Top
Search
Social Profiles
Twitter Feed
Powered by Squarespace
« Single Snort IDS (with Web Interface) | Main | Windows 7 Features: Calculator »
Sunday
Feb152009

Secure Shell Port Forwarding

DateSunday, February 15, 2009 at 2:00PM

In this little tip we will be using SSH port forwarding to secure MySQL from a remote Snort sensor to the server. However the same process can be used for other programs like VNC. This example is on Ubuntu but the process is very similar for other distributions.

The Server
We will be using the Secure Shell port forwarding to provide an additional layer of security to the MySQL traffic coming from the Snort sensors. First we must install the server before the sensors can send any data via SSH. The following command would be used to install the SSH server on the server that hosts the MySQL server.
 $ sudo apt-get install openssh-server openssh-client

The Client
First we set up the connection to the server on the client system with the following command.

 $ ssh -N -f -L 3306:<serverIP>:3306 <USERNAME>@192.168.58.133

We then would test connectivity to the MySQL server with the mysql command line client. To access the SSH connection to the server we connect to port 3306 on the localhost, which SSH then forwards to the server.
$ mysql -u snort -p -h 127.0.0.1

Finally we check that the connection is encrypted by using a packet capture utility.


If the SSH connection was not correctly configured you would likely see something like this.

AuthorGraham | Comment17 Comments | | | Print ArticlePrint Article
tagged in ,

PrintView Printer Friendly Version

EmailEmail Article to Friend

Reader Comments (17)

I don't know what to say except that I have enjoyed reading. Nice blog. I will keep visiting this blog very good.Prada handbag

November 24, 2010 | Unregistered CommenterDelores R. Garcia

Men's Reebok Zigtech are a new innovative running shoe made by reebok, these shoes are an athletic shoe that is a newly trending Reebok ZigTech shoes with new absorption technology. The technology behind the Easytone Trainers is what is known as sound proofing. This is Reebok Zig pulse shoes’s most advanced training and running shoe so far. They allow key leg muscles to do less, so you can do a lot more. The new sole technology returns the energy for a soft run and conserves leg energy. The Reebok ZigTech absorb the vibrations from the impact and then take that energy and return it to the runner in a smooth and quite fashion.There are not many shoes with the technology and versatility that Discount Reebok zigtech pulse shoes now have.

March 22, 2011 | Unregistered CommenterSkechers Shape Ups

<p>World famous brand <A href="http://www.ShapeUpsoutlet.com/">Skechers Shape Ups</A> this season more than 100 different styles of counters in major cities or the full listing of stores, enjoy shaping the wild, "King of days." In order to achieve the most perfect form on the state, up to the people of the fashion trends for <A href="http://www.ShapeUpsoutlet.com/womens-ShapeUps-c-1.html">Skechers Shape UpS Shoes</A> is essential for a single product. Reflects the different styles of <A href="http://www.ShapeUpsoutlet.com/ShapeUps-wide-widths-c-6.html">Shape ups Skechers</A> shoes, a different attitude to life, capturing the extreme side of life, seeking quality, fashion, style, self-realization.</p>
<p>The concept of ordinary people, always think that spring is a pink world, the air was filled with the sweet taste of early shape up shoes summer is the colorful, ebullient. But in practical terms, everyone seems to be biased in favor of plain colors, especially the wild and easy lining of black, white, gray, brown girl in the world of work is most useful. <A href="http://www.ShapeUpsoutlet.com/products_all.html">Shape ups sneaker</A> Active designed specifically for office workers as the daily series of fashion's shape ups sale running mate.</p>
<p>Recommended that the number of series shape up are derived from cycling, sports concept, a unique hole pattern design, help to strengthen the grip function, the implication is as smooth as the ride, stability, and convenient. Bandage-free design while adding Gengrang Working Girl in the plain flowing skechers shape ups reviews spring and summer the city girl in the infinite charm.</p>

March 22, 2011 | Unregistered CommenterSkechers Shape Ups

If you buy Mbt shoes you will like cheap mbt shoesMen MBT Sandals

March 28, 2011 | Unregistered CommenterMens MBT Sandals

Yesterday, my friend bought a Polo Ralph Lauren which is so beautiful, i am surprised by the design and style. Do you have Ralph Lauren Polo Shirts now? if not, go to online store and have one, it is so amazing!!! There are many online stores having Cheap Ralph Lauren, i believe you gonna like it!

April 5, 2011 | Unregistered CommenterRalph Lauren Outlet

Yesterday, my friend bought a Polo Ralph Lauren which is so beautiful, i am surprised by the design and style. Do you have Ralph Lauren Polo Shirts now? if not, go to online store and have one, it is so amazing!!! There are many online stores having Cheap Ralph Lauren, i believe you gonna like it!

