I use my PDA in client mode to connect to an access point, but Idon't have a particularly good signal quality and I often need to readjust the position of the PDA and its antenna. Unfortunately mycomputer is not in sight of the PDA and I had to keep going backwardsand forwards from my computer to the laptop making adjustments thenchecking the signal strength on the screen of my computer. This cantake ages to to set up properly, so I decided to get my computer to usethe "festival" speech synthesis program to tell me what the currentsignal level is.

#! /bin/bash
# Use "festival" to say out loud how much signal strength we have

# The IP address of the PDA
ip_addr="192.168.1.1"

# The username and password for the PDA

user="root"
pass="admin"

DOWNLOAD FULL SCRIPT
  fi
done

This works by using the same process as the 'Status-->Wireless'page i.e. it gets a chunk of data by wget'ing theStatus_Wireless.live.asp page from the PDA then running awk to get therelevant chunk of data (the signal strength) and then piping that intothe festival speech engine.

Now I just run this script and turn up the volume on my computer when I need to move the antenna.

Thanks...

Here is script that can give the list of IP addresses and hostnames that are used for wireless clients
Note: Only work if you get an IP address from DHCP

SCRIPT :

 # mkdir -p /tmp/www
 while [ 1 ];
  do
  wl assoclist | awk '{print tolower($2)}' > /tmp/assocLIST
  # echo "<meta http-equiv="refresh" content="10"><b>Hostnames and IP addresses of WLAN clients</b> (last update: $(date))<p>" > /tmp/www/wlan.html
  while read assocLINE
   do
     dumpleases | awk '/'"$assocLINE"'/ {print "Hostname: " $1, "MAC: " $2, "IP: " $3}'
   # echo "<br>";
        done < /tmp/assocLIST     # >> /tmp/www/wlan.html
  sleep 10;
done;

Output:

Hostname: tp MAC: 01:81:18:3d:49:5e IP: 192.168.2.101

You can change the order of "$1, $2, $3" or cut-out:

... awk '{print $1,$3}'

Output:

tp 192.168.2.101

A QUESTIONS FOR YOU :->


"How can I output the signal strength (wl rssi ) at the sametime by feeding MAC Addr from assoclist without typing MAC addr eachtime in telnet?"

 Thanks...

All info about telnet n ssh and command line interface....

Using Telnet

1. Open the command prompt and type "telnet" (On Windows vista/7 you will need to install it from "programs and features").
2. connect to <Router_LAN_IP> e.g. 192.168.1.1 so in the command prompt, this would look like:

telnet 192.168.1.1

1. When asked for the username, enter root (even if you changed username in web interface)
2. When asked for the password, enter your router's password (default "admin")
   

SSH

Overview

SSH, or Secure Shell, is an encrypted protocol and associatedprogram intended to replace telnet. It can also be used for creatingsecure tunnels, somewhat akin to Virtual Private Networks, and for useas a network file system (Sshfs). Unless changed, everything SSH operates on port 22.
SSH operates just as telnet with a user/password combination oron a Public/Private key infastructure. For the latter to work, a smallpublic key is given to the server and the server gives your client itspublic key. Your client encrypts information to the server using theservers public key and the server encrypts information sent to youusing your public key. Private keys are never exchanged, and are usedto decrypt the information encrypted with the associated public key.
The DD-WRT firmware can use user/pass logon or only allowsconnections from clients whose public keys are manually entered via theweb interface. Multiple keys can be entered by placing them on separatelines.
If you want to use user/password to login using SSH use user "root" with the password you set in the webinterface
Actually you can manually set (via telnet or ssh) the sshd_authorized_keys nvram variable.ie nvram set sshd_authorized_keys=key1 key2 key3 etc
You can also manually edit /tmp/root/.ssh/authorized_keys and add keys (although these will disappear on a reboot unless you have a startup script altering them).
It is worth pointing out ssh keys are quite long strings of characters so if you paste them in youhave to be careful that you don't get any line breaks (ie it is one Long continuous line).or they will not work.

