:3306
> 
> which gives me:
> 
> iptables v1.3.8: IP address not permitted
> 
> 
> Any help would be appreciated in getting this thing working.