April 5, 2011 | Unregistered CommenterRalph Lauren Outlet

The world of sex toys is a huge one. It doesn't matter what you are looking for, there is something out there just perfect for you. If you are looking for a love sex vibrators to make your toes tingle then the internet will provide thousands of results, pointing you in the direction of just that. If you are looking for Sex Lubes for anal play then again, the internet and it's many online stores and resources will help you not only find one that you like but can also show you reviews from the people that have bought and played with womens sex toys before. That's the good thing about the internet - it has made the world of mens sex toys much more accessible to practically anyone that has an internet connection.

July 2, 2011 | Unregistered Commenterarlene

cheap ed hardy storesis one of the most popular artists in the United States. He transferred his unique designs to his clothing line and his ed hardy mens clothing sale are one of the top sellers. His hoodies attract the young crowd who find his style hip and often representative of ones own personal style.However, all ages can wear these Ed Hardy Accessories sales online in all casual settings from hanging out with friends,general street wear,or included in daily school wardrobes. Another reason why ed hardy women skirt are among the favorite street apparels in the nation is because of the comfort it provides Youth means vigor and personality, rebels.the Totem of Ed hardy clothes can exacty meet their inner need. the designer of ed hardy devise a series of Ed Hardy Womens articles.

July 2, 2011 | Unregistered CommenterEd Hardy Store

Reach isNike air max not usually nike air max 2009an endnike air max 24-7 goal butnike air max 2011 rather a meansnike air max 90 to onewholesale jeans of thecheap jeans other two goalscheap hats of trafficwholesale new era hats or leads. That'sAdjustable hats because the greaterRed Bull Hats reach youNFL Hats have, the easier itWholesale Hats is to get significant traffic hat clubor leadsred hat from social mediahat store channels. If reachcustom hat is your key metric, you wantMonster t-shirt to increase your social media followersMonster Energy T-shirt or fans.

July 29, 2011 | Unregistered Commenterck underwear

What events, what experiences,cheap soccer cleats what What associations should we crowd into those last hours as mortal beings? What happiness should we find in reviewing the past, what regrets?Sometimes I have thought it would be an cheap nike mercurial excellent rule to live each day as if we should die tomorrow. Such an attitude would emphasize sharply the values of life. We should live each day with a gentleness, a vigor, and a adidas shoes soccers keenness of appreciation which are often lost when time stretches before us in the constant panorama of more days and months and years to come. There are those, of course, who would discount soccer cleats adopt the epicurean motto of “Eat, drink, and be merry,” most people would be chastened by the certainty of impending death.In stories the doomed hero is usually saved at the last mercurial soccer cleats minute by some stroke of fortune, but almost always his sense of values is changed. He becomes more appreciative of the meaning of life and wholesale soccer shoes its permanent spiritual values. It has often been noted that those who live, or have lived, in the shadow of death bring a mellow soccer cleat sweetness to everything they do.Most of us take life for granted. We know that one day we must die, but usually we picture that cheap nike soccer shoes day as far in the future, when we are in buoyant health, death is all but unimaginable. We seldom think of it. The days stretch out adidas f50 boots in an endless vista. So we go about our petty task, hardly aware of our listless attitude towards life.The same lethargy, I am adidas football boots afraid, characterizes the use of our faculties and senses. Only the deaf appreciate hearing, only the blind realize the manifold blessings adidas f50 adizero orange that lie in sight. Particularly does this observation apply to those who have lost sight and hearing in adult life. But those who have never suffered impairment of sight or hearing seldom make the mens adidas soccer shoes fullest use of these blessed faculties. Their eyes and ears take in all sights and sound hazily, without concentration, and with little appreciation.
soccer shoes
nike soccer cleats
adidas soccer cleats
<p align="center">