Setting Up

Public key method

Public key authentication is one of the most secure methods oflogging into SSH. It functions similar to HTTPS, as all transmissionsare encrypted with a key that only the client and server will have.Another plus...if you use this method instead of passwordauthentication, no one will be able to crack away at your router tryingto guess the password!
To enable it, first you should generate a Public/Private keypair on your desktop machine. This can be done through the "Puttygen"utility if you're using either Putty or WinSCP as clients. Copy the public keyto the clipboard and save the private key somewhere on your computer.There is no need to save the public key. If you forget it, you caninstruct Puttygento open your private key file rather than generating a new key pair andit will tell you your public key. Users of non-windows environments mayuse the ssh-keygen(1) utility:

user@machine:~> ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/home/user/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/user/.ssh/id_rsa.
Your public key has been saved in /home/user/.ssh/id_rsa.pub.
The key fingerprint is:
68:1c:50:0e:76:c1:d0:c7:9e:5e:5a:65:78:20:5c:fb user@machine.example.com

It is recommended that you don't secure your key pair with apassword, as this will make things easier for you, although somewhatless secure.

1. Using the Web Interface, go to the Administration tab. (in v24 use Services tab)
2. Under the Services sub-tab, Enable SSHd in the Secure Shell section. If new options don't appear, Save Settings
3. Paste your public key in the authorized key of the SSHD section that has now expanded. You will need to generate this on your desktop if you don't have one yet.
4. Save and Apply Settings

NOTE: The format of the public key when pasted has to be "ssh-rsa",space, key, space, comment. Here is an example: (please note that thereshould be no line feed at the end)

 ssh-rsa AAAAB4NfaC3yc5 ... jZfYmBTi7Q== rsa-key-20101024

Alternate method:

Connect with ssh (login/password :0)
root@wrt54g:~# nvram set sshd_authorized_keys='ssh-rsa AAAAB4NfaC3yc5 ... jZfYmBTi7Q==  rsa-key-20101024'
root@wrt54g:~# nvram commit
root@wrt54g:~# reboot

Remember to enter your key as an entire characters line (no space, tab...)

In Putty, you can enable key authentication by opening theSSH authentication configuration (Connection -> SSH -> Auth) andentering or browsing to your private key file. Also make sure yourauto-login username is root (in Connection -> Data).

Password Login method

If you don't want the hassle of generating ssh keys, you may use thepassword logon method. However, please be aware that this method ismuch less secure! (passwords may be truncated to 8 characters or less)

1. Using the Web Interface, go to the Administration tab. (in v24 use Services tab)
2. Under the Services sub-tab, Enable SSHd in the Secure Shell section. If new options don't appear, Save Settings
3. Enable Password Login to enable the password login
4. Save and Apply Settings

After this you may login as user "root" with the password you set for the webinterface

Automatic Login (for shell scripts)

The Dropbear SSH client allows you to specify the password throughan environment variable. This is useful when you need dd-wrt toauto-login to another host via SSH.

#the following requires dd-wrt v24 or later
DROPBEAR_PASSWORD='my password' ssh user@hostname

Security Tips

• Choose a random, non-standard port number >1024, especiallyif you enabled SSH access from the Internet! Most attackers will use aport scanner that only scans for common open ports by default. Scanningall 65535 ports is much slower for them, which makes it more difficultto find an attack vector and also more likely to be flagged by anIntrusion Detection System.
• Memorize, or record somewhere safe, your router's keyfingerprint! In the process of logging into your router, if you seethat the key fingerprint matches, you can rest assure noone is spyingon your connection (i.e. via man-in-the-middle attack). If the keyfingerprint does NOT match (your SSH client would likely notify you ofthis), something is wrong and you should consider terminating theconnection immediately! (Note: the router's key fingerprint may changeupon reset and/or upgrade, as it will likely generate a new key pair)
• For even more added security when using the public keymethod, you can password protect your private key. This way, if someonemalicious happens to get ahold of it, they will still not be able tolog into your router without first cracking the password of the key.Otherwise, if the keys are unprotected, anyone who stumbles upon themcould likely gain immediate root access to your router and network.

