Mart Gnosis

The following is a simple how-to guide for installing,
configuring, and running your first vulnerability scan using the
NessusWX Windows client. The instructions do not include in
depth explanations as it is assumed that you are familiar with
benefits of using Nessus and have a general working knowledge of
Windows.

As with any software installation, your results may vary
depending on the machine operating system and patch levels being
used. The installation steps were conducted using of NessusWX
1.4.4 on several Windows operating systems and patch levels
including XP, 2000, and 2003 Server to insure accuracy. It is
recommended that the installation be conducted using the “admin”
account or equivalent to avoid rights issues.

Install NessusWX

• Download and save
  the self-extracting version of NessusWX for Intel platforms from
  http://nessuswx.nessus.org/ to a temp directory on your hard
  drive. (nessuswx-1.4.4-install.exe, 1413KB in size); type='disc'>Double-click NessusWX-1.4.4-install.Exe to start the
  installation process;
• If using XP SP2 you may be
  prompted with a warning message that the publisher could not be
  verified, click
• At the “Welcome to the
  Installation Wizard” screen click
• At the
  “License Agreement” screen read the license terms, check “Yes, I
  agree with all the terms of this license agreement”, click
  ;
• At the “Destination Folder” screen enter
  the desired location for NessusWX, or accept the default of
  C:Program FilesNessusWX, click ;
• At the
  “Setup Type” screen select “Binaries Only”, or if you wish the
  source files included select “Binaries & Source”, click ;

• At the “Program Group” screen select the desired
  program group, or leave at the default of NessusWX, click
  ;
• At the “Ready to Install the Program”
  screen click ;
• At the “Installation
  Complete” screen click .

If the installation process
completed successfully, you now have a NessusWX desktop icon and
Start/Programs/NessusWX menu listing.

Configuration of NessusWX

Before configuring the NessusWX client, you need some
information concerning the Nessus server you will be using.
Please contact you Nessus server administrator for assistance if
needed.

Nessus server IP: _______________________

Nessus port number: _____________________ (default is 1241)

Max simultaneous hosts: __________________ (default is 16)

Max security checks per host: ______________ (default is 10)

Your Nessus login name: __________________

Your Nessus login password: _______________

Maximum simultaneous hosts, and maximum security checks per
host, refers to the number simultaneous scans that will be
performed. It is possible to optimize a Nessus server to support
more then the default settings and to use a different port. If
in this information is not available or unknown use the default
values.

Your Nessus Server administrator has the ability to limit what
IP range(s) you can scan based on your login name. Speak with
your Nessus server administrator and determine what limits, if
any, have been established.

• Upon executing NessusWX you will be
  prompted with the “Settings” screen, “General” tab,requesting
  database directory information. By default NessusWX uses
  C:NessusDB to storescan result. The database location can be a
  network drive if you wish to store results on a network drive
  for security purposes. Select the defaults value or change to
  the desired directory, click
• If the
  directory you selected does not exist, you will be prompted with
  a creation message, click
• Select
  “Communications/Connect” menu option
  type='circle'>Change the default Server “Name”, from the default
  127.0.0.1, to the desired Nessus server; type='circle'>Change the default Server “Port Number”, from
  1241, to the desired Nessus server port if needed; type='circle'>By default, NessusWX selects TLSv1 as encryption
  option;
  • Select “Authentication by Password”
    radio button;
  • Check save password checkbox;

  • Change the default Authentication “Login”
    value to your Nessus login name;
  • Enter your
    Nessus login name password, click type='circle'>You will be prompted with New Server Certificate
    window displaying the Nessus server certificate information,
    click

If the userid/password information you entered is correct, you
will receive a brief message that NessusWX is downloading plugin
information. Upon download completion, something similar to the
following will be displayed at the bottom of the NessusWX screen:

Using

Connection with the server [xxx.xxx.xxx.xxx] established

xxxx plugins loaded

xxxx preferences received

xxxx rules received

You now have a fully functioning copy of NessusWX installed,
have connected to a Nessus Server, and are ready to being
performing vulnerability scans.

