XMission Wiki - User contributions [en]

How Secure Web (SSL) Works

2008-09-08T19:06:18Z

Arrakis: I dont get why the | wasnt working, but no | and its happy?? ok : ssl tutorial link

{{hostingheader}}
==Overview==
Most web sites will use SSL encryption for collecting personal or confidential information. You'll most often see the use of SSL encryption when purchasing something online or viewing private statistics or documents. You'll notice that the URL (or web address) will start with https:// instead of http://. Your browser will recognize this is secure. The process is usually very smooth on the client's side. This may be an option that you're looking into for your web site hosted by XMission.

In more detail, SSL, Secure Sockets Layer, is the leading security protocol on the Internet. When an SSL session is started, the browser sends its public key to the server so that the server can securely send a secret key to the browser. The browser and server exchange data via secret key encryption during that session.

An SSL certificate is a unique digital ID that can be used to verify the identity of a person, web site, or JavaScript/Java Applet. The certificate always includes a public key, the name of the entity it identifies, an expiration date, the name of the certificate authority (CA) that issued the certificate, the digital signature of the CA, and a serial number. These certificates use public key cryptography to sign and authenticate signatures and are protected by public and private key pairs linked by cryptographic algorithms. These keys have the ability to encrypt and decrypt information.

==Your Options==
If you'd like to use SSL encryption for your web site/domain hosted on XMission, you have a few options.

The first, and easiest, would be to use XMission's certificate. To do this, change the URL's of the pages you wish to secure to https://www.xmission.com/~username/securepage.html where you replace user name with your XMission user name and securepage.html with the page you wish to secure. This could, however, be a problem for you if you have your own domain name. Reason being, you must use the XMission domain in the URL instead of www.yourdomain.com. For more details about using this method, please refer to the [http://wiki.xmission.com/index.php/Hosting:SSL_Tutorial SSL Tutorial].

If you have your own domain and you do not wish to use the XMission domain in the pages you wish to secure, you may get a certificate signed by XMission. A certificate signed by XMission is free of charge to any XMission customer. Once again, however, there is a problem with this method. Your visitors will be prompted with "Unknown Authority" (or something similar, depending on the browser used) when they first visit the secured pages. This has the possibility of scaring off potential clients or customers that are easily spooked by "hackers" or viruses. A certificate signed by XMission, however, is just as secure as a certificate signed by a public CA. You can request a certificate signed by XMission by filling out the request form.

The last means of using SSL with XMission would be to purchase a signed certificate and key from Verisign or another public CA. When this is done, you will need to upload the signed certificate (public key) and the RSA key (private key) in PEM format. To make this process more secure, you may request that XMission generate the RSA key to be kept on XMission and send you the unsigned certificate. You can then have the certificate signed and returned to XMission with less threat of the RSA key (which will won't leave XMission's hands) to be seen by another party.

To request an SSL Certificate, please send an email to [mailto:ssl@xmission.com ssl@xmission.com] with the following information:

* Do you want a certificate signed by XMission, or signed by another CA?
* Your XMission account name.
* Name of organization.
* Which department of this organization is this for?
* Website to be certified (i.e. www.domain.com)
* Contact email for website (i.e. webmaster@domain.com)
* City
* State
* Country
* SSL Certificate notice email address? (this does not have to be the contact address above)

<div class="messagebox metadata">'''Note''': If you requested that XMission send you a blank certificate to be signed by another CA, the certificate will be emailed to the account you specified as your XMission account name. You'll need to upload the signed certificate to your home directory and notify us at [mailto:ssl@xmission.com ssl@xmission.com] to complete the process.</div>

===Public CA's===
Here is a small list of public CA's you can purchase certificates from (in alphabetical order).

*[http://www.abaecom.com/ ABAecom]
*[http://www.digsigtrust.com/ Digital Signature Trust Co.]
*[http://www.e-certify.com/ E-Certify]
*[http://www.entrust.net/ Entrust]
*[http://www.equifax.com/ Equifax]
*[http://www.globalsign.com/ GlobalSign]
*[http://www.tc-trustcenter.com/ TC Trustcenter]
*[http://www.thawte.com/ Thawte]
*[http://www.valicert.com/ Valicert]
*[http://www.verisign.com/ Verisign]

{{footer}}
[[Category:Hosting|SSL]]

Proxy

2008-07-29T01:45:00Z

Arrakis: Links fixed

'''Proxy Servers'''

An HTTP, or web, proxy server provides a gateway between your browser and the rest of the Internet. A proxy server replaces your identity (IP address, in this case) with its own, making it possible to browse more privately, securely, and can offer additional features depending upon the proxy. XMission now provides three different web proxies. Information about each is listed below.

'''Dial-up Web Accelerator'''

Our dial-up accelerator transparently compresses and caches web documents (i.e., text and html) locally to cut down on load time. Downloading compressed and cached web pages through XMission can speed up web browsing for dial-up users. To use this service, find your browser on our [[Dialup Archives:Web Accelerator|Dial-up Web Accelerator Usage]] instruction page.

'''Privoxy'''

Privoxy is geared towards filtering pop-up advertisements and regular web advertisements. XMission had previously offered a proxy called "Junkbuster" for the same purpose. Privoxy is based off Junkbuster but provides better filtering. Privoxy also provides all of the features offered by the "Normal Caching Proxy". If you wish to use this service, find your browser on our [[Security:Privoxy Usage|Privoxy Usage]] instruction page.