SSH Shell Client

Provides a secure alternative to standard telnet.
A good Windows Client to use is Putty
Configure the client to use the Private Key you saved earlier.
Most Linux distros have telnet and SSH clients by default.

SSH Port Forwarding

SSH port forwarding is the ability to create encrypted tunnels topass traffic through, sort of like a VPN. Below we will discuss twodifferent approaches to SSH port forwarding; Local, and Remote

Local Port Forwarding

A real world example:
Suppose you have enabled remote SSH management on your router sothat you can access it from anywhere on the internet. You wisely leftremote HTTP and HTTPS management disabled (HTTP because it's insecureover the internet, HTTPS because it's resource intensive) but now youcan't connect directly to the Web Interface of your router... or so youthought ;)
This is where SSH port forwarding comes in. It makes itpossible to have secure communication to the router's Web Interfacewhich is really only listening for connections on the LAN interface.
Open up your SSH client and set up a Local port forward todestination localhost:80. Once the SSH connection is up, now youconnect to your own machine's source port eg. http://localhost:81*and it creates a secure tunnel to the Web Interface of the router. Nomore worries about someone spying on your router's traffic and/orpassword!

• 81 will be replaced with whatever port you have set for sshlocally on the router. For more information related to the tunnel setupsee here:

Requirements

• Remote SSH Management should be enabled, under Administration-> Management. (Note: For local forwards, this is only required ifyou're SSH'ing directly into the router from the WAN. Local forwardscan be of many other uses as well, such as tunneling traffic betweentwo LAN machines, or even over the Internet.)

Setup

Setting up a local port forward is relatively straightforward when using the PuTTY utility under Windows.See Connections -> SSH -> Tunnels. Make sure your configuration includes parameters as illustrated above. Namely,

• Source port (port # on your computer)
• Destination IPAddress:Port (target machine and port #)
• Type: Local

Remote Port Forwarding

This is useful to tunnel things like RDP (Remote Desktop) through anencrypted SSH tunnel over the internet. For example, you want to beable to access your work computer from home.
If you had:
HomePC <-> Router <-> Internet <-> Firewall <-> WorkPC
WorkPC, which is running RDP on port 3389, issues ssh -R 5555:localhost:3389 root@router.home
HomePC can use his RDP client to connect to port 5555 on therouter and this would create an SSH tunnel which will connect HomePC toport 3389 on the WorkPC.

Requirements

• DD-WRT v24 RC7+
• SSHd and SSH TCP Forwarding must be enabled under Services -> Secure Shell
• Remote SSH Management should be enabled as well, under Administration -> Management

Setup

Setting up a remote port forward is relatively straightforward when using the PuTTY utility under Windows.See Connections -> SSH -> Tunnels. Make sure your configuration includes parameters as illustrated above. Namely,

• Local and Remote ports should accept connections from other hosts
• Source port (port # on the router, should be > 1024)
• Destination IPAddress:Port
• Type: Remote

SCP

Secure Copy (SCP) allows one to copy files to and from the router and a remote host--usually a desktop machine.
Some good Windows clients to use are FileZilla and WinSCP.
Configure the client to use the Private Key you saved earlier, or use "root" and the webinterface password
Remember: only the /tmp and /jffs partitions are writable!

Drop Bear

DropBear is an SSH client/server installed by default on the WRT54G.DropBear allows one to connect from the WRT54G to a remote SSH serverfor scp, etc. I don't believe SSHD needs to be enabled through the Web Interface in order to use the client portion of DropBear.
If you have an SSH server on your desktop machine (such as OpenSSH) you pull files from your desktop machine using the scp command. This can be used to copy files from your desktop machine in a Startup Script

The DD-WRT Command Line

aka the DD-WRT Linux shell
This is an 'ash' shell. Ash is a version of sh, literally 'A SHell' (A command Interpreter)

Basic Syntax

The Linux Command Shell (Ash) is not the same as the Windows/DOS command prompt.
/ (and not \) is used to separate directories in a path, just like the interweb.
In order to execute a command, the path for that command must be provided. This may either be a full path or a relative path.