Before You Scan

Before performing vulnerability scanning, a few cautions and
recommendations should be considered:

• Make sure you are acting within your
  authority. Most companies have strict policies about who can
  perform vulnerability scanning and on what equipment. Acting
  outside your authority with a vulnerability scanner could lead
  to your dismissal;
• Absent Nessus server based
  rules that limit what IP ranges you can test, obtain written
  permission on what you are and are not permitted to perform
  vulnerability test on;
• Vulnerability scanning
  can leave equipment in an unstable state. This is practically
  true if performing Denial of Service tests and/or testing
  systems are very poorly configured. Nessus vulnerability
  scanning is normally not destructive and rebooting the affected
  equipment will return it to the correct operational state; type='disc'>NessusWX has a selection for “Safe checks” that
  disables the most dangerous scripts from executing and instead
  relies on banners information to determine vulnerability rather
  than exploiting the real flaw. However, it is still possible to
  leave equipment in an unstable state;
• If your
  company uses an intrusion detection system, performing
  vulnerability scanning on the network will most likely trigger
  intrusion alerts. Vulnerability scanning is very “noisy” and
  easily detected by most intrusion detection systems; type='disc'>If you are performing vulnerability scans across the
  internet verify your ISP will not object, that your scanning
  will not trigger their intrusion detection system, and request
  documentation concerning scanning polices and rules that you
  must follow;
• Exercise common sense when
  performing vulnerability scans. For example, it’s most likely
  not a good idea to run a Denial of Services test on your core
  router during normal business hours;
• NEVER SCAN
  EQUIPMENT THAT YOU ARE NOT EXPRESSLY AUTHORIZED TO SCAN. Doing
  so could result in lawsuits, bad press, jail, ISP termination,
  and unemployment just to name a few. Running a Denial of
  Services test against your competitor’s web site for example,
  will most likely result in several unwanted events occurring
  once you and your company are identified as the cause.

Performing Your First Scan

To perform your first vulnerability scan, you must create a
Session (job) outlining the targets and scanning options desired.

• Click menu selection Session/New; type='disc'>You will be prompted to enter a session name or
  accept the default of “Session1″. Enter “First Scan”, leave
  “Define additional properties” checked, click ; type='disc'>At the “Session Properties - Test Scan”, click the
  “Targets” tab, then click ;
• At the “Add
  Target” screen you have the option of entering a single host, a
  subnet, or IP range depending on scanning needs. For our test
  session, select a single IP address and enter the IP or Host
  name of your workstation, click ;
• Click
  .
• Click the “Options” tab:
  type='circle'>Change “Maximum simultaneous” default value if
  needed;
  • Change “Security checks per host”
    default value if needed;
  • “General scan
    options/Enable plugin dependencies”. Nessus uses many plugins
    (tests) that require the use of other plugins to operate
    correctly. Checking this box permits Nessus to automatically
    enable dependencies as needed. For our test scan, “Enable plugin
    dependencies” should be checked;
  • “General scan
    options/Do reverse DNS lookups” simply performs a DNS lookup on
    the target to determine the host name. For our test scan, check
    “Do reverse DNS lookups”;
  • “General scan
    options/Safe checks”. As stated previously, Safe Checks disables
    the most dangerous scripts from executing and instead relies on
    banner information to determine vulnerability rather than
    exploiting the real flaw. For our test scan, leave “Safe checks”
    checked;
  • “General scan options/Optimize the
    test” lets Nessus avoid all apparently irreverent tests. For
    example, tests will not be conducted for web site unless a web
    site is detected. For our test scan, leave “Optimize the test”
    checked;
  • “General scan options/Resolve unknown
    services” will permit Nessus to resolve any unknown services
    that may be operating on the system. For our test scan, leave
    “Resolve unknown services” checked;
  • “Path to
    CGI’s”. Nessus has the ability to check for generic CGI
    vulnerabilities that may be present. For our test scan, leave
    “Path to CGI’s” at the default of “/cgi-bin”; type='circle'>“Interface options” permits you to limit the
    results that are displayed on the screen while scanning is
    occurring. For our test scan, leave both items unchecked to
    display the maximum amount of information; type='circle'>Click .
• Click the
  “Port scan” tab:
  • “Port range to scan”
    permits you to enter the ports Nessus will scan. For our test
    scan, we will use the default of “Privileged ports (1-1024)”;

