[Ubuntu] Installing Symantec Endpoint Protection for Linux (SEPFL)

Although there is only a very few chance for us to install SEP in Ubuntu, but I have chance to do this, so I share my experience here.

Steps

• Ubuntu (theoretically all available Linux distributions) 32/64 bits
• Install Java Cryptography Extension (JCE)
  http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html
• Install Oracle Java JDK 7
  sudo apt-get install openjdk-7-jdk
• Download the SEP
  https://www.dropbox.com/s/258440cnen932bd/Symantec_Endpoint_Protection_12.1.5_Linux_Client_EN.zip?dl=0
• Unzip the installation files and chmod the whole folder to root
• Navigate the root directory of the installation folder
• Install by bash ./install.sh -i

SEPFL does not support 32 bit Ubuntu, therefore you may need to recompile the auto protection module.

• Decompress the source code from the following directory
  ./yourSEPFLFileDir/src/ap-kernelmodule.tar.bz2
• Recompile the Symantec Endpoint to support 32 bit Ubuntu
  sudo ./build.sh --kernel-dir /lib/modules/$(uname -r)/build
• Once success, the auto protection of SEPFL should work as follows
  

References

• Installation of JAVA JDK6/7
  http://askubuntu.com/questions/56104/how-can-i-install-sun-oracles-proprietary-java-jdk-6-7-8-or-jre
  http://blog.manishchhabra.com/2012/05/installing-oracle-sun-java-jdk-and-setting-java_home-in-ubuntu-linux/
• Installation example of SEPFL
  http://help.howproblemsolution.com/98205/how-to-install-symantec-endpoint-protection-12-1-5-on-supported-linux-operating-systems
• JAVA Installation Location of Ubuntu
  http://ubuntuforums.org/showthread.php?t=908567&p=5714656#post5714656
• Kernel Support and Recompilation Support (Symantec Official Doc)
  http://www.symantec.com/business/support/index?page=content&id=TECH95496&actp=search&viewlocale=en_US&searchid=1415725492928
  http://www.symantec.com/business/support/index?page=content&id=TECH223240&actp=search&viewlocale=en_US&searchid=1415725378107

[Apache] Overriding .htacess Files in Server

Sometimes, we may want to control the download behavior  through http server, in this case, we often need to override the htaccess config file to achieve.


Scenario 1: No authentication is needed
1) Make .htacess file with the below content

  
   
     Allow from all
     Satisfy any
   

2) After that, put the file to the directory, the following is the result (hierarchy level)

downFolder
     yourFileName
    .htacess 

So everytime the user download the file, they will not be asked for password


Scenario 2: Authentication with Username and Password

1) Make .htacess file with the below content

  
    AuthType Basic
    AuthName "yourProtectedMsg"
    AuthUserFile pathOfYourHtapasswdFile
    Require user loginUsrName
  

2) After that, make a .htpasswd file from the following URL
http://www.htaccesstools.com/htpasswd-generator/

3) Put .htacess, .htpasswd file to the same directory as your file
downFolder
     yourFileName
    .htacess 
    .htpasswd

So everytime the user download the file, they will be asked for password

[CMD] List of Common Commands Used in APs

This post will mark down all the necessary or common commands which often use and always forget.

1. wifi detect > wireless
• Generate the default config

This post will keep up-to-date.

[Steam] Streaming Games in Windows using VPN

Steam contains a very good feature called "Steam In-Home Streaming" which allow streaming of PC games in LAN or even through the Internet using VPN, with this feature one can use the strong desktop power to stream to other machines with different platform like MAC and Ubuntu, with the help of Steam software.


Environment

• Windows 7 64 bit Ultimate Edition / MAC OS/ Ubuntu
• A strong processing power PC (Steam suggest Intel Core i3 or above for the host computer for better performances)
• OpenVPN (ASUS routers internally includes openVPN servers), do not use PPTP server inside the router as this will not work (reason: PPTP has no UDP port forwarding)
• OpenVPN client URL: http://openvpn.net/index.php/open-source/downloads.html
  

Steps

1. Set up VPN server (in my case, I use openVPN server provided by merlin build), turn on it.
   
   
   
2. Select advance settings, follow the below settings
   * Remember to select "TAP", for steam steaming to work, bridging is required.
   * Username auth and password should be enabled
   * Allow connections between clients
   
   
3. Make a new open vpn account in the top page (not in the advance set up page!)
   
   
4. Export the settings (.ovpn)
   
   
   
5. Import the ovpn file to the client openVPN located in C:\Program Files\OpenVPN\config and do the connection.
   
   
   
   
6. Back to application, both side should have Steam opened, and make sure they are at the same LAN, you should have an option to stream your game.
   

[Windows] Hide User Account from the Home Screen

Sometimes, we open a new account for special purposes but do not want to the account to be shown at home screen, if it is so, please follow the below steps to achieve.

Environment:
Windows 7 (64 bit) Ultimate Edition


1) Go to start

2) Type Regedit

3) Navigate to
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon

4) Right click "Winlogon" and make a new key (K)

5)  Name "SpecialAccounts" and press enter

6) Right click the newly created SpecialAccounts, make a new key again named "UserList"

7) On the RHS of the panel, add a DWORD (32bit) value, name the value with the account name you want to hide.

8) The value of the DWORD is evaluated as follows
0: Hide 
1: Show

9) You do not need to restart computer, this will be in effect instantly.


Finally result

Reference: https://social.technet.microsoft.com/Forums/windows/en-US/16378967-8a39-4aef-85e4-d859a71648d3/hide-user-accounts-on-windows-7-logon

[Windows] Setting Up Remote Login in Windows 7

The following is the some notes of setting up remote login for machines behind routers (NAT)

Environment:

1. Windows 7 (64 bit) Ultimate Edition
2. Asus N66U router

• Setup port forwarding (default 3389 port)
  
  
• Under Windows "Firewall > Advanced setup, choose inbound connection, open tcp port 3389 to allow remote login services
  
  
  
• Finally, go to Advanced system settings > remote > allow all remote connections from different versions of Windows (default is closed for security, need to open manually)
  

[Windows] Solve Microsoft Visual C++ 2005 Redistribute 1935 Error

When installing Microsoft Visual C++ 2005 getting the 1935 error, follow the below instructions to solve the issue.

Error message

"Setup failed to install Microsoft Visual C++ 2005 Redistributable..."

To resolve the issue, you tried to install Microsoft Visual C++ 2005 Redistributable, but you get the following error message:

"Error 1935. An error occurred during the installation of assembly 'Microsoft.VC80.ATL..."M

Steps to solve
1) Start terminal with admin privelege

2) Run the following cmd'

fsutil resource setautoreset true C:\

3) Restart the machine


Reference: http://esupport.trendmicro.com/solution/en-US/1059423.aspx

Windows sucks,right?