Relative Path Operators

There are two relative path operators.

.        The current path
..       One directory above the current path

Examples

1) If you are in the /jffs/usr/bin directory and wish to run the /jffs/usr/bin/noip command use:

/jffs/usr/bin # /jffs/usr/bin/noip

or

/jffs/usr/bin # ./noip

2) If you are in the /jffs/usr/bin directory and wish to run the /jffs/usr/kismet command use:

/jffs/usr/bin # /jffs/usr/kismet

or

/jffs/usr/bin # ../kismet

or

/jffs/usr/bin # cd ..
/jffs/usr # ./kismet

3) Relative paths can also be used as arguments. If you installed the noip package, you'd notice that the command is installed as /jffs/usr/bin/noip but its configuration file is installed as /jffs/etc/no-ip.confWhen running noip, it is thus required to give it the path to itsconfiguration file with the -c command. This can be done like:

/jffs/usr/bin # ./noip -c /jffs/etc/no-ip.conf

or

/jffs/usr/bin # ./noip -c ../../etc/noip.conf

notice that the first ../ brings us to /jffs/usr/. The second ../ brings us to /jffs/, and then the rest of the path can be appended.

4) While the other examples all showed how to save typing, youcan also really screw around with relative paths. To launch the noipcommand in example 1, you could also use

/jffs/usr/bin # ../../../jffs/./usr/./bin/././../bin/././noip

Here we browse all the way back to the root / directory, then climb back up to /jffs/usr/bin, drop back down to /jffs/usr and then climb back up to /jffs/usr/bin.
Current path references of /./ are thrown in sporadically just to mix things up. Notice how /./ always references the then current path, not the original path of the shell when the command was entered.

Pipes and Redirects

The output of commands can be piped through other commands or redirected to devices and files.
< and > are the redirect operators.   < Takes input from a device or file and routes it as input to the command given.   > Takes output from a command and redirects it as input for a device or file.Ex: If you don't want to see the output of a command, redirect it to the null device:

command > /dev/null

| is the pipe character, and pipes the output through another command (for formatting, etc)Ex: the most common use of the pipe is to limit the output of a command:

command | more

This is extremely useful for commands like nvram show which list some 800-1200 lines. nvram show | more will list the results 1 page at a time.

Background processes

It is possible to run programs in the background (returning you tothe command prompt immediately) by terminating your command with the & character.ex:

command &

Make sure you add a space between your command and the ampersand or you will result with a File not found error.

WEB-GUI (http[s]) Special note

The built-in WEB-GUI command line interface (Diagnostics.asp page) allows only about 200 characters max per line.
Special characters such as " or | must be entered after a \
Example, if you want to set a text nvram value:
Instead of

nvram set svqos_svcs="edonkey p2p 0:0 40 | bittorrent p2p 0:0 40 |"

Enter

nvram set svqos_svcs=\"edonkey p2p 0:0 40 \| bittorrent p2p 0:0 40 \|\"

Basic Commands

<command> -h                 The -h flag almost always provides help on a command. Use it!
ls                           List the contents of the current directory
cd <directory or full path>  Change to that directory or path
cp <source> <destination>    Copy the source file to the destination
cp -r <source> <destination>    Copy the source directory to the destination directory
mv <source> <destination>    Move the source file to the destination
mkdir <directory name>       Create a new directory
wget <URI>                   Download the file at the given URI to the current path
tar -xz -f <file>            un-gzip and un-tar the given *.tgz or *.tar.gz file
rm <file>                    Delete the file
rm -r <directory>            Delete the directory and all contents
killall <program name>       Kill all running processes of the program
ps                           Show running processes
top                          Show running processes in a graphical frontend

Thanks....

