text:
These are the field binoculars that attach to an iPhone for easy viewing and recording. The view through the eyepiece transfers to the phone's camera lens, turning the phone into a viewfinder for sharing the sights with friends or taking pictures of the action. The 36mm lenses on the binoculars deliver 8X magnification for a 465-foot field of view at 1,000 yards. When the phone is in camera mode, the screen displays all magnified images as if it were an external monitor. The included phone case seals snugly over one eyepiece, aligning the phone's camera with the binocular lens. Included phone cases fit iPhone 5/5S and 4/4S. The field glasses also function as standard binoculars when detached. Includes carrying case and cleaning cloth. 1 3/4" H x 6" W x 7" L. (2 lbs.)
Compatible Devices
Lifetime Guarantee
The iPhone Binoculars come with The Hammacher Schlemmer Lifetime Guarantee. If this product ever disappoints you, for any reason, you may return your Hammacher Schlemmer purchase for exchange, credit, or refund.
Should you have any questions, we are available seven days a week (8:00 am – midnight EST). Please call 1-800-321-1484 to speak with a specialist or email us at email@example.com to receive a response within three business hours or less.
Shipping charges noted in parentheses apply in addition to our standard shipping & service.
We're sorry, but gift wrap is not available. Please call 1-800-395-7006 for Premium or Express delivery rates.
Oversized items scheduled for expedited delivery (Premium or Express) may incur additional shipping and services charges because of their unusual size. Please call 1-800-321-1484 for an estimate of S&S charges. International callers, please call 1-513-860-3397.
We're sorry, but gift wrap is not available for oversized items.
Shipped via truck and may require customer assistance upon delivery. You will be contacted to make an appointment for delivery.
We're sorry, but gift wrap and gift cards are not available.
GST still applies and will be charged upon processing. For complete shipping & service charges please call Customer Service at 1-800-321-1484.
May we recommend:
(based on 11 reviews)
Ratings Distribution
5 Stars
4 Stars
3 Stars
2 Stars
1 Stars
of respondents would recommend this to a friend.
Best Uses
Reviewed by 11 customers
Displaying reviews 1-10
Back to top
Previous Page | Next Page »
(6 of 6 customers found this review helpful)
Great concept, BUT!!!
By Jojo
from Memphis TN
Love the concept and liked the results from the few photos I took in the back yard. But, my iPhone keeps popping out of the carrier provided to attach the phone to the binoculars. So, makes it very awkward to use. If the carrier was better, this product would be a lot of fun to use. I'm torn about recommended this product for this reason. I'm actually worried that I will end up damaging my iPhone should it fall out on hard ground.
Was this review helpful? Yes / No
- flag this review
(5 of 5 customers found this review helpful)
Does not work well
By jackie
from CT
This seemed like a well made product - very easy to assemble with iPhone. The problem was that the magnification and clarity that the binoculars provided was no greater than the zoom feature on the iPhone alone - so why use it? Huge disappointment, The concept was great. If you could have zoomed in on, say a bird or boat and then used the iphone as the eye piece and snap a picture, that would have been great, Unfortunately the zoom power was less then the iPhone alone -- again -- so why use it?
Bottom Line No, I would not recommend this to a friend
Hammacher Schlemmer Response: Thank you for your feedback. These binoculars are intended to help use your iPhone as a device to record what you are viewing through the binoculars. Please remember that we offer a lifetime guarantee of satisfaction on our products. If you are disappointed in this product, please contact us at 1-800-321-1484 so we can assist you with a return or exchange.
(4 of 4 customers found this review helpful)
By Susan, the quilter
from Los Angeles
Concerned about fact that it only works with certain sized iPhones. If my nephew buys a larger iPhone in a few months, he won't be able to use this wonderful product on his new iPhone.
Hammacher Schlemmer Response: Thank you for your feedback/sharing your recent experience. These binoculars fit iPhone 4, 4S, 5, 5C and 5S.
(3 of 3 customers found this review helpful)
wonderful peace of equipment
By pacemaker
from Milford Ct.
used in sporting eventsused in theaterused bird watchingall with fantastick results
Bottom Line Yes, I would recommend this to a friend
(2 of 2 customers found this review helpful)
Far exceeded my expectations!
By Watermonster
from Kerrville Tx
This device makes an ordinary binoculars supercharged. I could not believe how well it worked. Even after you zoom in with your phone, it still looks very clear. However, you will need to brace the binoculars to keep the view steady.
iPhone binoculars
By Disappointed
from Kentucky
This product does not work well with iPhone 4S. Picture is not clear
Hammacher Schlemmer Response: Thank you for your feedback. Please remember that we offer a lifetime guarantee of satisfaction on our products. If you are disappointed in this product, please contact us at 1-800-321-1484 so we can assist you with a return or exchange.
(2 of 3 customers found this review helpful)
Flimsy product
from Encinitas, CA
Purchased for my husband's birthday. Very disappointing and difficult to use. Flimsy connection to iPhone. Too bad. Good concept but poor product.
Hammacher Schlemmer Response: At Hammacher Schlemmer, we take great pride in standing behind our merchandise. Since 1848, we have stood been behind our products and our products come with a lifetime guarantee of satisfaction. If you are disappointed in this product, please contact us at 1-800-321-1484 so we can assist you with a return or exchange.
Great gift
By Lucy
from Bossier City, LA
Great giftGreat for bird watching, sharing pictureEasy to use
Poor Quality on Binoculars
By Birder 1
from NYC
This is a great concept but should be usable on binoculars of better quality
(1 of 1 customers found this review helpful)
iPhone Binoculars
By Bev
from Pittgrove, NJ
The product has potential but has serious drawbacks. As soon as the picture finally focuses, it begins to jump. I's awkward the way the phone juts out which makes the phone more vulnerable to damage since it's out of it's protective case. I am returning the product.
Hammacher Schlemmer Response: While we regret that this product didn't delight you, we are gratified that you took advantage of our unconditional Lifetime Guarantee. Although our goal is your complete satisfaction with every product, we understand you may encounter the rare occasion when an item doesn't meet your expectations. That is why we make it easy to return an item—simply call our customer service team at 1-800-321-1484 at your convenience and they will be happy to assist you.
COPYRIGHT © 2017 HAMMACHER SCHLEMMER & COMPANY, INC. ALL RIGHTS RESERVED. W108147 E. 57th ST • NEW YORK, NY • 10022 • 1-800-_321-1484


text:
FIBER, PLEASE! Kim Kardashian's post-baby diet revealed
Kim Kardashian looks amazing just three months after giving birth to her daughter North West, and there's one reason. The new mom isn't going crazy with extreme weight loss measures, but she's focusing on specific foods that are really delivering results!
According to the new OK! magazine, Kim is reportedly tried cutting out all carbs, but Kim has now found "carb cycling," — cutting back on eating carbs every other day — is easier to stick to and better for breastfeeding Nori.