  • “Port scanners” permits the use of a wide
    range of port scanners depending on your needs. For our test
    scan, leave the default of “Ping the report host” and “tcp
    connect scan” checked.
  • Click .
• Click the “Connection” tab will permit you to
  enter and store specifics about the Nessus server to be used for
  the session. Since we are currently connected to a specific
  Nessus server, no need exists to enter this information for our
  test scan;
• Click the “Plugins” tab:
  type='circle'>To test for system vulnerability we must enable
  plugins. Check the “Use session-specific plugin” checkbox. You
  will notice that currently “0 plugins currently are selected for
  execution”;
  • Click the “Select plugins” button
    to display the “Plugin List” screen. For our test scan, click
    the “Enable All” button, click , when prompted with “Do you
    wish to enable all port scanners as well”, click . You
    will notice that 2400 or so plugins are now selected for
    execution;
  • Click .
  type='disc'>Click the “Comments” tab and input any remarks you
  have concerning this session or its settings, then click to
  save your Session;

To execute the Session, right-click on the icon and then select
. When prompted at the “Execute Session” screen simply
click Execute and vulnerability scanning will commence.

Closing

Take some time, experiment, and learn what NessusWX and Nessus
have to offer. Patch systems and rescan to verify vulnerability
have been closed. Using NessusWX and Nessus will permit you to
find system vulnerabilities before hackers and virus/worm
writers have opportunity to do it for you.

Why learn about medicinal plants? Certainly, backpackers shouldn’t leave the first aid kit home, but it can be useful and interesting to know a few plant medicines too. Whether you are someday in a survival situation, or you just lost your first aid kit and have a terrible headache, wouldn’t it be nice to find relief nearby?

You can. There are many effective medicinal plants. Some are also dangerous, of course, just like synthetic medicines can be. I won’t discuss those here. This is a quick guide to a few safe plant medicines.

Plants For Pain Relief

Fill the bottom of a cup with shredded willow bark, and make a cup of tea with it. Let it steep for a few minutes before you drink it. The active ingredient is salicin, closely related to salacylic acid, which is used to make aspirin. You can also try chewing on a few balsam poplar buds.

Antiseptic Plants

Sap from “blisters” on balsam firs is a strong antiseptic. Pop the blisters on the trunks of young trees, and the sap will ooze out. You can spread it over cuts and small wounds to prevent infection. It is very sticky, however, and it will be difficult to wash off (at least it smells nice).

The crushed leaves of Saint John’s Wort can be used as an antiseptic dressing as well. I once put a wad of the mashed leaves on a nasty gash in my foot, replacing it occasionally, and the cut healed faster than I’ve ever seen a cut heal. St. Johnswort has anti-bacterial, anti-viral and anti-fungal properties.

Medicinal Plants For Diarrhea

You can drink tea made from the roots of blackberries and their relatives to stop diarrhea. Just fill the bottom of the cup with the cleaned and shredded roots and pour boiling water over them. Let the mix steep for five minutes before drinking.

Oak bark and other barks containing tannin are also effective. I have also used the twigs to stop diarrhea when I was backpacking in Mexico. Make tea with a spoonful of the bark or chopped-up twigs. Tannins can be hard on the kidneys, so drink just one cup of tea, or use oak only if you don’t have other options.

Skin Medications

You can relieve the itch from insect bites, sunburn, or plant poisoning rashes by applying a poultice of jewelweed (Impatiens biflora). I have seen a poison ivy rash cleared up overnight using the juice from jewelweed. It is also said to work on sunburn as well as aloe vera.

Make a tea of witch hazel leaves (Hamamelis virginiana), and you can use it for relief from insect bites, and sunburn. Witch Hazel used to be a common astringent that women used as a “tightening” face wash.

There are hundreds of wild medicinal plants that could be useful to hikers and backpackers. You don’t need to become an expert to benefit from them. Just learn to identify and use a few of the most widespread and safest ones.

Steve Gillman is a long-time advocate of lightweight backpacking. For more on medicinal plants, plus tips, photos, stories and a new Wilderness Survival Guide, visit The Ultralight Backpacking Site: www.The-Ultralight-Site.com

Fishing is oftentimes considered a lone hobby; the reclusive fishing fanatic leaving his house early hours on a cold winter day in order to seek out some discrete spot by a river, with a flaskful of coffee. Even though this particular caricature is pretty well drawn for a good number of angling fanatics, it is at the same time a really inaccurate picture of the majority of angling hobbyists, as they see angling as a people-facing activity, getting involved in a social group and at the same time being a marvelous reason to travel the United Kingdom and even worldwide by getting involved in angling trips.