Hey guys, here i give you a program thats are work as backdoor for shell, icmp, shell bind n http+socket transmit server n many more.....
with the help of this you can H**K any linux/windows pc/server within few seconds


allinone.c is
a Http server,
a sockets transmit server,
a shell backdoor,
a icmp backdoor,
a bind shell backdoor,
a like http shell,
it can translate file from remote host,
it can give you a socks5 proxy,
it can use for to attack, jumps the extension, Visits other machines.
it can give you a root shell.:)

DOWNLOAD LINK


Don't forgt to leave your comments about it....
Thanks...

1. Click "Start"
2. Click "Run..."
3. Where it says "Open:" type "regedit"
4. Navigate to HKLM\System\CurrentControlSet\Services\NetBT\Parameters
5. Find the value "TransportBindName" and right-click it to open up a menu of options.
6. Click "Modify" (it is in bold text)
7. Where it says "Value data:" delete whatever is in the box so the box is blank. The blank entry is what closes the port.
8. Click "OK"
9. Close the registry and reboot.

Thattakes care of it, now you are much safer from other machines on yourlocal network, or if you are plugged into a cable modem without arouter.

Thanks...

CookieSwap is an Addons for Firefox Browser that allows you to easily manage all of your cookies. So you can do multiple logins to e-mail accounts like Gmail, Yahoo!, Hotmailor anything in the web that you want to login to as different user atthe same time by using a browser that is Firefox + CookieSwap Addons

Here is the download details
Development Homepage : http://cookieswap.mozdev.org/
Download : https://addons.mozilla.org/en-US/firefox/addon/3255

Thanks...

I have recently configured a DHCP server on my Ubuntu Linux server.Before I was using static IP addresses on each of the laptops thatconnected to my wireless network which wasn't a problem. With theappearance of more public wireless networks it means that I was havingto switch between a static and dynamic address on a regular basis andso DHCP promised to make life easier.DHCP stands for Dynamic Host Control Protocol. It is a protocol thatallows a client computer (in this case my laptops), to request that theserver provides them with an IP address valid for the network theyconnect to. This technique is used by most broadband providers and byany home broadband routers / wireless routers. Due to my Linux firewallI however use a Wireless Access Point, rather than a wireless router,so it does not have DHCP built into it, which is why I need toconfigure it in Linux.

Installation of the dhcp server

To install the server code then use

sudo apt-get install dhcp OR yum install dhcp*

There is also a package dhcp3-server, but I used just dhcp in this case.

Also note that you will most likely already have dhcpcd,dhcp-client or dhcp3-client already installed, which is used to acquirea DHCP address for the local machine and not provide the serveraspects.

The computer may tray to automatically start the server, but it will most likely fail until configuration is complete.

Configuration of the dhcp server

The first file to edit is /etc/default/dhcp
This has an entry:

INTERFACES=""

which needs to be edited to list the interfaces that the servershould listen for. In my case the local network is eth1 (eth0 is myInternet connection), so my entry is:

INTERFACES="eth1"

The other file is the main configuration file /etc/dhcpd.conf

The first part of the file contains some default values that will beapplied to any addresses given out.
An important entry is the NameServer entry:

option domain-name-servers <address1>, <address2>;

The addresses of your DNS servers is normally provided by your ISP.Two servers are normally listed as this provides built-in redundancy inthe protocol. Your name servers may be listed in /etc/resolv.conf ifyou don't know what they are.
Then there are some sections that describe how addresses are to begiven out. These are all commented out by default, an example is shownbelow:

subnet 192.168.1.0 netmask 255.255.255.0 { range 192.168.1.10 192.168.1.250;
option broadcast-address 192.168.1.255;
option routers 192.168.1.1;
}

This example uses the private address range 192.168.1.0/24.
Therange of addresses allocated starts at .10, and goes up to .250, whichleaves a few addresses at the top and bottom of the range that can beallocated to static devices (e.g. my server / Wireless Access Pointetc).