"She's really focusing on foods high in fiber from 6 a.m. to 2 p.m., like whole-grain breads, cereals, brown rice, fruits, and vegetables," a source tells the magazine.
"She is snacking twice a day on toasted pita bread with two tablespoons of reduced-fat hummus," says the source. "But on days when she is limiting the complex carbohydrates, then she will swap pita for things like celery, carrots, cucumber, and hummus to dip into the hummus."
Kim's trainer, Tracy Anderson, explained that a diet of healthy foods is much better for a nursing mom than extreme dieting. "If you're nursing, this is not the time that you can really diet because you have to keep enough calories so you can have a healthy milk supply. I think that a trend I'm seeing is a lot of women will nurse and diet and they don't realize that it's not okay for the baby because you're not giving the baby breast milk that is full enough."
Photo Credit Getty Images

subset: commoncrawl


text:
Jana Kramer's Favorite Things
Listen to Jana Kramer on iHeartRadio
Country sweetheart Jana Kramer is known for her role as Alex Dupre on One Tree Hill, but she is quickly turning heads in the music industry.
From her self-titled debut album released last June, she's had several successful singles - a few of which have been featured on One Tree Hill. Her latest single "I Hope it Rains," just got a brand new music video, and proves that she's here to stay in country music. Not to mention that she's a double threat as a singer and an actress.
[Buy "I Hope it Rains" on iTunes]
Jana stopped by the iHeartRadio headquarters when she was in New York City where she let us in on the stuff she loves the most. Get to know Jana by discovering some of her Favorite Things below.
Favorite artist of the moment: I like Parmalee. They're a new country band. They have that song, "
Favorite Person to follow on Twitter: Jenny Johnson. She's a writer and she's HILARIOUS… really funny!
Favorite guilty pleasure song: "Sing For The Moment" by Eminem.
Favorite scary movie: "Strangers."
Favorite Part of being on One Tree Hill: Being able to sing. The fact that my character turned into a singer.
Favorite actor: Ryan Gosling. So hot!
Favorite thing to do in your hometown: Hangout with my girlfriends and drink wine. It would be at my girlfriend's house, Lisa's house. Just hangout, drink wine and talk about the stupid crap we did in high school.
Red or white wine: Red. I love the bold, spicy.
Favorite TV show: "Sons of Anarchy."
Favorite midnight snack: Queso dip with chips. Chips and queso. I love queso dip!
Favorite chain restaurant to eat at on the road: Chili's. The queso dip is so good!
Favorite drink of the night: Red wine. Cabernet or Malbec.
Favorite peice of advice you've been given: Everything happens for a reason.
Favorite gift you've received from a fan: Someone bought me an iPod touch and engraved "Believe" which is what I always say, and the year of my album release. I thought that was so sweet. It was my album release party. They gave it to me. It was so cool.
Favorite item no one knows you own: A onsie night gown. Like one of those like with my feet and everything in them, what are those called? The footy pajamas – nobody knows that. Now they do! It's Betty Boop.
Favorite thing to wear: Flip flops.
Watch "I Hope it Rains" below:
Photo Credit Katherine Tyler for iHeartRadio


text:
Robin Thicke to perform at Billboard Music Awards
Listen to Robin Thicke on iHeartRadio
Robin Thicke has been added to the lineup for the Billboard Music Awards -- and he's reportedly planning a special song for Paula Patton.
The couple announced their separation earlier this year and, according to TMZ, Robin has written a new track called "Get Her Back" that he'll be debuting at the awards show on Sunday.
The gossip site apparently obtained a copy of the song's lyrics about the singer wanting to "make it right" and "cherish her for life."
It's not the first time he's pled his case to Paula from the stage. Robin made headlines shortly after the separation, dedicating his love songs to his high school sweetheart. The two have been seen in public with their young son Julian since, but don't appear to have reconciled their differences.
Among the other performers slated to perform at the Billboard awards are Miley Cyrus, Lorde, Shakira, Katy Perry, Ariana Grande, John Legend and Jennifer Lopez, who will also be receiving the night's "Icon" award. The ceremony airs Sunday on ABC at 8 p.m. Eastern.
Photo Credit Getty Images


text:
WATCH: New #beyGOOD Video Hits the internet
Listen to Beyonce on iHeartRadio
Beyonce released a new video of her stint in Latin America and it's a sweet, behind-the-scenes look at the superstar and her team working to spread positivity to local children.
"The whole idea of #beyGOOD is to create long-term ties with organizations here that are making a real difference in the lives of kids. Beyonce never forgets these young people and in every city she always reaches out," a voice-over in the video says.
"I just encourage you to find your passion and to stay focused and positive," Beyonce says to a group of kids.
She later cried in the video when the group prayed for her.
"Thank you guys for coming. I'm so proud of you. You inspire me and so many other people. Hopefully people will see that you work so hard and are so positive and will wanna do the same thing," she said.


text:
LISTEN: Ed Sheeran debuts new Pharrell-produced song 'SING'
Listen to Ed Sheeran on iHeartRadio
Ed Sheeran is back with new music, this time with a song produced by Pharrell called "SING." The single is the first new music from the singer since he recorded theme song "I See Fire" for the Hobbit soundtrack last year.
"SING" is sure to give Justin Timberlake a run for his money with its R&B inspired sound - and Ed actually raps in it! Anyone who is a fan of the 'A-Team' singer, knows he has some serious rhyming skills! Check it out below:
Meanwhile, Sheeran has given his new album an official release date via Twitter. The new album, titled with an x and pronounced "Multiply," is set for release worldwide on June 23rd.
My 2nd album is called 'x' or 'multiply' and will released on the 23rd of June worldwide. Can't wait for you guys to hear it
— Ed Sheeran (@edsheeran) April 4, 2014
x will be the follow-up to Ed's 2011 debut album Plus, and was recorded in Los Angeles with the help of producer Rick Rubin.


text:
Ubuntu Oneiric Network Management
Only one network manager and GUI interface can be enabled. Network-Manager is installed by default, but many users prefer Wicd Network Manager.
Network Manager
Network Manager is the network manager installed by default in (K)Ubuntu. It has a tray applet that allows you to switch between Internet connections (such as wireless APs or wired connection).
Wicd Network Manager
Wicd Network Manager is a GTK-dependent networking manager written in Python that can be used in all variants of (K)Ubuntu. Many users (including me) report it to be faster and more stable than Network Manager. To avoid networking conflicts, Wicd requires the removal of Network Manager prior to installation (replace network-manager-kde with network-manager if using Ubuntu instead of Kubuntu).
sudo apt-get remove network-manager-kde sudo reboot sudo apt-get install wicd
Set a static IP address
I have never been able to get Network Manager to accept my static IP address settings. If you only use only a wired interface, you do not need a network manager and it can be removed.
