Edventures in Normalcy

Install Microsoft Visual C++ 2008 SP1 Redistributable Package (x86)

• This is a requirement for the next item.
• The installer can be found here.

1. Initiate the installer, click Nextat the first screen.

   

2. Click the select box for I have read and accept the license terms. and then click Install >.

3. 

4. Click Finish.

   

Install OpenSSL

1. Download the installer from here.
2. Initiate the installer, click OK if you see this screen

   

3. Click Next >.

   

4. Select the radio for I accept the agreement and click Next >.

   

5. Click Next >.

   

6. Click Next >.

   

7. Click Next >.

   

8. Click Install.

   

9. Choose a donation option right for you and click Finish.

   

10. Once installation has completed, it places the dll’s in the following places:

    C:\WINDOWS\system32\libeay32.dll
    C:\WINDOWS\system32\ssleay32.dll

Install the Miva Merchant Empresa engine

1. Download the latest installation from here.
2. Initiate the installer, click Next >.

   

3. Select the radio for I accept the terms in the license agreement and click Next >.

   

4. Click Next >.

   

5. Click Install.

   

6. Click Finish.

   

Install GD

1. Download the latest gd-latest-win32.zip from here. I personally had to obtain the zip using archive.org, in which you can download the same file as I have saved it here.
2. Create a new folder within the Miva Merchant Empresa installation directory and name the Folder SYSTEM. You should then have one of the following paths

   C:\Program Files)\Miva Merchant\Miva Merchant Empresa\SYSTEM

   1	C:\Program Files)\Miva Merchant\Miva Merchant Empresa\SYSTEM

   Or:

   C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\SYSTEM

   1	C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\SYSTEM

3. Open up the gd-latest-win32.zip file.

   

4. Inside of the bin folder you will find a file bgd.dll.

   

5. Copy this file to the SYSTEM folder we created earlier.

   

6. Grant IUSR read access to this dll.

Configure IIS for the Empresa Engine

• First off, if this is a 64bit version of IIS6, it needs to be run in 32 bit mode in order for Miva Merchant Empresa settings to show. To load IIS in 32 bit mode, put a shortcut on the desktop, edit the shortcut adding ‘ /32’ to the end of the path, causing the path to end up being:

• Also, you will want to configure IIS to run 32 bit applications. To do this, run the following command:

  PowerShell

  cscript.exe C:\inetpub\adminscripts\adsutil.vbs SET W3SVC/AppPools/Enable32bitAppOnWin64 1

  1	cscript.exe C:\inetpub\adminscripts\adsutil.vbs SET W3SVC/AppPools/Enable32bitAppOnWin64 1

  
   

IIS Web Server Extension

1. Open IIS and select Web Service Extensions.

   

2. Click Add a New Web Service Extension and enter the requested information:
   • Extension Name: Miva
   • Required Files:C:\Program Files\Miva Merchant\Miva Merchant Empresa\MivaVMIIS.dll

     Or for x64 Required Files: C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\MivaVMIIS.dll

   • Check Set Extension Status to Allowed

   

3. Click Ok.

IIS Mapping for .mvc

1. Open IIS, right-click Websites and select Properties.

   

2. Click on the Home Directory tab and then click Configuration.

   

3. On the Mappings tab, click Add.

   

4. Enter the requested information:
   • Executable:C:\Program Files\Miva Merchant\Miva Merchant Empresa\MivaVMIIS.dll

     Or for x64 Executable:“C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\MivaVMIIS.dll”

     • Remember to include the double quotes

   • Extension Type: .mvc
   • Leave the other options as the defaults

   

5. Click OK.
6. I recommend checking a website to ensure the mapping has propagated throughout the website tree.

ISAPI Filters for x64 based OS’s

• Since IIS will be running essentially in 32 bit mode, we need to make sure that other entities, such as .NET 2.0 are set to run the 32 bit versions as well.

1. Open IIS, right-click Websites and select Properties.

   

2. Click on the ISAPI Filters tab.

   

3. Select ASP.NET_2.0.50727.0 and click Edit….

   

4. For anything .NET, you can update the Executable field replacing “Framework64” with just “Framework”, keeping the rest of the field intact. Click OK. Click OK.

Miva VM Settings

1. Open the site in question within IIS, right-click the site, and choose Properties.

   

2. Choose the Miva Merchant Empresa tab.

   

3. Enter the requested information:
   • Restrict scripts to the following directory and below:

     This will be the same as the Home Directory

   • Store data in the following directory:

     In my case, this is usually be the same as the Home Directory, but in C:\MivaData\subfolderName

4. Click Browse for the Look for SSL root certificates in the following directory: setting.
5. Make sure you are using the openssl-0.9 directory because we installed OpenSSL 0.9 and not version one.