The routers entry needs to point at the gateway to the Internet which is the address of my Linux server in this case.
The server can then be restarted using:

sudo /etc/init.d/dhcp

Look in the system log /var/log/syslog if the daemon fails to start.

If you are running a firewall you may need to add a rule to allowthe DHCP traffic to reach the server, but other than that configurationis complete and any computers set to automatically request their IPaddress should be allocated an address in the specified range.

You can see any IP addresses handed out in the file: /var/lib/dhcp/dhcpd.leases

Advanced Configuration

This concludes the basic configuration for the DHCP server, butfurther options allow for specific IP addresses to be allocated tocertain machines (based on their MAC address), or for differentaddresses / routing / DNS information based up the interface that theyconnect on etc.

More information is available from

man dhcpd

and

man dhcpd.conf

Thanks...

Change the values above as desired, depending on your internet connection and maximum bandwidth/latency.There are other parameters you can change from the default if you'reconfident in what you're doing - just find the correct syntax of thevalues in /proc/sys/net/... and add a line in the above code analogousto the others. To revert to the default parameters, you can justcomment or delete the above code from /etc/rc.local and restart. The TCP/IP parameters for tweaking a Linux-based machine for fast internet connectionsare located in /proc/sys/net/... (assuming 2.1+ kernel). This locationis volatile, and changes are reset at reboot. There are a couple ofmethods for reapplying the changes at boot time, ilustrated below.

 
All TCP/IPtunning parameters are located under /proc/sys/net/...  

For example,here is a list of the most important tunning parameters, along withshort description of their meaning:

/proc/sys/net/core/rmem_max - Maximum TCP Receive Window
/proc/sys/net/core/wmem_max - Maximum TCP Send Window
/proc/sys/net/ipv4/tcp_timestamps - timestamps (RFC 1323) add 12 bytes to the TCP header...
/proc/sys/net/ipv4/tcp_sack - tcp selective acknowledgements.
/proc/sys/net/ipv4/tcp_window_scaling - support for large TCP Windows (RFC 1323). 

Needs to be set to 1 if the Max TCP Window is over 65535.
Keep in mind everything under /proc is volatile, so any changes you make are lost after reboot.
 
There are some additional internal memory buffers for the TCP Window, allocated for each connection:
/proc/sys/net/ipv4/tcp_rmem - memory reserved for TCP rcv buffers (reserved memory per connection default)
/proc/sys/net/ipv4/tcp_wmem  - memory reserved for TCP snd buffers (reserved memory per connection default)

Thetcp_rmem and tcp_wmem contain arrays of three parameter values: the 3numbers represent minimum, default and maximum memory values. Those 3values are used to bound autotunning and balance memory usage whileunder global memory stress.
 
You can edit /etc/rc.local, or /etc/boot.local depending on your distribution so the parameters get automatically reapplied at boot time. 
The TCP/IP parameters should be self-explanatory: we're basically setting the TCP Window to 256960, disabling timestamps (to avoid 12 byte header  overhead), enabling tcp window scaling, and selective acknowledgements:

echo 256960 > /proc/sys/net/core/rmem_default
echo 256960 > /proc/sys/net/core/rmem_max
echo 256960 > /proc/sys/net/core/wmem_default
echo 256960 > /proc/sys/net/core/wmem_maxecho 0 > /proc/sys/net/ipv4/tcp_timestamps echo 1 > /proc/sys/net/ipv4/tcp_sack echo 1 > /proc/sys/net/ipv4/tcp_window_scaling

Notes:
Another method to reapply the values upon boot is to include the following in your /etc/sysctl.conf (adjust RWIN values as needed):

net.core.rmem_default = 256960
net.core.rmem_max = 256960 
net.core.wmem_default = 256960
net.core.wmem_max = 256960 
 

net.ipv4.tcp_timestamps = 0 
net.ipv4.tcp_sack = 1 
net.ipv4.tcp_window_scaling = 1