- Remove Network Manager (replace network-manager-kde with network-manager if using Ubuntu instead of Kubuntu):
sudo apt-get remove network-manager-kde sudo reboot
- Edit the /etc/network/interfaces file (use the gedit text editor instead of kate if using Ubuntu instead of Kubuntu):
sudo kate /etc/network/interfaces
- and replace the line (ok if line is missing)
iface eth0 inet dhcp
- with the following lines (using your own LAN settings, of course):
auto eth0 iface eth0 inet static address 192.168.0.35 netmask 255.255.255.0 network 192.168.0.0 broadcast 192.168.0.255 gateway 192.168.0.1
- Then restart networking:
sudo /etc/init.d/networking restart
- Check to see if your settings are now correct:
- If you need a static IP address and have a wireless connection, Wicd Network Manager works:
- Uninstall Network Manager and install Wicd instead (replace network-manager-kde with network-manager if using Ubuntu instead of Kubuntu):
sudo apt-get remove network-manager-kde sudo reboot sudo apt-get install wicd
Manual configuration from the command-line
3 steps for WEP:
sudo iwconfig eth[N] essid [SSID] sudo iwconfig eth[N] key restricted s:[PASSWORD] sudo dhclient
WPA is more complicated:
sudo mkdir /etc/wpa_supplicant cd /etc/wpa_supplicant sudo echo network = { > wpa_supplicant.conf sudo echo ssid="SSID" >> wpa_supplicant.conf sudo echo key_mgmt=WPA-PSK >> wpa_supplicant.conf sudo echo psk="PRESHAREDKEY" >> wpa_supplicant.conf sudo echo } >> wpa_supplicant.conf cd /etc/network sudo gedit interfaces
Now add after "auto eth[N] ..." & "iface eth[N] .." :
wpa-driver wext # or whatever driver your network card needs wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf
Save the file and restart your system.
Internet connection sharing (DHCP server)
In most LANs, an inexpensive router is used to provide DHCP functions (internet connection sharing).
However, DHCP services can also be provided by a single host computer on your LAN if it is directly connected to the Internet. (This is useful, for instance, if you have a 3G or other wireless EVDO connection to your computer which you want to share with the other computers on your LAN). Other client computers on your LAN would then connect to the Internet through your host computer's Internet connection. The host computer now essentially performs the DHCP functions of a router.
All "client" computers on the LAN ought to be connected to a central LAN switch or router. (If using a router, it should have its own DHCP functions disabled -- you shouldn't have 2 DHCP servers on a LAN unless you know how to nest LANs). They should all be set up to obtain DHCP-assigned dynamic IP addresses and use the same LAN subnet settings (which in the example below is LAN IP range 10.0.0.1 - 10.0.0.250 with netmask 255.255.255.0 and gateway 10.0.0.1). The host computer to be used as the gateway/DHCP server is then connected (through its own ethernet port) either to one to the ports of the switch (if used), or to a LAN port of a router (don't use the WAN port). The host computer then connects directly to the Internet (WAN) through a second port (which in the example below will be a wireless (wifi) port (wlan0)).
(Note: This setup is easiest if you connect all computers on the LAN with Ethernet cables to the central switch or router. But also see using a nested wireless LAN router below.)
(Note: If you want your LAN to use the same subnet as your WAN, see network interface bridging.)
- Install the DHCP server and firewall programs:
sudo apt-get install dhcp3-server firestarter
- Rename the startup command (through a symbolic link) for the DHCP server. This is required or Firestarter will not know where to find it:
sudo ln -sf /etc/init.d/dhcp3-server /etc/init.d/dhcpd
- Edit the DHCP server configuration file:
sudo nano -w /etc/default/dhcp3-server
- Change the line
- to
- Restart the DHCP server:
sudo dhcpd restart
- Right click on Network-Manager -> Edit Connections... -> Wired -> Add
- -> Connection name: Shared internet connection
- -> IPv4 Settings -> Method: Manual -> Add
- -> Address: 10.0.0.1 -> Netmask: 255.255.255.0 -> Gateway: 0.0.0.0
- -> Available to all users: [x]
- Attach the ethernet cable to (eth0).
- Network-Manager -> Wired Networks -> Shared internet connection
- Adjust your firewall to allow the internet connection sharing. Start Firestarter:
sudo firestarter
- Tell the firewall which port is your direct Internet Connection:
Firestarter -> Preferences -> Firewall -> Network Settings -> Internet connected network device: (wlan0)
- -> IP address is assigned by DHCP: [x]
- Tell the firewall which port is for the LAN, and specify the details for the LAN:
Firestarter -> Preferences -> Firewall -> Network Settings -> Local network connected device: (eth0)
- -> Enable internet connection sharing: [x]
- -> Enable DHCP for the local network: [x]
- -> DHCP server details -> Create new DHCP configuration -> Lowest IP address to assign: 10.0.0.2
- -> Highest IP address to assign: 10.0.0.250 -> Name server: <dynamic>
- Note: Use your own desired LAN settings (internal DHCP-assigned dynamic IP address range), of course. In this example I don't use the full IP range 10.0.0.2 - 10.0.0.255 for dynamic IP addresses because I want to reserve some LAN addresses (10.0.0.251 - 10.0.0.255) to be used as static IP addresses).
- Notes:
- If you wish to use this setup all the time, make the "Shared internet connection" profile your default connection profile in Network Manager.
Using a nested wireless LAN router
Many users will already have an established LAN that uses an existing wireless router and has client computers that are setup to connect wirelessly to the router. Here's how to maintain this setup and still use the internet connection sharing method of a single host computer as described above. This method is known as nested LANs. The wireless router will serve as a nested LAN for its wireless clients (only), but in turn will appear as a single device to the main LAN. The two LANs must have different IP ranges. For example, the main LAN may have an IP range 10.0.0.1 - 10.0.0.255 (with netmask 255.255.255.0), as in the above example. The router's nested wireless LAN must then use a different IP range (for example 192.168.0.1 - 192.168.0.255 with netmask 255.255.255.0).
- Do not use your wireless router's WAN (Internet) port.
- Connect the host computer (to be used as your main LAN gateway/router) to a LAN port (not the WAN/Internet port) of the wireless LAN router.
- Configure your wireless router's LAN so that it appears to be a single device to the main LAN:
- Setup your wireless router so that the Internet Connection type is "Static IP" (often in the "Internet Setup" section). Configure the settings so that its "Internet IP address" is within the static IP address range of your main LAN (e.g. 10.0.0.254), and make sure the subnet mask matches the one you chose for your main LAN (e.g. 255.255.255.0). The gateway setting should be set to match the IP address of your host computer of the main LAN (e.g. 10.0.0.1 in the example of the preceding section). Now the wireless router will appear to the host computer as just another device on the main LAN.