'''DansGuardian'''

DansGuardian is a web proxy capable of [[Security:Content Filtering|filtering]] out web content (sex, drugs, profanity, violence, etc.) some might consider offensive. DansGuardian also offers all of the features offered by "Privoxy" and the "Normal Caching Proxy". If you wish to use this service, visit our [[Security:DansGuardian User Agreement|DansGuardian Usage]] page.

'''Normal Caching Proxy'''

Our normal proxy transparently caches web documents locally to cut down on load time. Downloading a web page from an XMission server is faster than downloading one from across the Internet. If you wish to use this service, find your browser on our [[Dialup Archives:Caching Proxy|Caching Proxy]] instruction page.

{{footer}}
[[Category:Security|Proxy]]

Content Filtering

2008-07-29T01:36:33Z

Arrakis: fixed proxy link

{{Archived}}

XMission encourages parents to actively participate in their children's Internet experience. For many, that includes setting up a web content filter on the family computer. Such filters can help you and your children best enjoy education and entertainment on your computer but we must stress that technology can never replace a parent at your child's side when at the computer.

==How does content filtering work?==
Most web filters use "proxy" software to automatically process all incoming content. Originally, proxy filtering was used to simply speed up access to web pages by locally storing copies of popular web pages but once the Internet became more popular, some proxy filters were modified to provide content filtering. A content filter automatically inspects text and image filenames from a web page to determine whether or not a site is appropriate for the computer user. Ideally, the person will be able to access everything they need to but anything inappropriate will be transparently filtered out. XMission provides access to a variety of [[Security:Proxy|proxy servers]].

==Does XMission have a web filter?==
Yes. A web content filter called [http://dansguardian.org/ DansGuardian] is a free and readily available solution for all XMission customers after they read the [[Security:DansGuardian User Agreement|Disclaimer]].

==Why content filtering?==
This is entirely a matter of personal opinion. XMission simply offers content filtering as an option so our customers can choose to use the service if they have need of it in their home.

==What about business owners?==
Most media and legislation attention has focused on concerns about web content and children but there are products written specifically for businesses. XMission does not recommend DansGuardian for business environments since it is tailored for children and may inhibit productivity as a result.

==Are there other options?==
Absolutely. Whatever you decide is best for your family or office, remember that technology can only provide part of the solution. If you do use a content filter, remember that that not only may some legitimate sites be accidentally blocked but some sites you might not consider appropriate will likely still be unfiltered. This is part of why we recommend you spend time with your children when they're at the computer. Of course, you just might enjoy each other's company too.

{{Footer}}
[[Category:Security|Content Filtering]]

Content Filtering

2008-07-29T01:34:04Z

Arrakis: Dansguardian disclaimer link fixed

{{Archived}}

XMission encourages parents to actively participate in their children's Internet experience. For many, that includes setting up a web content filter on the family computer. Such filters can help you and your children best enjoy education and entertainment on your computer but we must stress that technology can never replace a parent at your child's side when at the computer.

==How does content filtering work?==
Most web filters use "proxy" software to automatically process all incoming content. Originally, proxy filtering was used to simply speed up access to web pages by locally storing copies of popular web pages but once the Internet became more popular, some proxy filters were modified to provide content filtering. A content filter automatically inspects text and image filenames from a web page to determine whether or not a site is appropriate for the computer user. Ideally, the person will be able to access everything they need to but anything inappropriate will be transparently filtered out. XMission provides access to a variety of [[proxy| proxy servers]].

==Does XMission have a web filter?==
Yes. A web content filter called [http://dansguardian.org/ DansGuardian] is a free and readily available solution for all XMission customers after they read the [[Security:DansGuardian User Agreement|Disclaimer]].

==Why content filtering?==
This is entirely a matter of personal opinion. XMission simply offers content filtering as an option so our customers can choose to use the service if they have need of it in their home.

==What about business owners?==
Most media and legislation attention has focused on concerns about web content and children but there are products written specifically for businesses. XMission does not recommend DansGuardian for business environments since it is tailored for children and may inhibit productivity as a result.

==Are there other options?==
Absolutely. Whatever you decide is best for your family or office, remember that technology can only provide part of the solution. If you do use a content filter, remember that that not only may some legitimate sites be accidentally blocked but some sites you might not consider appropriate will likely still be unfiltered. This is part of why we recommend you spend time with your children when they're at the computer. Of course, you just might enjoy each other's company too.

{{Footer}}
[[Category:Security|Content Filtering]]

WRT54GL Multiple IP Setup

2008-06-25T04:37:37Z

Arrakis:

{{utopiaheader}}
#Connect the Ethernet cable from the UTOPIA Access Portal to the internet port on your Linksys WRT54GL.
#Connect an Ethernet cable from the Ethernet port on your computer to one of the lan ports on your Linksys WRT54GL.
#Open your web browser, you will most likely get an XMission Welcome screen. In the address bar, type 192.168.1.1 and press the <tt>Enter</tt> key on your keyboard. When prompted for the username and password, leave the username field blank and enter <tt>admin</tt> for the password.
#In the ''Internet Connection Type'' drop down box, select <span class="button">PPPoE</span>.
#In the ''User Name'' field, enter your XMission user name.
#In the ''Password'' field, enter your XMission password.
#In the ''Local IP Address'' field, enter your first usable IP from your subnet.
#:http://www.xmission.com/help/screenshots/linksys/wrt54glsubnet.png
#Click the <span class="button">Advanced Routing</span> link in the upper right corner.
#In the ''Operating Mode'' drop down box, select <tt>Router</tt> mode.
#Click the <span class="button">Save Settings</span> button at the bottom.
#:http://www.xmission.com/help/screenshots/linksys/wrt54glsubnet1.png

{{footer}}
[[Category:UTOPIA|WRT54GL Multiple IP Setup]]