Execute sysctl -p to make these new settings take effect.
To manually set the MTU value under Linux, use the command: 

ifconfig eth0 mtu 1500   (where 1500 is the desired MTU size)

Changing Current Values without rebooting  

The current TCP/IP parameters can be edited without the need for reboot in the following locations:

/proc/sys/net/core/rmem_default = Default Receive Window
rmem_max = Maximum Receive Window
wmem_default = Default Send Window
wmem_max = Maximum Send Window
/proc/sys/net/ipv4/

You'll find timestamps, window scalling, selective acknowledgements, etc.
Keepin mind the values in /proc will be reset upon reboot. You still needto add the code in /etc/rc.local or /etc/boot.local in order to havethe changes applied at boot time as described above.

Other TCP Parameters to consider

TCP_FIN_TIMEOUT

This setting determines the time that must elapse before TCP/IPcan release a closed connection and reuse its resources. During thisTIME_WAIT state, reopening the connection to the client costs less thanestablishing a new connection.
By reducing the value of this entry, TCP/IPcan release closed connections faster, making more resources availablefor new connections. Addjust this in the presense of many connectionssitting in the TIME_WAIT state:

# echo 30 > /proc/sys/net/ipv4/tcp_fin_timeout(default: 60 seconds, recommended 15-30 seconds)

Notes:
You can use any of the earlier described methods to reapply these settings at boot time.
Here is a quick way to view the number of connections and their states:

netstat -tan | grep ':80 ' | awk '{print $6}' | sort | uniq -c

TCP_KEEPALIVE_INTERVAL
This determines the wait time between isAlive interval probes. To set:

echo 30 > /proc/sys/net/ipv4/tcp_keepalive_intvl
(default: 75 seconds, recommended: 15-30 seconds)

TCP_KEEPALIVE_PROBES
This determines the number of probes before timing out. To set:

echo 5 > /proc/sys/net/ipv4/tcp_keepalive_probes
(default: 9, recommended 5)

TCP_TW_RECYCLEIt enablesfast recycling of TIME_WAIT sockets. The default value is 0 (disabled).
The sysctl documentation incorrectly states the default as enabled. Itcan be changed to 1 (enabled) in many cases. Known to cause some issueswith hoststated (load balancing and fail over) if enabled, should be used with caution.

echo 1 > /proc/sys/net/ipv4/tcp_tw_recycle
(boolean, default: 0)  

TCP_TW_REUSE
This allows reusing sockets in TIME_WAIT state for new connections when it is safe from protocol viewpoint. Default value is 0 (disabled). It is generally a safer alternative to tcp_tw_recycle

echo 1 > /proc/sys/net/ipv4/tcp_tw_reuse(boolean, default: 0)

Note:The tcp_tw_reuse setting is particularly useful in environments wherenumerous short connections are open and left in TIME_WAIT state, suchas web servers. Reusing the sockets can be very effective in reducing server load. 

Kernel Recompile Option

There is another method one can use to set TCP/IP parameters, involving kernel recompile... If you're brave enough. Look for the parameters in the following files:
/LINUX-SOURCE-DIR/include/linux/skbuff.h
Look for SK_WMEM_MAX & SK_RMEM_MAX
/LINUX-SOURCE-DIR/include/net/tcp.h
Look for MAX_WINDOW & MIN_WINDOW

Thanks...

Guys here is a way/tut for decrypting encrypted files... or you can say that HOW TO HACK A DECRYPTED FILES...
STEPS:


2. Go to Start - Run and type in cmd and click OK.

At the prompt type cipher /r:Eagent and press enter

This prompt will then display:

Please type in the password to protect your .PFX file:

Type in your Administrator password
Re-confirm your Administrator password

The prompt will then display

Your .CER file was created successfully.
Your .PFX file was created successfully.

TheEagent.cer and Eagent.pfx files will be saved in the current directorythat is shown at the command prompt. 