- If your wireless LAN is already functioning, you probably don't have to change any settings, but double-check to make sure the schema are compatible. Configure the wireless router's settings for the nested wireless LAN. This is done by enabling the router's DHCP server functions (in "Network Setup" or some similar configuration section of the router). The router ought to have as its own wireless LAN gateway address a "local IP address" (or "LAN IP address") of 192.168.0.1 (for the IP address range used in this example), and a "starting IP address" (for the DHCP-assigned dynamic IP address range to be used for the wireless clients) to be 192.168.0.2 or greater. (Some routers ask you to specify the entire range (such as 192.168.0.2 - 192.168.0.255.)
- Make sure all your wireless client computers are set to obtain their DHCP-assigned dynamic IP addresses from the wireless router (gateway IP 192.168.0.1) instead of from the main LAN gateway.
- Now all communications from the wireless client computers will be routed to the wireless LAN router first, which will then in turn route them to the host computer (which is acting as the main LAN gateway/router), which will then in turn route them to the Internet (WAN).
- Note: The host computer for the main LAN must have a static IP address (e.g. 10.0.0.1 as in the example of the preceding section) and it must match the gateway IP address configured in the wireless LAN router settings.
Network Interfaces Bridging
- Install bridge-utils to be able to create network bridges:
sudo apt-get install bridge-utils
- Edit /etc/network/interfaces:
sudo nano /etc/network/interfaces
The interfaces file should look like this after editing it:
auto eth0 iface eth0 inet manual # auto br0 iface br0 inet dhcp # bridge_ports eth0 wlan0 # # The loopback network interface auto lo iface lo inet loopback
- Restart networking with:
sudo /etc/init.d/networking restart
Using Dynamic IP addresses for a webserver
Normally, domain name servers (DNS) that are used publicly on the Internet match a web server's URL name with the IP address of the server's host computer. If your computer has a static IP address, then you can publish your own web server's URL as belonging to the static, unchanging IP address of your computer.
However, if your IP address is dynamic (always changing) because you use an ISP (Internet Service Provider) that constantly changes your IP address (using DHCP), then you will need a Dynamic DNS service to constantly keep track of your dynamically changing IP address and match it to of your web server's URL. Fortunately, there are a few Dynamic DNS services that will do this for you, either for a small fee or even for free. For more info, see this Ubuntu Community help article.
For specific tips on setting up Dynamic DNS, see this article.
NFS is the default networking protocol for network file sharing in *nix systems (including (K)Ubuntu Linux). Here are some tips for setting up NFS from the Little Girl's Mostly Linux Blog.
Samba File Sharing
Samba client
Samba is a networking protocol that allows compatibility with Windows-based networks. The Samba client is installed by default in Ubuntu and should work seamlessly (unless you have have a firewall blocking the ports).
Samba server
Samba provides file/print services for the SMB/CIFS protocol used in Windows-based networks. See the official Ubuntu documentation for more information about providing services in a Windows network. A Samba server can be installed using the tasksel option during installation of the Ubuntu server from the LiveCD, or at any time using:
sudo tasksel install samba-server
- An alternative method of installation is:
sudo apt-get install samba samba-tools system-config-samba smbfs
- Note: samba-tools, system-config-samba, and smbfs are optional.
- Modify Samba settings.
- Method 1:
- Menu -> System -> Administration -> Samba
- (Note: this is available only if you installed system-config-samba.)
It is recommended that your user be a member of the sambashare group, as well.
- Method 2:
- Enable File Sharing Server With User Login (Very Reliable Method)
- Do the following on the machine that has the files to be shared:
- Add current user to Samba:
sudo smbpasswd -a username
- (replacing username with your login username)
- Open the samba config file:
sudo nano /etc/samba/smb.conf
- Add the directories to be added (right at the end) in the following format:
[Pictures] path = /home/username/<folder_to_be_shared>
- (Replace username with your username and <folder_to_be_shared> with the folder you want to share)
- Press CTRL+X and then Y to save.
- Restart Samba:
sudo service smbd restart sudo service nmbd restart
- Note: Prior versions used:
sudo /etc/init.d/samba restart
- On Windows access the folder in the following format in Windows Explorer:
- (replace 192.168.x.x with the actual IP address of your server which is serving the folder)
- On Linux type the following in Konqueror or Nautilus:
- (replace 192.168.x.x with the actual IP address of your server serving the folder)
Note: If you use Sharing in KDE's System Settings panel, be aware that there is a small bug, reported here. In brief, you need to comment out/delete any instances of these two lines in /etc/smb.conf :
case sensitive msdfs proxy
Change your Workgroup
To change your Samba (Windows network) workgroup:
sudo nano /etc/samba/smb.conf
Look for the line:
workgroup = WORKGROUUP
and change the setting to whatever your LAN workgroup is.
Recognizing Windows 98 machines
Microsoft networking is extremely quirky. To enable recognition of PCs with Windows 98, edit your Samba configuration file:
sudo nano /etc/samba/smb.conf
Then add the following lines to the file:
[global] # THE LANMAN FIX client lanman auth = yes client ntlmv2 auth = no
Integrating into Mac OS X Network
See this guide for information on integrating Ubuntu into an existing Mac OS X Appletalk network.
FTP Server
An FTP server allows the easy transfer of files between systems over the network. Clients such as Filezilla can be used to interact with an FTP server. Also see these FTP tips.
vsftpd is an FTP server available in (K)Ubuntu. For configuration information, see the official Ubuntu documentation. Install:
sudo apt-get install vsftpd
Proftpd is an FTP server available in (K)Ubuntu that can be used with either the MySQL or PostgreSQL database. Also see the Ubuntu Community documentation. Install:
sudo apt-get install proftpd-basic
WebDAV is a method for allowing remote access to local folders via an HTTP-based web browser or file manager. This can be combined with user authentication (using LDAP or other password mechanism).
- See this page for instructions.
Local Area Network
Modems / Dial-up
Network Manager does not accept modem connections. See Ubuntu help for information on identifying and connecting with a modem. These instructions require gnome-network-admin (install while connected to a wired ethernet connection):
sudo apt-get install gnome-network-admin
Gnome PPP and wvdial
Gnome PPP is a discontinued GUI frontend for the wvdial PPP modem dialer. It is still available as a package. Install:
sudo apt-get install gnome-ppp wvdial
See this forum thread for tweaks required to make Gnome PPP and wvdial operational in Lucid.
GPPP was the default modem dialing application in previous versions of Ubuntu.
- Menu -> Applications -> Internet -> GPPP Internet Dial-up
Remote Access
There are several methods of remote access. VNC sharing allows you to view and control a remote computer's desktop. (Windows users use a similar proprietary protocol called remote desktop protocol (RDP)). XDMCP allows a complete remote X-windows based login. Remote connections are hazardous unless proper security precautions are taken to prevent unauthorized logins and to ensure encryption of transmitted data.