Not only that, but angling competitions can be found up and down the country - these being a fantastic reason to meet new people and discover new fishing tips, while creating the perfect reason to go on a mini vacation. As a matter of dact, there are people who state that angling is merely a reason to go on minibreaks and meet people! Nevertheless, angling is nonetheless considered a serious pasttime by many of its enthusiasts and they’re motivated by the social aspect principally to learn more about fishing through exchanging tips and tricks with fellow people.

Over the last 10 years or so, the net has genuinely aided in the growth of the angling communities - via MySpace, Facebook etc, it’s now painless to coordinate or just attend a fishing competition or informal meet-up, while exchanging handy tips and tricks on blogs and forums.

In terms of angling gear the web has certainly helped anglers in hunting down the best tackle, rod, reel, fishing baits etc due to the fact that these days they can weigh up prices and products with a myriad of e-commerce websites rather than just being limited to their local fishing shop.

Opthalmologists need a lot more than professional knowledge, more important even than all their training and experience — for beyond this what they really require preeminently is sure to be specialist instruments to help them get solutions as rapidly and precisely as possible. Let us use as examples a trio of required pieces of equipment — covering diagnosis, patient comfort, and equipment storage, and key points to remember when buying these and similar items, whether they’re remanufactured, used, refurbished or brand new.

Used to measure intraocular pressure, tonometers can be had in many different styles like applanation, non-contact, digital, handheld disposable, and pocket models. In alignment with your needs you might use only one style or employ a combination of varying models. Be sure that the tonometers you choose to use are top-notch quality. The diagnostic task becomes significantly smoother if you have both precision and ease of use with this class of ophthalmic equipment. Getting the patient at the best angle to carry out a full examination is not easy and must be accomplished afresh with every patient. Comfort in addition to flexibility should consequently be considered during the process of selecting the exam chairs that you want. Search for fully adjustable exam chairs capable of raising and lowering even the largest patient until they are at the perfect height. The patient must be supported by his exam chair to make his exam as comfortable as can be. Long appointments will prove why this is so critical.

All optometry equipment has to be stored, and for preference somewhere which can be got at easily when needed. Normally this means a collection of treatment cabinets that boasts certain mandatory characteristics: secure locks, leveling glides in case of unsteady flooring, and suchlike. These cabinets are simple to bring to whichever area of your practice currently needs them and to carry the instruments you’ll find that you use. Make sure to secure a cabinet that will not be too hefty to re-position easily.

Just three of the items of optometry equipment that may affect how well you do your job are the exam chair, the tonometer, and the treatment cabinet. Accordingly, embark upon your ordering of instruments only after establishing what you definitely require. Unwieldy or imprecise gear will only vex you, whereas the more intuitive to handle and the more useful your instrumentation the better your performance is going to be. The level of efficiency that the right choice can furnish your practice with will awe you!

Thus, the decisions you make in terms of your equipment can have a considerable effect on your performance in your professional task in general, and, let’s remember, on the long term strength of your practice.

In a recent announcement, Virgin Media has declared the launch of a speedier broadband (7.2Mb) for its customers. Until now, the advertised speed of Virgin Media has been 3.6Mb. Orange, 3 and O2 also offer the same speed, with Vodafone being an exception. Vodafone provides speeds of 7.2Mb, and now Virgin Media is planning to catch up with Vodafone with its new offering.

A user can enjoy this faster connection from Virgin with a new dongle that can support 7.2Mb speeds. One can get the dongle on either an 18-month contract or a 1-month rolling contract. The monthly data usage will vary from 1GB to 3GB.

According to Virgin, the new dongle will enable users to watch video clips on YouTube or listen to iPlayer. However, if a user wants to watch a TV soap opera like Eastenders, then the connection may pose some problems, though buffering will be considerably less when compared to other connections.

However, one has to remember that 7.2Mb will only be the advertised speed. Speed will greatly depend on user traffic, so not every user may be able to enjoy a fast connection.