Example: The command promptdisplays C:\Documents and Settings\admin the two files are saved inthe admin folder. (For security concerns, you should house the twofiles in your Administrator folder or on a floppy disk).

3. Goto Start - Run and type in certmgr.msc and click OK. 
This will launch theCertificates Manager. 

Navigate to Personal and right click on thefolder and select All Tasks/Import. 

The Certificate Import Wizard willappear. 
Click Next. 
Browse to the C:\Documents and Settings\adminfolder. 
In the Open dialog box, change the Files of Type (at thebottom) to personal Information Exchange (*.pfx,*.P12). 
Select the fileEagent.pfx and click Open. 
Click Next. 
Type in your Administratorpassword (leave the two checkboxes blank) and click Next. 

Make sure theRadio button is active for the first option (Automatically select thecertificate store based on the type of certifcate). 
Click Next. 
ClickFinish. 

(You'll receive a message that the import was successful). 

Toconfirm the import, close Certificates Manager and re-open it. 
Expandthe Personal folder and you will see a new subfolder labeledCertificates. Expand that folder and you will see the new entry in theright side column. 
Close Certificate Manager.

4. Go toStart - Run and type in secpol.msc and click OK. 
This will launch theLocal Security Policy. 
Expand the Public Key Policies folder and thenright click on the Encrypted File System subfolder and select Add DataRecovery Agent... 

The Wizard will then display. 
Click Next. 
Click theBrowse Folders... button. 
Browse to the C:\Documents and Settings\adminfolder. 
Select the Eagent.cer file and click Open. 

(The wizard willdisplay the status User_Unknown. That's ok). 

Click Next. 
Click Finish. 
You will see a new entry in the right side column. 
Close the LocalSecurity Policy.

You, the Administrator are now configured as the default Recovery Agent for All Encrypted files on the Local Machine.

To Recover Encrypted files:

Scenario #1

Ifyou have completed the above steps BEFORE an existing user encryptedhis/her files, you can log in to your Administrator account andnavigate to the encrypted file(s). 
Double click on the file(s) to viewthe contents.

Scenario #2

If you have completed theabove steps AFTER an existing user has already encrypted his/her files,you must login to the applicable User's User Account and thenimmediately logout. 
Next, login to your Administrator account andnavigate to the encrypted file(s). 
Double click on the file(s) to viewthe contents.


*Warning

Do not Delete or Rename aUser's account from which will want to Recover the Encrypted Files. Youwill not be able to de-crypt the files using the steps outlined above. 

Thanks...

The Stored User Names and Passwords applet lets you assign usernames and passwords to use when needing to authenticate yourself toservices in domains other than the one you are currently logged into. The normal way of running this applet can be difficult to find quickly,so here is a way to launch it using a desktop shortcut using the rundll32.exe program:

---

Click on START - RUN and type the following (follwed by ENTER):

rundll32.exe keymgr.dll,KRShowKeyMgr

Thanks...

Limit your exposure to the outside world by blocking incomming connections.

STEPS:

Start - Settings - Control Panel - Network Connections

Rightclick on "Local Area Network"
And go to "Properties",

In the scrollbox, Click on "Internet Protocol (IP/TCP)" and then click on the"Properties" button.

In the new window, Click on the "Advanced.."button.

Then in the other new window go to the "Options" tab, Click on"TCP/IP Filtering" and hit "Properties".

Check off "Enable TCP/IPfiltering (All adapters)" next In the Above "TCP Ports" Click on theRadio button "Permit Only" and then add in the ports that you wantpeople to be able to access...

If you're running a web server add in80, If you're running an FTP server add in 21... And so on...

Then hit"OK" And close all the other windows, And reboot when it asks you too.

Thisway you can close the ports that you do not need to be open to theoutside world.  An alternative to this tweak could be running afirewall or enabling windows built in firewall.  Please note that inorder for other computers to connect to you, for example sending a fileover AOL Instant Messenger or using Windows Messenger to send a file,make sure that the required port is not blocked on your system. Otherwise, nothing will go through.

Thanks...