Archive for the ‘Fun Stuff’ Category

Testing to see if your ISP is blocking outgoing SMTP connections

Friday, August 12th, 2011

Oftentimes to reduce the threat of spambot outbreaks coming from their network, ISP’s today will prohibit outgoing connections to port 25 except when connecting to the mailservers designated for their own clients to use. Some ISP’s will make exceptions if you contact them about it, but usually the person who answers their first tier support calls knows little about how SMTP works, or why you’d want to connect to some other SMTP server to begin with.

When sending email using a server on someone else’s network the errors in your own mail client may be less than helpful, saying ‘Server not available’ or something similar, leading the investigation in the wrong direction: towards the server you are connecting to rather than your ISP or local network.

Luckily many servers nowadays will have an alternate port open for this purpose (since a spambot is connecting to an MX server instead of your outgoing server they are much less likely to attempt connections to an alternate port as well). This is often set to port 587 though technically any port could be used.

Assuming SSL is not required, to test whether you are able to connect to a mailserver on port 25 simply open a command prompt and type ‘telnet someserver.yourhost.com 25′ (replacing the hostname with whatever outgoing server is provided by your host):

C:\>telnet someserver.yourhost.com 25

220 someserver.yourhost.com (IMail 8.21 57484-4) NT-ESMTP Server X1

If the screen refreshes and you see an SMTP banner as above, then that port is open for you to connect to and the issue lies elsewhere.
If you know that this server is working for other people and the port is being blocked however, you’ll see a connection failure just as if the server is down or not responding:

C:\>telnet someserver.yourhost.com 25
Connecting To someserver.yourhost.com…Could not open connection to the host, on port 25: Connect failed

C:\>

Ask your email provider for an alternate port to connect to and any other relevant settings. Assuming SSL is not required you can test to this alternate port in the same way as above.

C:\>telnet someserver.yourhost.com 587

220 someserver.yourhost.com (IMail 8.21 57809-2) NT-ESMTP Server X1

Note: The telnet program is not installed by default on recent Windows operating systems though it can easily be installed through Programs and Features by selecting ‘Turn Windows features on or off’ and checking ‘Telnet Client’, then Ok.

SociBook del.icio.us Digg Facebook Google Yahoo Buzz StumbleUpon

QuakeCon = Overrated

Friday, August 12th, 2011

Talk to most people who’ve gone to QuakeCon prior to 2010 and they’ll tell you it was one of the coolest conventions around Texas. Today? Not so much. With a bunch of new rules and regulations, and changes to the overall bundle, the splendor of QuakeCon is lost to most.

For years friends and colleagues have told me how great QuakeCon was, and that I should go. My reply? Not interested. But this year, for some reason, I decided to go. No, it wasn’t a bet.

What I saw when walking in was quite disappointing in contrast to the tales of epicness that surrounded talk of this convention in the past. A few gaming stations, some displays, and the Bawls energy drink vendor, that was about it. It was more intriguing to walk into the Hilton Anatole and see ancient Chinese relics and antiques.

Did I miss out? Was I all along denying the chance to see QuakeCon at its greatest? Of course, the nostalgia of Lan-parties, and memories of a once great game series known as Quake is still present. But by visit to QuakeCon 2011 was my first, and will surely be my last, in memory of this once “stated” great convention.

SociBook del.icio.us Digg Facebook Google Yahoo Buzz StumbleUpon

Disconnecting in a Connected World

Monday, August 8th, 2011

To a large percentage of the world’s population, the Internet couldn’t be more irrelevant or any lower on the totem pole of life’s necessities. However, I happen to live in the group that relies heavily on the Internet to conduct business, perform research, communicate with friends, family and of course, waste time.

If you are like me, you are plastered with Internet access 24/7 in your day-to-day life, especially at work or at home. While I’m out and about, I’ve always got my trusty iPhone which can do 90% of the things that I need to get done with relative ease. If my iPhone lets me down, I can use my iPad to tackle the other 9% percent. The last 1% are probably things I could do without anyway, so they can wait.

I’ve been traveling this past week so I have experienced a fairly consistent lack of Internet connectivity and as a result, have had to travel a short distance (less than a mile) to a local café with free WiFi or maybe I got lucky and bummed free WiFi off someone with an unsecured network.

When I’m thoroughly disconnected and have no Internet resources whatsoever, something strange happens to me. I tend to notice things that are around me more because I’m not bumping into them while checking the weather on my iPhone. I also find myself engaging in conversation with more people because I’m not busy deleting spam out my inbox or replying to a text message. Does any of this sound familiar?

Yes I need the Internet and no I don’t need the Internet. Let me try this another way.. if I had to choose between never having access to the Internet again for the rest of my life or.. well, I can’t think of anything that would be applicable for a trade. You can’t say television because the Internet provides television. You can’t say the music or radio because the Internet provides both of those. We pretty much can’t say anything that you can’t physically put your hands on because the Internet provides all of that too. But you can say anything that you can touch, feel, taste, and smell. I left “see” out because as we already know, you can see everything on the Internet. Especially the stuff you have no interesting seeing.

What I’m trying to say is that I/we forget too often that the Internet is just a tool to help us do things and it’s not really very good at anything else. Have you ever tried to have a conversation with the internet? How about asking the internet on the date? Maybe go to dinner with the internet or make friends with the internet? Sure you can see the great pyramids on the internet but let’s be real, that’s no substitute for standing in front of them, smelling the air, feeling the sun reflect off of them or touching the stones. So I suppose it’s okay to be disconnected and in some cases, even therapeutic. It’s sad to say but I know people who would have a complete meltdown if they lost their Internet connection for a week or two. If you’re reading this blog post it’s very likely that I don’t know you, but it’s also very likely that he might be one of those people.

