All posts by Michael Albert

Windows: No installation of Windows Updates at a policy defined scheduled date and time

Hi,

since Windows 8 respectively Server 2012 the policy to install Updates at a specific date and time has no affect.

Microsoft changed the behaviour for installing updates. The schedule for a installation and restart of updates is just defined by the deadline for Updates on the WSUS Server.
Continue reading Windows: No installation of Windows Updates at a policy defined scheduled date and time

Advertisment to support michlstechblog.info

Security: Check a webserver for heartbleed vulnerability with nmap

Hi,

here is a short tutorial to check a webserver with nmap.

Update to the latest version of nmap. Otherwise nmap would not work (Error message:/usr/bin/../share/nmap/scripts/ssl-heartbleed.nse:40: This script requires the tls.lua library….). For example debian wheezy. Add the backport repository “deb http://ftp.uni-erlangen.de/debian/ wheezy-backports main” to /etc/apt/sources.list.

Refresh sources

root@debdev:/# apt-get update

Install the latest nmap version
Continue reading Security: Check a webserver for heartbleed vulnerability with nmap

Powershell: A text based menu

Hi,

a long time ago I wrote a Menu function for quickly choose predefined options in a script. An example

Source the menu.ps1 in your script and callĀ  fShowMenu. This will show the menu. The function needs 2 parameters:
Parameter 1: The menu title as string
Parameter 2: A hashtable with the Menuentries. The key of an Menuitem is returned by the function the corresponding value is shown at the menu.

# Source the file
. .\menu.ps1
# Call Menu funtion
fShowMenu "Choose your favorite Band" @{"sl"="Slayer";"me"="Metallica";"ex"="Exodus";"an"="Anthrax"}
A text based Powershell Menu
A text based Powershell Menu

Continue reading Powershell: A text based menu

OpenVPN: Change the default TCP/UDP Ports

Hi,

sometimes it make sense to change the default ports of an OpenVPN installation, because these are those which are in case of an vulnerability scan attacked first or some company firewall rules makes it necessary.

With the

port 1194

directive in your config file the source and destination port for connections is always 1194.

For outgoing connections there are two ways to alter the source port:
Continue reading OpenVPN: Change the default TCP/UDP Ports

OpenVPN: Read certificate passphrase from file

Hello,

when you establish a OpenVPN connection with a password protected ceritificate you have enter the passphrase each time when OpenVPN starts.

This isn’t nice if you want to connect at system startup without an user interaction.
Continue reading OpenVPN: Read certificate passphrase from file