LINKS TO USEFUL SITES
Arranged in logical groupings are the sites that we often
reference for useful information when developing software, Web sites, etc.
Feel free to let us know at
BSM Development
if there are sites such as these that you just love. We'd like to hear
about them and add them to our list. Also, let us know if you find any
dead links so that we can correct them.
Security
CERT
|
CERT Coordination Center
The center of Internet security expertise, located at the
Software Engineering Institute of Carnegie Mellon University. Handles
computer security incidents and vulnerabilities, publishes security
alerts, researches long-term changes in networked systems, and develops
information and training to help improve site security.
|
|
esecurityplanet.com
|
eSecurity PLANET
Security news, trends, products and resources. Can sign
up for eSecurity PLANET newsletter (however, prepare to be spammed to a
certain extent, since it is a subsidiary of internet.com which,
"Results-oriented marketers of technology products and services rely on
... to help build their brands, generate leads and make sales").
|
|
schneier.com
|
Schneier on Security
A blog covering security and security technology.
|
|
news.hitb.org
|
hack in the box
Hack In The Box provides a different perspective on security news, from
Kuala Lumpur.
|
|
www.anl.gov/.../maxims.pdf
|
Vulnerability Assessment Team
Security Maxims by Roger G. Johnston, Ph.D., CPP, from the Argonne National
Laboratory, Nuclear Engineering Division. "While these security maxims are
not theorems nor absolute truth, they are in our experience essentially valid
80-90% of the time in physical security and nuclear safeguards. They probably
also have considerable applicability to cyber security."
|
|
gnupg.org
|
GnuPG
The GNU project's complete and free implementation of the OpenPGP standard
as defined by RFC4880. GnuPG allows you to encrypt and sign your data and
communication, features a versatile key managment system as well as access
modules for all kind of public key directories.
|
|
openpgp.org
|
OpenPGP
is the most widely used email encryption standard, defined by the OpenPGP
Working Group of the Internet Engineering Task Force (IETF) and as a
Proposed Standard in RFC 4880. OpenPGP was originally derived from
Phil Zimmermann's PGP software. Its main purpose is end-to-end
encryption of email communication but it is also utilized for encrypted
messaging and other applications such as password managers.
|
|
tldp.org/HOWTO/Firewall
|
The Linux Documentation Project
Firewall and Proxy Server HowTo. A document designed to describe the
basics of firewall systems and give you some detail on setting up both
a filtering and proxy firewall on a Linux based system.
|
|
sourceforge.net/.../narc
|
Netfilter Automatic Rule Configurator
A free firewalling package for Netfilter/Iptables released under the BSD
license that attempts to simplify the setup of a firewall (stateful packet
filter) via the iptables tools. An old project but still working great for
us.
|
Anti Virus
clamav.net/
|
ClamAV
An open source anti-virus engine, designed especially for e-mail
scanning on mail gateways. It provides a number of utilities including a
flexible and scalable multi-threaded daemon, a command line scanner and
advanced tool for automatic database updates.
|
|
us.norton.com/antivirus
|
Norton AntiVirus
Antivirus software and malware protection, browser protection and
intrusion prevention, for MicroSoft Operating Systems. Yearly
subscription.
|
|
avast.com
|
Free anti-malware software that protects against viruses and ransomware.
Works on Windows, Mac, Android and iPhone.
|
cauce.org
|
CAUCE
The Coalition Against Unsolicited Commercial Email is an
ad hoc, all volunteer organization, created by Netizens to advocate for a
legislative solution to the problem of UCE (a.k.a. "spam").
|
|
spamhaus.org
|
Spamhaus
Maintains a number of blacklists of known spammers and phishing IP addresses
that can be employed by mail transport agents (MTAs) to block unwanted
email. Use by low volume MTAs is free while use by ISPs and corporate
networks requires a subscription. The lists are maintained in real time by
a network of reporting agents as well as a worldwide group of investigators.
|
|
spamhaus.org/rokso
|
ROKSO
Collates information and evidence on known, professional spam operations.