   

6. Click OK.

Commerce and System Libraries

1. There are a total of 3 main Commerce libraries (LinkPoint, AuthorizeNet, and CyberCash). AuthorizeNet and CyberCash can be obtained elsewhere while LinkPoint was included in the Miva Merchant Empresa installer.
2. Once downloaded place them in the appropriate location:

   C:\Program Files\Miva Merchant\Miva Merchant Empresa\COMMERCELIBRARIES

   1	C:\Program Files\Miva Merchant\Miva Merchant Empresa\COMMERCELIBRARIES

   
   or
   

   C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\COMMERCELIBRARIES

   1	C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\COMMERCELIBRARIES

3. Right-click on the COMMERCELIBRARIES folder and choose Properties.

   

4. Click on the Security tab.

   

5. Click Advanced, check the checkbox for Replace permission on entries on all child objects with entries shown here that apply to child objects and click OK.

   

6. Click Yes on the warning message.

   

7. Click OK to close the COMMERCELIBRARIES Properties box.
8. Continuing from the last screen within IIS, click Libraries.

   

9. Click Add to add the AuthorizeNet Library.
   1. Change the Library Type to
      
      Commerce

      1

      Commerce

   2. Set the Method to
      
      AuthorizeNet

      1	AuthorizeNet

      
      .
   3. Enter in the path to the MCATHNET.DLL file:

      C:\Program Files)\Miva Merchant\Miva Merchant Empresa\COMMERCELIBRARIES\MCATHNET.DLL

      1	C:\Program Files)\Miva Merchant\Miva Merchant Empresa\COMMERCELIBRARIES\MCATHNET.DLL

      Or:

      C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\COMMERCELIBRARIES\MCATHNET.DLL

      1	C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\COMMERCELIBRARIES\MCATHNET.DLL

   4. Verify your settings

      

   5. Click OK to save your changes.
10. Click Add to add the CyberCash Library.
    1. Change the Library Type to
       
       Commerce

       1

       Commerce

       
       .
    2. Set the Method to
       
       CyberCash

       1

       CyberCash

       
       .
    3. Enter in the path to the MCATHNET.DLL file:

       C:\Program Files)\Miva Merchant\Miva Merchant Empresa\COMMERCELIBRARIES\MCYBCSH.DLL

       1	C:\Program Files)\Miva Merchant\Miva Merchant Empresa\COMMERCELIBRARIES\MCYBCSH.DLL

       Or:

       C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\COMMERCELIBRARIES\MCYBCSH.DLL

       1	C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\COMMERCELIBRARIES\MCYBCSH.DLL

    4. Verify your settings

       

    5. Click OK to save your changes.
11. Click Add to add the GD Library.
    1. Change the Library Type to
       
       System

       1

       System

       
       .
    2. Set the Method to
       
       GD

       1

       GD

       
       .
    3. Enter in the path to the bgd.dll file:

       C:\Program Files)\Miva Merchant\Miva Merchant Empresa\SYSTEM\bgd.dll

       1	C:\Program Files)\Miva Merchant\Miva Merchant Empresa\SYSTEM\bgd.dll

       Or:

       C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\SYSTEM\bgd.dll

       1	C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\SYSTEM\bgd.dll

    4. Verify your settings

       

    5. Click OK to save your changes.

Test using the Miva Diagnostics tool

1. Copy diag6.mvc from either location below, and paste it in the webroot.

   C:\Program Files\Miva Merchant\Miva Merchant Empresa\TOOLS

   1	C:\Program Files\Miva Merchant\Miva Merchant Empresa\TOOLS

   Or

   C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\TOOLS

   1	C:\Program Files (x86)\Miva Merchant\Miva Merchant Empresa\TOOLS

2. From within IIS, locate this file, right click on it and choose Browse.
3. Run each test.
   1. Under System Variables make sure miva_sslavailable = 1.
      • If it equals 0 try installing OpenSSL again.
   2. Under License Manager Call you want to make sure all tests pass:

      

   3. Under Installed Database Libraries you want to make sure all tests pass, and that it shows both MivaSQL and MySQL:

      

   4. Under Installed Commerce Libraries you want to make sure all tests pass, and that it shows LinkPoint, AuthorizeNet, and CyberCash:

      

   5. Under Installed System Libraries you want to make sure all tests pass, and that it shows GD:

      

I recently had to prove the update status of apache as part of a PCI scan, and the best method for obtaining the output, was to email it to myself, like so

This makes it much easier to review and handle large outputs without having to be on the original linux system.