Secure Shell or SSH is a network protocol that allows data to be exchanged over a secure channel (or "tunnel") between two computers. Encryption provides confidentiality and integrity of data. The OpenSSH client is installed by default in Ubuntu so you can connect to another computer that is running an SSH server.
Connect to a remote SSH server
From the command-line terminal
Install the OpenSSH client (if not already installed):
sudo apt-get install openssh-client
From the command-line Terminal type:
ssh -C <username>@<computer name or IP address>
- Note: The -C option indicates compression, which speeds up transmission through the tunnel.
For example:
ssh -C email@example.com
- or:
ssh -C firstname.lastname@example.com
- or
ssh -C 192.168.1.1 -l mike
- Note: -l specifies the login id.
If the SSH server is listening on a port other than port 22 (the default), you can specify that in your connection (with the -p option). For example, if the SSH server is listening on port 11022, connect:
ssh -C firstname.lastname@example.com:11022
- or
ssh -C remote.computer.xyz -p 11022 -l joe.friday
If you have made a public/private key using ssh-keygen, the private key must be stored in /home/user/.ssh. The key should be accessible only to user
sudo chmod 600 /home/user/.ssh/identity
- or
sudo chmod 600 /home/user/.ssh/id_rsa
To login with the key:
ssh -C remote.computer.xyz -p 11022 -l joe.friday
Note: You can run the command as a menu item, but the command must be "run in terminal."
Port forwarding through SSH
- See Using SSH to Port Forward for full details.
- In brief, use
ssh -C <remote ip> -p <SSH tunnel port> -L <local port>:<remote computer>:<remote port> -l <user>
This specifies that any communications from your computer (localhost) going out through <local port> will be transmitted securely through the the SSH tunnel port. To use VNC through the tunnel, you would use an application like Krdc or Vinagre:
krdc vnc://localhost:<local port>
Note: localhost is equivalent to (and interchangeable with) 127.0.0.1. Either can be used.
Note that for VNC, the default <local port> is 5900. In general, a remote VNC server (such as X11VNC) is also listening on the default <remote port> 5900 as well. The default <SSH tunnel port> is 22, as discussed above. All these can be changed, however, if you desire greater security.
For me, I noticed that I had to set <remote computer> to be the internal LAN IP address of the remote computer (such as 192.168.1.155) instead of the remote router's IP address, which is specified in <remote IP>. (If the remote computer has a static IP address (i.e. is directly connected to the Internet without an intervening router), then <remote computer> and <remote ip> would be the same.)
Example: For extra security, my SSH Server uses <SSH tunnel port>=11022. I want to VNC to a remote computer on a remote LAN with a router whose IP address is <remote ip> = 244.205.123.123. The remote computer to which I want to connect has a static IP address within the remote LAN of <remote computer> = 192.168.1.155. I have set up an X11VNC server on this computer that is listening on <remote port> = 6912 (instead of the default 5900). I setup port forwarding on the router of this remote LAN to forward port 6912 to this server computer. I want to VNC to this remote computer from my laptop, through the Internet. My laptop VNC client (Krdc) will use the default <local port> = 5900. My name is <user> = joe.friday. This is my story.
ssh -C 244.205.123.123 -p 11022 -L 5900:192.168.1.155:6912 -l joe.friday krdc vnc://localhost:5900
If you have set up a private/ public key pair with a passphrase, or if your SSH server requires a passphrase, of course, you will be prompted for the passphrase after issuing the SSH command.
Note: Port forwarding assumes that the ports are also forwarded through the router(s) and through any firewalls. See the documentation for your router(s) and firewall to learn how to do this. The advantage of SSH tunneling is that only the <SSH tunnel port> needs to be open and forwarded by a router. All encrypted communications will go through your router using this single port. This is what makes the communications secure.
PuTTY is a GTK-based GUI client-interface for SSH connections and eases the setup for port forwarding, SSH public key authentication, and automated login. A user would run Putty to create the SSH tunnel (instead of the ssh command) and then run a program such as Krdc or Vinagre. PuTTY is available for both Linux and Windows (but for routine Linux usage OpenSSH is generally recommended instead).
sudo apt-get install putty putty-tools
- To create a 2048-bit RSA key pair compatible with OpenSSH, it is possible to use Puttygen (part of Putty-tools). (For me the Linux version of Puttygen is occasionally buggy, however, so I recommend OpenSSH keygen for routine usage instead):
puttygen -t rsa -b 2048 -O private -o putty_rsa.ppk puttygen putty_rsa.ppk -O public-openssh -o id_rsa.pub puttygen putty_rsa.ppk -O private-openssh -o id_rsa
- Move the OpenSSH-compatible keys to the ~/.ssh (i.e. the /home/user/.ssh) folder
mv id_rsa* ~/.ssh
- Copy the public key ( /home/user/.ssh/id_rsa.pub ) to the server that is hosting the OpenSSH server, into the /home/serveruser/.ssh (for whichever user is the administrative user for the server -- generally the user that installed the server initially). If the SSH tunnel is (still) set at default port 22, you can copy the key using the utility:
ssh-copy-id email@example.com
- Connect a VNC client (such as Krdc) through SSH using the command-line:
putty -ssh -i ~/.ssh/id_rsa -l serveruser -L 5900:127.0.0.1:5900 remoteserver.computer.xyz -P 22 krdc vnc://127.0.0.1:5900
- or as a single command:
putty -ssh -i ~/.ssh/id_rsa -l serveruser -L 5900:127.0.0.1:5900 remoteserver.computer.xyz -P 22 sleep 5; krdc vnc://127.0.0.1::5900
- Alternatively, the PuTTY SSH Client GUI can be run (from Menu -> Internet -> PuTTY SSH Client) and options configured from there.
Using keys created by Puttygen in OpenSSH
The public security key generated by Puttygen in Windows is generally not compatible with OpenSSH security keys unless it is edited. For example, the default OpenSSH key is 2048-bit RSA (SSH-2). When a 2048-bit RSA (SSH-2) PuTTY public/private key pair is generated (by Puttygen) in Windows (see this tutorial), the public key looks like:
---- BEGIN SSH2 PUBLIC KEY ---- Comment: "rsa-key-20100302" AAAAB3NzaC1yc2EAAAABJQAAAQEAjdp567qxsGkhELlMQup2mXHdsveCWq/maU6k unPpbkwEuhkasuOrhkAWgv5v3d8S857zdHcfnXWi2FkEaJuFxqpJ2IkFuvqRdqYD ZCcASj2S0LoXdWpC4uon6VH8oBT31r+wkDfmI2a+K74jgXjtm1BWWxwOpKaWQHi9 YItbY/06renRex34n3ejO20JRqD/BxnFU7ND41Szo3ZMKoa0yzhevU2ntt74BCvC bYFHdSoRbi3AH8qGInzFfhXPdrG8qA382ZKEh5Bmy8Qxb9Uen/+jjP51YxN/ykee RwSrdSCZekB6jN6uuTLNDEXJSJizqlPU8tROqf3pYv1kxzD9bw== ---- END SSH2 PUBLIC KEY ----
- To be used by OpenSSH, the saved public key must be edited.