LJP

October 26, 2011 | Unregistered Commentersoccer shoes

<p>Well, I went in and sat down on the edge of a chair, and wished UGG bailey button were in Europe, and the man at the table did not look up. He was one of the world’s greatest men, and was made great by one single rule. Oh, that all the young people of Philadelphia were before me now and bailey button UGG Boots 5803 could say just this one thing, and that they would remember it. discount UGG Boots would give a lifetime for the effect it would have on our city and on civilization. abraham Lincoln’s principle for greatness can be adopted by nearly all. This was his rule: Whatsoever UGG classic cardy Boots had to do at all, he put his whole mind in to it and held it and held it all there until that was all done. That makes men great almost anywhere. Women's UGG Boots stuck to those papers at that table and did not look up at me, and I sat there trembling. Finally, when UGG classic short Boot put the string around his papers, he pushed them over to one side and looked over at me, and a smile came over his worn face. after I had gotten out I could not realize I had seen the President of the United States at all. But a few days later, when still in the city, I saw buy UGG Boots online pass through the East Room by the coffin of abraham Lincoln, and when I looked at the upturned UGG classic tall Boots of the murdered President I felt then that the man I had seen such a short time before, who, so simple a man, so plain a man, UGG Boots clearance was one of the greatest men that God ever raised up to lead a nation on to ultimate liberty. UGG Boots sundance was called the other day to the history of a very little thing that made the fortune of a very poor man. It was an awful thing, and yet because of that experience he-not a great inventor or genius-invented the pin that now UGG Boots roxy tall is called the safety-pin, and out of that safety-pin made the fortune of one of the great aristocratic families of this nation.</p>
<p>UGG Boots store</p>
<p>authentic UGG Boots</p>
<p>UGG Boots On Sale</p>
<p align="center"></p> ZXJ

October 27, 2011 | Unregistered CommenterUGG Boots On Sale

Actually, a number of people in Washington were surprised that louis vuitton sale was invited to speak here -- and even more surprised when I accepted the invitation. In honor of our meeting, I have asked Dr. Falwell, as your Chancellor, to permit all the students an extra hour next Saturday night before curfew. And in return, louis vuitton online store have promised to watch the Old Time Gospel Hour next Sunday morning. I am mindful of that counsel. I am an American and a Catholic; I love my country and treasure my faith. But lv store do not assume that my conception of patriotism or policy is invariably correct, or that my convictions about religion should command any greater respect than any other faith in this pluralistic society. I believe lv online outlet surely is such a thing as truth, but who among us can claim a monopoly on it? To many Americans, that pledge was a sign and a symbol of a dangerous breakdown in the separation of church and state. Yet this principle, as vital as louis vuitton online outlet is, is not a simplistic and rigid command. Separation of church and state cannot mean an absolute separation between moral louis vuitton luggage outlet uk and political power. The challenge today is to recall the origin of the principle, to define its purpose, and refine its application to the politics of the present. louis vuitton outlet cannot be excluded from every public issue; but not every public issue involves religious values. And how ironic louis vuitton factory is when those very values are denied in the name of religion. For example, we are sometimes told that Louis Vuitton Handbag is wrong to feed the hungry, but that mission is an explicit mandate given to us in the 25th chapter of Matthew. The nuclear freeze does not require that we trust the Russians, but demands full and effective verification. Louis Vuitton Belt does not concede a Soviet lead in nuclear weapons, but recognizes that human beings in each great power already have in their fallible hands. ZXJ