Still, Virgin is quite optimistic about its new offering. Executive director of mobile at Virgin Media Graeme Oxby said in this regard that Virgin is proud to provide 7.2Mb speeds to its customers. He stressed on the advantages of mobile broadband over fixed-line and wireless connections, and expressed his hope that mobile broadband at 7.2Mb will prove to be immensely beneficial for customers.

At present the 7.2Mb dongle will be available on a monthly rolling contract or alternatively for 18 months, with data limits set at 1GB or 3GB per month. To compare the current range of mobile broadband prices, see Mobile Broadband Genie’s comparison table for the latest broadband offers, such as pay as you go dongle and other top broadband packages.

This is craziness and also the topic of this article. There are a few requirements I have to tell you about first. You need an average wind speed of at least 8 mph or you’re chancing wasting your time. Just because the cost of wind power has gone down to an insane degree, doesn’t mean the basic principles of a windmill changed. You still won’t get a sufficient amount of energy with less annual wind speed than 8 mph. Therefore, it is a hard call to determine which form of alternative energy sources on which we should focus our resources available and further, especially effective global development. What is called ?intermittency? is a very important issue concerning the application of wind energy to replace significant amounts of alternative electrical production. One of the concerns when considering wide-spread wind power is the unpredictability of the wind. Unfortunately, despite all of the advances technology has made concerning the weather ? you can not count on predictions to always be accurate ? even with the highest quality equipment. Inside the alternator/generator it is the effect of magnets moving around a piece of electrical wire that forces electrons to move through the wire — and there we have it, electricity. In most cases the electricity is then stored in a bank of batteries, ready for use by whatever systems are connected into it. You can also setup what is known as a ‘dump load’, so that when the batteries are full the excess electricity being generated is used to heat hot water or provide some kind of lighting — basically, you are ensuring that none of the generated electricity gets wasted. The last step is ensuring that we can make use of the electricity we have stored.

Source: Home Wind Power

Visit and surf to this marvelous source for Trilegiant facts.

Among the most famous of the American third-party businesses managing and offering loyalty and club membership schemes is a company known as Trilegiant. Working with several service brands, several of them you’d consider some of the largest names in health, entertainment, retail, consumer protection organizations and many more — Trilegiant strives to streamline their members’ purchasing experience.

It would be fair to say that Trilegiant and Nathaniel Lipman have experience aplenty. Coming from the state of Connecticut, the firm opened more than thirty five years ago and has grown until it boasts influence in six states, 8 sites, and approximately three thousand knowledgeable staff members. Upwards of twenty five million members distributed throughout the USA use the company’s initiatives as of now.

The reputation of Nathaniel Lipman’s company stems from risk free packages, making it easier for consumers to make savings and obtain quality products and services. Take a look at this example — inexpensive insurance for long term warranties, return guarantees, and repair costs which can all be purchased using Buyers Advantage. Trilegiant also, of course, offer other programs like HealthSaver — which offers inexpensive healthcare with no drop in quality — just to look at a single example. It is the times when it turns its attention to the community that Trilegiant’s dream shows its true colours. Individual events organized inside the firm even by small scale groups of the workforce often generate charitable donations of thirty thousand dollars in only 5 days — without question an achievement worth paying attention to. Trilegiant also tries to assist via research analysis. As you probably know, year to year private companies in association with the American government collect a remarkable profusion of important data. Trilegiant scrutinizes these statistics diligently to identify issues and then considers how to improve them. To take one example, the total number of automobile collisions in the United States in any given year is several million.

So how do you minimize your chances of becoming part of these unpalatable statistics? Three years ago at the time of writing, the Autovantage car club discount company began releasing annual road rage surveys. Here, the club reveals essential and eye-opening information calculated to raise public awareness regarding these important topics.

Helping the population you come from is important, even if most companies don’t know it; Trilegiant is happy to count itself as one of the businesses showing awareness. Offering initiatives designed to enhance the general public’ retail experiences and an honest dedication to important causes they make it clear heart is in the right place. To sum up, they are the ideal community minded business.

Fannie May attribute their astounding expansion to top notch quality and fantastic service. It all started in the Windy City in 1920. Pushing forward this celebrated business has expanded from a single shop to a thriving organization furnishing the Midwestern US with delicious chocolates.