I have a few tools I use to deal with the scripts, first I want to see if there are any perl scripts running:

Then I can kill them:

Sometimes with the -9:

and sometimes for a specific user, again, the -9 flag can be used here as well

::Installation::

1 Run the following command to check if Apache, PHP, MySQL, Bind or Cyrus are pre-installed by the OS:

2 If any are installed they can cause issues with installing cPanel, although I have seen cPanel attempt to import settings. I would rather remove them:

3 Open the /home directory

4 Fetch the latest installation file from the cPanel servers

::NOTE:: If you want to install the STABLE release, further details found here, as apposed to latest, run the following command:

5 Run the installation files

Once done, it is time to configure this bad boy!

::Configuration::

*As seen in http://www.thecpaneladmin.com/skipping-whm-setup-wizard/ http://www.thecpaneladmin.com/skipping-whm-setup-wizard/

1 Touch this file to tell cPanel it is being automatically setup.

2 Configure the 3 main services for the server.

3 Replace the following strings [Server’s Main IP], [user@example.com], [Servers FQDN Hostname], [hostname 1], [hostname 2], [hostname 3] with their appropriate values.

::NOTE:: Keep in mind this should be ONE line once you have updated the string below.

Or, for VM’s running cPanel (keep in mind you need to mount the installer first, choose the interactive installer option):

Once you get through the install:

-Email headers: In an e-mail, the text (body) is preceded by header lines indicating sender, recipient, subject, sending time stamp, receiving time stamps of all intermediate and the final mail transfer agents, and much more. (See RFC 5322 for details.)

Email headers are the life blood when tracking an email. You cannot locate the sender of a message, if they never send you a message. I see a lot of people asking to find someone based on just an address. The email provider would have logs (usually less that 10 days) of the last connections made.

Obtaining headers from a given message differs based on your method of accessing the message (email client or web interface):
http://whatismyipaddress.com/find-headers

-IP address: Every networked computer has one. Everyone that is connected to the internet has an external IP address. Most external IP addresses can be tracked back to the ISP they are owned by and sometimes to a geographical location.

NOTE: Gmail and Facebook do not include the IP address of the end user sending the message within the headers of emails it sends out.

Gmail Legal disclosure policy:
https://mail.google.com/support/bin/answer.py?hl=en&answer=7995

Report abusive emails:
https://mail.google.com/support/bin/request.py?contact_type=abuse

To gain any data from Google on a sender, you would need to subpoena Google for this information.

With an ISP and an IP address, how close are you to finding the actual sender? Very close. But for obvious protection, an ISP cannot just hand out details on their clients. Once again a subpoena would be used to obtain customer information.

I use the script on this whatismyipaddress.com (http://whatismyipaddress.com/trace-email) and recommend it to others. Before finding that one, I had written one for myself that tries to go above and beyond in the way of usability. It does it’s best to even show you the originating location within a map:
https://www.edwinbush.com/my-tools-page/email-header-analyzer/

On a side note, you can to some extent use http://www.readnotify.com/ when sending an email to someone and possibly obtain further details, from their site:

”
ReadNotify will endeavour to provide the following in your tracking reports:

* Complete delivery details
* Date and time opened
* Approximate geographic location of recipient
* Map of location (available on paid subscriptions)
* Recipients IP address
* Referrer details (ie; if accessed via web email account etc)
* URL clicks
* How long the email was read for
* How many times your email was opened
* If your email was opened on a different computer (such as forwarded)
“

Non Standard Headers Key:

This is just a point of reference, as I hate to Google them. If you add ones to add, let me know. I am purposefully excluding mailer, priority, and mimeole.

If you need to change the URL for a WordPress blog, and only have access via MySQL, you can use the following command, once you have selected the database.  Keep in mind I am assuming the wp_ table prefix.

Because I always forget, the user is ‘admin’ sans quotes and the password is ‘setup’ sans quotes.  And I change them immediately.

I had to upgrade adminpak.msi and could then move forward,  Installers found here:

32 bit:
http://www.microsoft.com/downloads/details.aspx?FamilyId=86B71A4F-4122-44AF-BE79-3F101E533D95&displaylang=en

64 bit:
http://www.microsoft.com/downloads/details.aspx?FamilyId=514BD06E-F3BC-4054-8429-C49F51E2190B&displaylang=en