- Delete the first two lines (with the BEGIN and Comment: in them) and the last line.
- Join the remaining lines into a single line.
- Place ssh-rsa at the beginning.
- It should end up looking like:
ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAjdp567qxsGkhELlMQup2mXHdsveCWq/maU6kunPpbkwEuhkasuOrhkAWgv5v3d8S857zdHcfnXWi2FkEaJuFxqpJ2IkFuvqRdqYDZCcASj2S0LoXdWpC4uon6VH8oBT31r+wkDfmI2a+K74jgXjtm1BWWxwOpKaWQHi9YItbY/06renRex34n3ejO20JRqD/BxnFU7ND41Szo3ZMKoa0yzhevU2ntt74BCvCbYFHdSoRbi3AH8qGInzFfhXPdrG8qA382ZKEh5Bmy8Qxb9Uen/+jjP51YxN/ykeeRwSrdSCZekB6jN6uuTLNDEXJSJizqlPU8tROqf3pYv1kxzD9bw==
- Once the PuTTY public key is in this format, it can be appended to the ~/.ssh/authorized_keys file on the OpenSSH server. (The private key stays on the client computer, of course). PuTTY can then connect (from Windows or Linux) to an OpenSSH server using the public/private key method.
Connect using SSH Agent
With SSH Agent you can automate the use of public key authentication and open an XDM or VNC session using a script. See this tutorial.
Also see this alternative simple approach: Connect with SSH and start an application with a single command.
Setup an SSH server
Install the OpenSSH server:
sudo apt-get install openssh-server
- or
sudo apt-get install tasksel sudo tasksel install openssh-server
Note: The OpenSSH server can also be installed when doing a server installation as an option from the LiveCD.
Note: An OpenSSH server can also be set up on a Windows server using Cygwin. See these instructions.
- Don't forget to forward the port on which your OpenSSH server is listening. The default SSH port is 22; if the default is used, the router should therefore forward port 22 to the computer on the LAN that is hosting the OpenSSH server. The OpenSSH listening port can be changed; in fact, each computer on the LAN can listen on its own unique SSH port, if desired. The router must forward each specified listening port to the correct computer. Therefore, if computer 1 has its OpenSSH server set to listen on port 22221, then the router should forward port 22221 to computer 1's LAN IP address. If computer 2 has its OpenSSH listening port set to 22222, then obviously the router must forward port 22222 to computer 2's LAN IP address. To change the listening port of the OpenSSH server, edit the /etc/ssh/sshd_config file (use the gedit text editor instead of kate if using Ubuntu instead of Kubuntu):
sudo kate /etc/ssh/sshd_config
and change the listening port from 22 to your desired listening port:
Port 22221
then restart the OpenSSH server:
sudo /etc/init.d/ssh restart
- For greater port security (and to minimize brute-force attacks), consider using Knockd.
Limit authorized SSH users
OpenSSH Public Key Authentication
See this OpenSSH Public Key Authentication Tutorial.
In brief, it is necessary to generate a public / private key pair. On your client machine, generate the pair:
A prompt asks for a passphrase. If you wish to use OpenSSH without a password from a secure client (to which no one but you has access), leave the passphrase blank. If you enter a passphrase, you will be asked for this passphrase each time you use the SSH client. By default, a 2048-bit RSA SSH-2 key pair is generated and stored in the /home/user/.ssh folder. The private key is named id_rsa and is meant to stay in that folder. (The public key is id_rsa.pub and is meant to be copied to the OpenSSH server.)
- The private key must only be accessible (and should be read-only) to user, the owner of the file:
chmod 600 /home/user/.ssh/id_rsa
- You could also make the entire .ssh folder accessible only to user:
chmod 700 /home/user/.ssh
- Copy the public key ( /home/user/.ssh/id_rsa.pub ) to the server that is hosting the OpenSSH server, into the /home/serveruser/.ssh (for whichever user is the administrative user for the server -- generally the user that installed the server initially). If the SSH tunnel is (still) set at default port 22, you can copy the key using the utility:
ssh-copy-id email@example.com
- The ssh-copy-id utility only works over port 22. An alternative if you have changed your SSH port is to copy the /home/user/.ssh/id_rsa.pub key to the server manually. On the server make sure the directory /home/serveruser/.ssh exists and that there is a file authorized_keys (with write privileges) in that folder. If not, create such a file while logged into the server as serveruser (the touch command creates an empty file):
mkdir ~/.ssh cd ~/.ssh touch authorized_keys
Then concatenate the id_rsa.pub key you have copied to the ~/.ssh folder. (Make sure the owner of id_rsa.pub, after copying, is serveruser.):
cd ~/.ssh chown serveruser id_rsa.pub cat authorized_keys id_rsa.pub >> authorized_keys
- Make sure the OpenSSH server knows to look for the key file. On the remote server, edit the OpenSSH configuration file:
sudo nano /etc/ssh/sshd_config
- Uncomment the line (i.e. remove the # at the beginning of the line):
#AuthorizedKeysFile %h/.ssh/authorized_keys
- Remove the ability to login to the OpenSSH server using password authentication:
sudo nano /etc/ssh/sshd_config
- Change the line
#PasswordAuthentication yes
- to
PasswordAuthentication no
- Restart the OpenSSH server:
sudo /etc/init.d/ssh restart
- Now you can connect securely with an SSH tunnel without requiring a password, logging in as serveruser.
ssh -l serveruser -L 5900:127.0.0.1:5900 remoteserver.computer.xyz -p 22
Connect with SSH and start an application with a single command
- If you have created an OpenSSH key pair (without a password), you can start both the SSH tunnel and a VNC program (such as Krdc or Vinagre) to run through the SSH tunnel with a single command:
ssh -f -l serveruser -L 5900:127.0.0.1:5900 remoteserver.computer.xyz -p 22 sleep 5; krdc vnc://127.0.0.1::5900
- Alternatively (and probably preferably) you can create a Menu Item / Shortcut with the above command.
Note: This command is a command-line mini-script. The SSH option -f option tells the SSH client to fork into the background after starting. (This option is not available in the PuTTY client.) This allows the command line to continue to proceed to the next command(s) listed on the command line mini-script. The 5 second wait ("sleep") timeout allows time for the SSH tunnel to be created before proceeding to the next command. (This can be lengthened if necessary.) After the wait period, the program (Krdc VNC in this example) is started.
- Of course, any program could be started (to be run through the SSH tunnel) in this fashion, not just a VNC program.