80% of the spam received by Internet users can be traced to the
approximately 100 known spam operations listed in the ROKSO database.
|
|
spamassassin.apache.org
|
SpamAssassin
The Apache SpamAssassin Project. The powerful, number one, open-source
spam filter.
|
|
sourceforge.net/.../razor
|
A distributed, collaborative, spam detection and filtering network. It
establishes a constantly updated catalogue of spam in propagation. This
catalogue is used by clients to filter out known spam.
|
|
dcc-servers.net/dcc
|
Distributed Checksum Clearinghouses
An anti-spam content filter that involves millions of users and hundreds
of thousands of client computer systems collecting and counting checksums
related to hundreds of millions of email messages each day. The counts
are used by MTAs to filter spam, their being particularly useful in
identifying spam with minor variations, including "personalizations."
|
tldp.org
|
The Linux Documentation Project
HOWTOs (subject-specific help), Guides (longer, in-depth books),
FAQs (Frequently Asked Questions) and man pages (help on individual
commands).
|
|
centos.org
|
CentOS (Community Enterprise Operating System) is an Enterprise-class
Linux Distribution derived from sources freely provided to the public
by a prominent North American Enterprise Linux vendor. It conforms
fully with the upstream vendor's redistribution policy and aims to be
100% binary compatible. CentOS is free.
|
|
redhat.com
|
The leading enterprise, open-source Linux operating system. Deploy open
systems across multiple clouds using Kubernetes and their automation
platform. Features a container image registry, a cloud storage platform,
cloud infrastructure tools, and a platform and suite of tools for cloud
development.
|
|
ubuntu.com
|
Ubuntu is a modern, enterprise, Linux-based operating system that is
optimised for public clouds as well as workstations and desktops. It
features open-source security, multi-cloud Kubernetes and containers,
data-center automation and smart robots.
|
|
rpmfind.net
|
RPMs (pre-built packages) for major Linux distributions such as CentOS and
RedHat.
|
Freeware
directory.fsf.org
|
Free Software Directory
of GNU and other free software, with a searchable directory tree, maintained
by the Free Software Foundation.
|
|
sourceforge.net
|
SourceForge is the global technology community’s hub for Open Source and
business software exchange. It has hundreds of thousands of Open Source
projects and is used by millions of users. It is software for developers
by developers. Searchable and browseable.
|
File Systems/Databases
samba.org/samba
|
samba
Opening Windows to a Wider World. An Open Source/Free Software suite that
provides seamless file and print services to all manner of SMB/CIFS clients
of Linux/Unix operating systems, including the numerous versions of
Microsoft Windows operating systems.
|
|
mysql.com
|
The world's most popular open source database. SQL database server. Now
a subsidiary of Oracle but the Community Edition is still open source.
|
|
sqlite.org
|
A C-language library that implements a small, fast, self-contained,
high-reliability, full-featured, SQL database engine. SQLite is the most
used database engine in the world and is built into all mobile phones and
most computers and comes bundled inside countless other applications that
people use every day. Its file format is stable, cross-platform, and
backwards compatible and the developers pledge to keep it that way through
at least the year 2050. The source code is in the public-domain and is
free to everyone to use for any purpose.
|
|
oracle.com/.../berkeley-db/...
|
Oracle Berkeley DB is the industry-leading open source, embeddable database
engine that provides developers with fast, reliable, local persistence with
zero administration. Oracle Berkeley DB is a library that links directly
into your application. Your application makes simple function calls, rather
than sending messages to a remote server, eliminating the performance
penalty of client-server architectures.
|
|
oss.oetiker.ch/rrdtool
|
RRDTool
RRDtool is the OpenSource industry standard, high performance data logging
and graphing system for time series data. Use it to write custom
monitoring shell scripts or create whole applications using its Perl,
Python, Ruby, lua or tcl bindings. An interface for PHP is also
available.
|
Printing
cups.org
|
Common UNIX Printing System
CUPS is the standards-based, open source printing system developed by
Easy Software Products (now Apple Inc.) for Mac OS X and UNIX-like
operating systems.
|
Hardware Vendors
Hardware
wimsbios.com
|
Wim's BIOS Page
Answers BIOS questions, provides BIOS upgrades and flash programs, lists
manufacturers. BIOS questions? Start here.
|
|
elfqrin.com/docs/biospw
|
How to Bypass BIOS Passwords.
|
|
bootdisk.com
|
Boot disks, drivers, network drivers, Windows how to guides.
|
|
wireshark.org
|
WIRESHARK
The world's foremost network protocol analyzer. It is the de facto (and
often de jure) standard across many enterprises, government agencies, and
educational institutions.
|
|
allpinouts.org
|
AllPinouts
Collects information about hardware interfaces of modern and obsolete
hardware, including pinouts of ports, expansion slots, and other
connectors of computers and different digital devices (i.e. Cellular
Phones, GPS, PDA, Game Consoles, etc.). If you need information on a
computer or digital device cable or plug, this is the place to look.
|
asterisk.org
|
Asterisk
Open source telephone switch software that can be used to build a custom
analog switch, IP PBX, VOIP gateway or conference server. Asterisk is
used by SMBs, enterprises, call centers, carriers and governments
worldwide.
|
|
sangoma.com/telephony-cards
|
SANG*MA
Premium quality,
dependable analog, digital and hybrid telephony cards,
used in Asterisk-based phone systems, suppotying a wide range of
protocols, including Analog, PRI, BRI, CAS MFCR2, SS7, and WAN.