December 3, 2011 | Unregistered Commenterlouis vuitton belt

<h1>Cheap Coach Bags</h1>
<h1>Coach Factory Outlet Online</h1>
<h1>Coach Outlet</h1>
<h1>Discount Coach Purses</h1>
<h1>Coach Outlet Purses</h1>
<h1>Coach Outlet Stores Online</h1>
<h1>Coach Outlet</h1>
<h1>Louis Vuitton</h1>
<h1>Coach Outlet Store</h1>
<h1>Coach Online Factory Store</h1>
<h1>Coach Outlet Online</h1>
<h1>Louis Vuitton Outlet</h1>
<h1>Coach Factory</h1>
<h1>Coach Outlet</h1>
<h1>Coach Outlet Stores Online</h1>
<h1>Coach Factory Outlet Online</h1>
<h1>Burberry Scarf</h1>
<h1>Coach Outlet</h1>
<h1>Coach Online Store</h1>
<h1>Coach Factory Outlet</h1>
<h1>Coach Factory Outlet Online</h1>
<h1>Coach Purse Outlet</h1>
<h1>Louis Vuitton Outlet</h1>
<h1>Coach Factory Outlet</h1>
<h1>Coach Factory Outlet</h1>
<h1>Coach Factory Store Online</h1>
<h1>Coach Outlet Online Store</h1>
<h1>Coach Outlet Online Store</h1>
<h1>Coach Purses Outlet</h1>
<h1>Louis Vuitton Outlet</h1>
<h1>Coach Factory Online</h1>
<h1>Coach Outlet Store</h1>
<h1>Coach Outlet Online</h1>
<h1>Coach Outlet Stores</h1>
<h1>Coach Outlet Store Online</h1>
<h1>Louis Vuitton Outlet</h1>
<h1>Coach Outlet Stores Online</h1>
<h1>Coach Outlet Coupon</h1>
<h1>Coach Outlet Coupons</h1>
<h1>Louis Vuitton Outlet</h1>
<h1>Coach Online Outlet</h1>
<h1>Coach Factory</h1>
<h1>Louis Vuitton Sunglasses</h1>
<h1>Coach Factory Outlet Online</h1>
<h1>Coach Factory Outlet Online</h1>
<h1>Coach Factory Outlet Online</h1>
<h1>Coach Outlet Online</h1>
<h1>Coach Outlet</h1>
<h1>Coach Factory Online</h1>
<h1>Coach Outlet Coupons</h1>
<h1>Louis Vuitton Outlet</h1>
<h1>Coach Outlet Store Online</h1>
<h1>Coach Outlet Online Store</h1>
<h1>Coach Factory Store</h1>
<h1>Coach Outlet Stores</h1>
<h1>Coach Outlet</h1>
<h1>Coach Online Outlet Store</h1>
<h1>Coach Factory Store</h1>
<h1>Coach Outlet Store</h1>
<h1>Coach Purses Outlet</h1>
<h1>Coach Outlet Store</h1>
<h1>Coach Handbags</h1>
<h1>Coach Purses For Cheap</h1>
<h1>Coach Factory Online</h1>
<h1>Coach Factory Outlet</h1>
<h1>Coach Factory Outlet Online</h1>
<h1>Coach Outlet</h1>
<h1>Coach Outlet Store</h1>
<h1>Coach Factory Outlet</h1>
<h1>Coach Handbags</h1>
<h1>Coach Bags Outlet</h1>
<h1>Coach Factory</h1>
<h1>Coach Outlet Stores</h1>
<h1>Coach Handbags Outlet</h1>
<h1>Coach Outlet Online</h1>
<h1>Coach Purse Outlet</h1>
<h1>Coach Outlet Store</h1>
<h1>Coach Outlet Stores</h1>
<h1>Coach Outlet Store Online</h1>
<h1>Coach Outlet Bags</h1>
<h1>Coach Factory Outlet Online</h1>
<h1>Coach Outlet</h1>
<h1>Coach Outlet Store Online</h1>
<h1>Coach Outlet Store Online</h1>
<h1>Coach Bag</h1>
<h1>Coach Factory Outlet Store</h1>
<h1>Louis Vuitton</h1>
<h1>Coach Outlet Store</h1>
<h1>Coach Outlet Stores Online</h1>
<h1>Coach Factory Outlet</h1>
<h1>Coach Factory Store Online</h1>
<h1>Coach Outlet Store Online</h1>
<h1>Coach Factory Outlet Store</h1>
<h1>Coach Factory Outlet Online</h1>
<h1>Coach Purses</h1>
<h1>Coach Outlet Store Online</h1>
<h1>Coach Outlet</h1>
<h1>Coach Factory Store</h1>
<h1>Coach Purses Outlet</h1>
<h1>www.louisvuitton.com</h1>
<h1>Coach Factory Online</h1>
<h1>Coach Purse Outlet</h1>
<h1>Louis Vuitton Outlet</h1>
<h1>Coach Factory Outlet Online</h1>
<h1>Coach Outlets</h1>
<h1>Coach Outlet Online</h1>

December 6, 2011 | Unregistered CommenterCoach Outlet online

Hey
Coach Outlet Online Storeis a well
Coach Factory Store Online
known brandCoach Outlet all over the world.
From 1941Coach Factory Online when it was founded, Coach Outlet Store Onlineit has
Coach Factory Outlet Store
seized theCoach Purses Outlet Online hearts of thousands of Coach Bag and purse fans.
Coach Outletgained the reputation
for itsCoach Bags fashionable style and signature materials.Coach Outlet Store Online In the very beginning, Coach Factory Outletwas
Coach Factory Outlet Online
a familyCoach Factory Online owned business run by Cheap Coach Purses masters making Manhattan Coach Factory Outlet Online Today, it has lots and lots of coach outlet stores globally.
Coach Outlet Online outlet online websites,
you could find Coach Outlet Store purses and Coach Outlet Couponwallets at discounted prices and, you also get 80% off retail coach products.
Coach Outlet Store Onlinealthough sold at low price, are guaranteed to be genuine and not counterfeited and best quality.

December 26, 2011 | Unregistered CommenterCoach Outlet

PostPost a New Comment

Enter your information below to add a new comment.

My response is on my own website »
Author Email (optional):
Author URL (optional):
Post:
 
Some HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>

Notify me of follow-up comments via email.