Automate SSH connections that require a password
This method is strongly advised against. Transmitting an unencrypted password through the Internet (in order to establish an SSH connection) invites password sniffing. Use the OpenSSH key pair methods described above, instead. This method is listed here for reference.
- Terminal interactions (such as the SSH password challenge) can be automated using the expect utility. Install:
sudo apt-get install expect
- If, for example, your SSH client ID is clientuserID, yourpassword is not#1sostrong, and the remote SSH server is remoteserver.computer.xyz (using the default SSH port of 22), then use this command to start the SSH tunnel:
expect -c 'spawn ssh -l clientuserID -L 5900:127.0.0.1:5901 remoteserver.computer.xyz -p 22; expect assword ; send "not#1sostrong\n" ; interact'
There are other parameters in this example. 5900 and 5901 are the ports to be used on either side of the tunnel (port 5900 is used for VNC, for example). See Port forwarding through SSH for more details.
You can use the entire command as a menu item (must be "Run in terminal" in the Advanced menu options).
Virtual Network Computing (VNC) mirrors the desktop of a remote ("server") computer on your local ("client") computer (it is not a separate remote login, as is XDMCP). A user on the remote desktop must be logged in and running a VNC server (such as X11VNC, Vino, or Krfb). Keyboard and mouse events are transmitted between the two computers. VNC is platform-independent —- a VNC viewer on one operating system can usually connect to a VNC server on any other operating system. (Windows users can use one of several clients such as UltraVNC Viewer.)
Vino Remote Desktop VNC server
Vino-server (the Gnome VNC server) is included by default in Ubuntu. Start:
- Menu -> System -> Preferences -> Remote Desktop
- You can accept uninvited connections in the Security section. You can require a password for these connections.
- This implementation of Vino does not allow changing the default listening ports (which start at 5900). If you wish to customize your VNC connection, use X11VNC instead.
- A user can connect using Vinagre, the Terminal Server Client, or any other VNC client.
How to securely use VNC with SSH tunneling
It is less secure to leave the VNC listening port open to the Internet, even with a password. (This can expose you to password cracking attempts.)
It is more secure to use SSH to tunnel your VNC connection. Under SSH port forwarding, the VNC listening port is the <remote port>. To increase security, this listening port can be changed from the default 5900. Only the VNC server and the SSH client need to specify the <remote port> in a secure connection.
X11VNC Server
While Vino is easy to use, X11VNC allows far more customization and therefore can be used more in situations where greater security is needed.
- Install an X11VNC server to share your desktop with other computer:
sudo apt-get install x11vnc
- Run X11VNC without a password:
x11vnc -forever -rfbport 5900
- Note: -rfbport 5900 specifies the port to listen on. The port number can be changed. This option is not required if the default port 5900 will be used. Don't forget to open/forward this port in your firewall/router. By default X11VNC server exits after the first client disconnects. To keep it running (and allow future connections), use the -forever option. See here for more command line options.
- Create a password to use with X11VNC:
mkdir ~/.vnc x11vnc -storepasswd YOUR_PASSWORD ~/.vnc/x11vnc.pass
- X11VNC can then be started with a password:
x11vnc -forever -rfbport 5900 -rfbauth ~/.vnc/x11vnc.pass -o ~/.vnc/x11vnc.log -loopbg -display :0
- You can create a startup script so that X11VNC is automatically loaded at startup (with password settings):
echo "/usr/bin/x11vnc -forever -rfbport 5900 -rfbauth ~/.vnc/x11vnc.pass -o ~/.vnc/x11vnc.log -loopbg -display :0" > ~/.config/autostart/x11vnc.sh chmod +x ~/.config/autostart/x11vnc.sh
- You can test the startup script:
Using VNC with SSH
See Port forwarding through SSH for additional information.
Vinagre VNC client
Vinagre is the default Gnome-based VNC client used in Ubuntu.
- Menu -> Applications -> Internet -> Remote Desktop Viewer
Terminal Server Client
The Terminal Server Client is an Ubuntu/Gnome frontend for rdesktop (for RDP connections to Windows computers) and one of several vncviewer clients (for VNC connections). In can be used instead of Vinagre.
- Menu -> Applications -> Internet -> Terminal Server Client
- To use it with VNC, one of the VNC clients must be installed first. For example, install the TightVNC client:
sudo apt-get install xtightvncviewer
- Note that the TightVNC client can be used from the command line (or as a menu item) directly:
vncviewer 192.168.0.12::5900
- where 192.168.0.12 is an example host location that is running a VNC server on port 5900. For more command-line options, use
man vncviewer
Krdc VNC client
Krdc is the default VNC client in Kubuntu/KDE but can be used in GNOME. It can be used for both VNC and RDP connections. Installing it will also install the Qt platform and many KDE utilities (a large download).
sudo apt-get install krdc
- Run:
- Menu -> Applications -> Internet -> Krdc
- The command-line connection (for use as a menu-item, for example) is:
krdc vnc://<remote IP>
- If the remote (Krfp) VNC server is using a <remote port> other than the default 5900 port, use
krdc vnc://<remote IP>:<remote port>
- Krdc can also connect to a Windows server using RDP (Remote Desktop Protocol).
krdc rdp://<remote IP>:<remote port>
Using a VNC client with SSH
See this howto for an automated setup using a script (it did not work for me, but it might for you).
In brief, you would initiate an SSH tunnel with port forwarding using Putty or the command line:
ssh -C <remote ip> -p <SSH tunnel port> -L <local port>:<remote computer>:<remote port> -l <user>
- then you would start a VNC client such as Krdc:
krdc vnc://localhost:<local port>
<local port> will usually be the default 5900, in which case you could simply use
krdc vnc://localhost
XVNC4Viewer VNC Client
XVNC4Viewer is an alternative to Vinagre or the Terminal Server Client (vncviewer). Install:
sudo apt-get install xvnc4viewer
Automatic user login (for use with VNC)
VNC only works if a user is logged in. When a computer (hosting one or more servers) is intended to start up unattended and VNC (with or without SSH tunneling) is to be used, the computer ought to start with the primary user logged in. To accomplish this:
- Menu -> System -> System Settings -> Login Manager -> Convenience -> Enable Auto-Login (ticked) -> Lock session (ticked)
- -> Pre-select user: Specified: Choose primary user (i.e. the user hosting the SSH tunnel, if any, and the VNC server)
- -> Automatically log in again after X server crash (ticked)
- Also make sure the VNC server is set to Autostart at bootup.
FreeNX is a remote desktop display server/client solution that natively incorporates SSH tunneling (unlike VNC). It is therefore more secure than VNC (unless VNC is coupled with SSH tunneling).
FreeNX Server
The Free server .deb package can be downloaded from No Machine free server downloads.