|
|
openvox.cn
https://www.openvox.cn/products/telephony-cards/analog-cards
|
Open source telephony hardware for the small and medium business, and open
source market that lowers communication costs, increases system flexibility
and enhances productivity in building PBX, Call Center and IVR applications.
|
Internet
ietf.org/rfc
|
I E T F
Internet Engineering Task Force RFC directory.
|
|
iana.com
|
Internet Assigned Numbers Authority. Dedicated to
preserving the central coordinating functions of the global Internet for
the public good.
|
|
icann.org
|
I C A N N
Internet Corporation for Assigned Names and Numbers. The
technical coordination body for the Internet.
|
cpan.org
|
CPAN
All things Perl: documentation; module downloads; scripts; binary ports;
source.
|
|
strawberryperl.com
|
Strawberry Perl is a Perl environment for Windows containing all you need
to run and develop Perl applications. It is designed to be as close as
possible to the Perl environment on UNIX systems.
|
|
metacpan.org/DBD::SQLite
|
DBD::SQLite is a Perl DBI driver for SQLite, that includes everthing that
is in the SQLite distribution. So, in order to get a fast transaction
capable RDBMS working for your Perl project, you simply have to install
this module, and nothing else.
|
|
metacpan.org/BerkeleyDB
|
Documentation for the Perl extensions for Berkeley DB version 2, 3, 4, 5
or 6.
|
Sendmail
sendmail.org
|
sendmail.org
Web site maintained by Proofpoint for the freeware version of sendmail.
The latest sendmail source is at
ftp://ftp.sendmail.org/pub/sendmail/.
|
|
fetchmail.info
|
Software to fetch mail from a POP or other mail server and remail it on
a local machine via sendmail. Polled mail fetching for dialup or secure
installations.
|
|
dovecot.org
|
An open source IMAP and POP3 server for Linux/UNIX-like systems, written
with security primarily in mind. It is an excellent choice for both small
and large installations. It's fast, simple to set up, requires no special
administration and it uses very little memory.
|
Domain Name Registration
internic.net
|
InterNIC
Provides public information regarding Internet domain
name registration services.
|
|
networksolutions.com
|
network solutions
The original domain name registrar. Has a good whois. Prices are reduced
substantially from what they used to was.
|
|
Cheap-DomainRegistration.com
|
CHEAP-DOMAIN REGISTRATION
The cheapest prices. $8.99 domain registration. Free parking, free URL
forwarding, free domain name generator software and more. Actually run by
Bob Parsons & Co., under the covers. Why pay more?
|
|
GoDaddy.com
|
Cheap domain registrations and SSL certificates. Plus, Danica Patrick is
still one of their pitchwomen. How can you go wrong?
|
Dynamic DNS
dynu.com
|
Free, easy to use dynamic DNS. Complete control of your domain name.
Reliable DNS uptime through redundant, geographically separated DNS
servers. Port 80 redirection. Subdomains as well as MX records;
virtually all types of DNS records. Good support and willing to work with
you to add features that you need.
|
|
no-ip.com
|
Free dynamic DNS solution. Dynamic DNS update client tracks changing IP.
Easy remote access any Internet connected device. Integrated into numerous
edge routers.
|
Web Server Software
apache.org
|
The Apache HTTP Server Project is an effort to develop
and maintain an open-source HTTP server for various modern desktop and
server operating systems, such as UNIX and Windows NT. The goal of this
project is to provide a secure, efficient and extensible server which
provides HTTP services in sync with the current HTTP standards. It has
been the most popular Web server on the Internet since April 1996
|
|
php.net
|
PHP is a widely-used general-purpose scripting language that is especially
suited for Web development, and can be embedded into HTML. Fast, flexible
and pragmatic, PHP powers everything from your blog to the most popular
websites in the world.
|
Web Reference
.w3schools.com
|
w3schools.com
The world's largest Web developer site. Tutorials, reference material,
examples and exercises.
|
|
developer.mozilla.org
|
Mozilla Developer Network documentation includes a variety of references
to guide and assist with the development of Web-based software. But,
after Mitchell pulled the plug on 20 Aug 11 and laid off most of the
people involved, we'll see how long this continues to be the case. We'll
also see how long Firefox stays with us....
|
|
w3.org/Protocols
|
W3C
HTTP has been in use by the World Wide Web since 1990 and
its use has increased steadily over the years, mainly because it has
proven useful as a generic middleware protocol.
|
|
validator.w3.org
|
W3C
Markup Validation Service, a free service that checks documents like HTML
and XHTML for conformance to W3C Recommendations and other standards.
|
MIME Types Reference