Not that you asked for it, but my recommendation would be to pick one day on the weekend to not use the Internet. That means disconnect the data portion on your phone as well because that would be cheating. You’ll survive an entire day without Google maps and even though your “real friends” on Facebook might be scratching their heads at your sudden absence, they too will survive. Just do it as a test and think about that day as it progresses. If you’re not an Internet junkie already, sorry to have made you waste another five minutes of your life on the internet.

SociBook del.icio.us Digg Facebook Google Yahoo Buzz StumbleUpon

How to Identify a Matching SSL Cert and Key

Friday, August 5th, 2011

Sometimes when needing to install or reinstall an SSL cert the key file used to generate the cert becomes misplaced, rendering the certificate useless. This can especially be a problem when installed via a control panel where the key is stored in the underlying filesystem. If multiple requests were generated the key file which was used may not match the one that is currently in place. When attempting to install the certificate you may receive an error that the key file does not match, though it is fairly easy to identify the appropriate key using the OpenSSL command line utility.

To see the full details used for a certificate (such as the Common Name, issuer, expiration date, etc.) you can run the following command against the certificate:

[root@host ssl.crt]# openssl x509 -text -noout -in somedomain.cer

which will produce full details about the certificate in question, including what is referred to as the ‘modulus’. To single out a particular piece of information, you can ‘grep’ for the particular line of output you are looking for, or the command can be modified with the specific parameter, such as:

[root@host ssl.crt]# openssl x509 -subject -noout -in somedomain.cer

will tell what specific hostname(s) the certificate was registered for, while

[root@host ssl.crt]# openssl x509 -enddate -noout -in somedomain.cer

will tell you when the certificate will expire.

The easiest way to identify the particular key file that matches this cert is to look at the modulus:

[root@host ssl.crt]# openssl x509 -modulus -noout -in somedomain.cer

this will produce several lines of output, which in itself can be a bit tricky to compare visually:

Modulus=C81B0D3BB43343E779F34BC6371F3AF4E8F9031FFD6DD01D15B

A9BEC1242008C9EFD468132BA7DFGBC7CFAB9F938BE534F3BDC96EF58FF

4EE640154C6243CE1B1C2787D22306E25E86A9A5F3759B14C2A890F4006

9B975830147E0772337AEC058B8AC2CF3356EEE4F8619FE2FB2F578C4EB

B8D46EB15E47B5E44C28A5C3462D

 

The solution is to pipe this output to the ‘md5sum’ (or simply md5 on some os’s) command:

[root@host ssl.crt]# openssl x509 -modulus -noout -in somedomain.cer | md5sum
cd75b831054e4418f7bf7fe0fc5b609a -
[root@host ssl.crt]#

If you use the same option against the key file you can easily match up the specific one used to generate this cert:

[root@host ssl.crt]# openssl x509 -modulus -noout -in somedomain.cer | md5sum
cd75b831054e4418f7bf7fe0fc5b609a -
[root@host ssl.crt]# openssl rsa -modulus -noout -in ../ssl.key/somedomain.key | md5sum
cd75b831054e4418f7bf7fe0fc5b609a -
[root@host ssl.crt]#

This output is much easier to compare and will only match for the specific files which correspond with each other.

SociBook del.icio.us Digg Facebook Google Yahoo Buzz StumbleUpon

Beer Enthusiasts Beware: Good Beer Here Pt. 2

Thursday, August 4th, 2011

Firstly, you’ll have to excuse my phone’s picture quality, I’ll be getting a new one when my contract is up and you will have the benefit of fabulous photos in the 8 Megapixel dimension.  That being said, I’ve had the chance to go back to Dr. Jekyll’s Beer Lab and have another four beer (Two Dogfish Head, and Two Rahr & Sons) that I’d like to share.

I’ve mentioned Dogfish Head in my other beer article, but Rahr & Sons is a new brew to me.  Rahr is a Fort Worth native brewery, and the two brews I tried were the Texas Red Amber Lager and the Gravel Road German-Style Altbier.  You can get a full list of their brews here. I also tried Dogfish Head’s Palo Santo Marron, and their Indian Brown Ale.

This is the Dogfish Head Indian Brown Ale. It had a sweet start, and a malty body. Slightly hoppy as well. Overall it was very nice, but not my favorite ale.

Rarh’s Texas Red Amber Lager was very tasty. A hint of caramel and a beautiful dark amber color. Malty with a mix of hops. It also had variations of fruit. Overall a good standard ale.

Rahr’s Gravel Road Altbier was nice, but pretty dark. I’m not one for very hoppy brews, but overall it was interesting. Hop Beginning and malt type finish. It tasted a little of chocolate or other roasted flavor.

Dogfish Head’s Palo Santo Marro was the best of the brews I tried this time. It was very malty, only slightly bitter. It was earthy and I could taste the Palo Santo barrel. Caramel and Vanilla flavors popped up as well. Overall it was a very smooth and enjoyable beer.

If you try any of these, comment and let me know how you like them. Overall I enjoyed them, though some more than others. But that is the wonderful aspect of being a beer enthusiast. Finding that beer that makes your soul sing is worth the experience!

SociBook del.icio.us Digg Facebook Google Yahoo Buzz StumbleUpon