Fannie May’s gift of mixing cocoa, sugar and other ingredients in precisely the right way made them so popular they grew to just under 48 outlets in only 15 years. As an interesting aside the staff were so devoted to the quality of its candies they preferred to close their doors rather than change their chocolates during the food shortage of WWII. Luckily for us, many of the recipes it used back in the early days are being produced and on sale nowadays. As you’d expect, the chocolates come beautifully presented. Exquisite presentation boxes add that special flourish to make a gift anyone will appreciate. You could send a small box or tin for anniversaries or as a thank you, or even choose a giant tower of delicacies for a friend, loved one, or business contact. There are many extraordinary gifts in the internet store, or you can buy specific centers and then decide which box is most suitable.

To make life even easier, Fannie May has a solid network of branches all over the nation and around the world. This makes it feasible for you to send these celebrated candies throughout the country and internationally without ever having to leave the comfort of your home. There are a few chocolates that are not recommended for delivery during hot weather, nevertheless Fannie May has the business network to deliver all sorts of their products all over the world.

Even if you have diabetes or are unfortunate enough to have allergies, there’s chocolate that is for your dietary requirements. Fannie May’s have diet friendly candies and many other delicacies as well. If you are organizing a special occasion like a marriage, individual table gifts and wedding favors are available too. Pick up the phone or drop them an e-mail with your plans and ideas. You can see the reason why Fannies May’s chocolates are such a successful company. In fact, the only tough task will probably be selecting from the tremendous variety of options available. With every sweet treat imaginable from peppermint to vanilla to be had for the asking, you’re bound to get exactly what you are looking for.

Digital content publishing has recently emerged as an influential contender in the publishing world. Countless print publications now offer up computerised versions, such as eBooks, digital magazines as well as newspapers. As a fantastic alternative to classic methods, publishing software is clearly a fine choice for copywriters.

Digital publishing has ended up in the steady development of electronic libraries, containing research publications online text articles and additionally literary deeds.

The fantastic development of digital publishing has introduced a large number of readers to brand new ways of looking at reading material. Formerly with the only real choice of reading with a laptop monitor there now is an emerging market for devices connected with digitised magazine publishing. For example, within its Aug 30th 2009 edition, Publisher’s Weekly reviewed a dozen pieces of hardware specifically designed for reading electronic content. Although rather new, this specific marriage of technology and also the written word has only begun.

Electronic publishing houses offer a extensive range of magazines to an even broader audience of readers. With an unknown selection of electronic titles the force of this arena could be strong. A number of epublishers, online shops and private writers have simply captured audiences in speciality areas that may be very difficult to reach with classical ways of news publishing as well as providing already established magazine readers with the extra convenience of purchasing digitised publications on-line for immediate download.

A large number of groups have aired their collective concerns that digital publishing takes value from both traditional books as well as reading. These individuals put forward that reading digitized words on a screen cannot replace the shear delight that comes from looking over text and also thinking about every flip of the page. Other people might well be a lot less concerned about the visceral act of reading, finding themselves more worried by the hurdles of technology.

With less costs needed, a lot fewer wasted natural resources and also no qualms about providing storage for surplus publications electronic publishing has proven to be an affordable alternative to issuing traditionally printed works. Consumers benefit from significantly less expensive reading material that can be read at their own convenience. In all likelihood, electronic publishing may not supplant printed works, however its persistent growth could well be a continual balancing act. Digital publishing will continue to establish itself as the connection betwixt the power of technology and the power of the written word.

As the prices of groceries and fuels are skyrocketing, people are now looking for different ways for making extra cash. One way for making money is selling scrap gold that is no longer in use.

In addition, people, who are selling gold for the first time will be astonished to know its credibility in the market. Moreover, there are various ways to obtain cash for gold. In fact, it is a simple procedure.

First, interested individuals have to determine the worthiness of their scrap gold and old gold jewelries. People may check for the same with various online auctioning sites also.

If the gold items have good value, it is necessary to evaluate it. Individuals may go to any local jewelry shop especially the one, which specializes in old and used gold jewelries. Evaluation will help in determining as to what extent the scrap and old gold jewelry is worth.

Individuals need to be aware of the fees they need to pay for evaluation to determine the value of their gold items.

Individuals may even contact any local pawnshops, as these shops are interested to sell gold and thereby proffer decent cash for gold. It is also beneficial to deal with a well-recognized gold buyer to obtain cash for gold.