- Alternatively, add the following repositories:
sudo add-apt-repository ppa:freenx-team
- Install the package:
sudo apt-get update sudo apt-get install freenx
FreeNX Client
Download the self-installing .deb file from No Machine Client downloads.
XDMCP allows a separate remote login by an authorized user. This login is separate from the local user.
- XDMCP is not secure over the Internet and should only be used within a LAN. It cannot be tunnelled through SSH. It is turned off by default in Ubuntu. To enable it, edit the configuration file:
gedit /etc/gdm/custom.conf
- Find and change (or add) the line from false to true so that it reads:
[Xdmcp] Enable=true
SSH is, basically, secure Telnet.
VPN clients
A VPN (Virtual Private Network) allows a secure encrypted connection ("tunnelling") over the Internet between a client (either standalone or on a separate LAN) and a home or corporate LAN server.
VPN through Network Manager
- The default Network Manager in Ubuntu/Kubuntu has a VPN client available. This includes support for IPSec and Cisco-compliant VPN connections. Install:
sudo apt-get install network-manager-vpnc
- To connect to a VPN network using OpenVPN (SSL), install the plugin:
sudo apt-get install network-manager-openvpn
- To connect to a VPN network using PPTP (MS Windows servers), install the plugin:
sudo apt-get install network-manager-pptp
- Configure:
- Network Manager icon (in system tray) -> VPN Connections -> Configure VPN
vpnautoconnect (VPN daemon)
vpnautoconnect is a daemon to allow automatic VPN connections through Network Manager. Download and install the .deb package for your OS version.
Other VPN clients
Standalone VPN clients based on protocol are available (but not necessary if using Network Manager):
- vpnc, grml-vpn -- for Cisco-compliant (IPSec) VPN networks
- openswan -- for IPSec (OpenSwan) VPN networks
- pptp-linux -- for PPTP (MS Windows-compliant) VPN networks
- openvpn, gadmin-openvpn-client -- for OpenSSL (OpenVPN) VPN networks
VPN servers
OpenVPN is a free, GPL-licensed open-source cross-platform VPN solution based on OpenSSL (not IPSec). Install the server (then see the website for further installation instructions):
sudo apt-get install openvpn bridge-utils
A GUI configuration utility (GTK-based) is available:
sudo apt-get install gadmin-openvpn-server
Also see these installation tips.
Poptop (PPTP Server)
Poptop is a free open-source PPTP-based VPN server compatible with MS-windows PPTP clients. Install:
sudo apt-get install pptpd
OpenSwan is the open source implementation of IPSec-based VPN connections for Linux (and is a successor to FreeSwan). Install:
sudo apt-get install openswan linux-patch-openswan
Ubuntu by default is a fairly safe system. However, if you intend to use Ubuntu as a server, or for critical applications in which loss of data (by accident or by malicious intrusion) would be disastrous, you should learn how to make Ubuntu more secure. A good introduction to Ubuntu Security Best Practices is available. Recommended reading includes the book Cyber War by Richard Clark and this interview with Joe Weiss (IT advisor for the energy-sector smart grid).
Network communications go through "channels" called ports. You can restrict which ports are available ("open") for network communications, creating a barricade to unwanted network intrusion. Firewalls do this job for you. But I guarantee that if you install one before you know how to use it that one or more networking programs on your system will stop working. Read every bit of documentation about a firewall before installing it -- you won't regret the time invested. All of these packages modify iptables, which is the set of rules that controls network access in and out of your computer. (You can modify iptables manually from the command line, as well, but if you are that much of an expert, you probably don't need this guide.) Also see the official Ubuntu documentation.
Firestarter is an intuitive firewall manager used to set the iptables values which provide firewall capabilities in Linux (including Ubuntu). It has a very easy-to-use GUI.
sudo apt-get install firestarter
Firestarter fails to open system log
This is a problem in Oneiric. See the solution here.
Guarddog is a GUI firewall configuration utility that has been used for KDE. It has a complex array of configuration, and is difficult to use for some beginners.
sudo apt-get install guarddog
Uncomplicated Firewall
Uncomplicated Firewall is installed in Ubuntu by default, but all ports are open initially. It is configurable through the command-line interface. See this forum thread, or this usage tutorial, or Ubuntu community help for tips on how to set up and use it. If not installed, it can be installed:
apt-get install ufw
Gufw is a graphical user interface for Uncomplicated Firewall. Install:
sudo apt-get install gufw
- If you are running a file server, interface frequently with Windows drives or share files with Windows users, or use virtualization, you will want a virus checker for your Windows files.
- Despite extensive minsinformation, Linux is not immune from malware (witness the explosion of malware being created for the Linux-based Google Android systems). The malware is not usually spread within the OS itself (as long as the OS is a well-respected distribution obtained through official channels), but in trojan programs downloaded and installed by users outside of the normal software distribution channels (i.e. repositories) of the OS. There is always a danger to using programs downloaded from the Internet from sources other than respected repositories -- it is the primary reason that Debian and (K)Ubuntu retain tight control over their software repositories.
- Any file can have malware embedded in it (which is trivial to achieve by concatenation, for example: cat originalfile.avi malware.exe > originalfileplusmalware.avi). The question is whether a user will try to open a file with a program (such as a media player) that has been compromised in a way that allows it to execute the code found in the infected media (e.g. .avi) file. This can occur not only for Windows users but for any OS (including Mac OS X and Linux) with a compromised program (e.g. media player).
- Routine scanning of any file downloaded from the Internet, any file imported from another user's computer (even a trusted source, since their attention to virus prevention may not be as compulsive as yours), or any attachment received in an email (even from a trusted sender) should be done with an anti-virus program.
ClamAV is the open source virus tool for Linux. To install ClamAV:
sudo apt-get install clamav
- If an error is returned: "The database directory must be writable for UID 1000 or GID 1000" in order for the virus database to be updated, then change the ownership of the installation directory (/var/lib/clamav):
sudo chown 1000 /var/lib/clamav
ClamTk (ClamAV GUI)
ClamTk is a GTK-based GUI frontend for ClamAV. Install:
sudo apt-get install clamtk
AVG offers a free virus scanner for Linux in a .deb package. Download and install from the website.
Avast offers a Linux edition (for home users only) in a .deb package. Download and install from the website.
Spam Assasin
SpamAssasin is written in perl, and is mostly for use with a server (such as a groupware server or Apache). Install:
sudo apt-get spamassassin
Rootkit checkers
Rootkits are malicious trojan-like programs to allow an intruder to become a root user and therefore have complete administrative control over the system. There aren't many rootkits in the wild for Linux. Still, this is a growing security problem (especially in other operating systems) and it is a matter of time before more rootkits appear in Linux. Checking for rootkits isn't always successful from a system that is already infected. Your rootkit checker should therefore be run from another system, or a USB pendrive with an Ubuntu LiveCD installation. See the rootkit checker manuals for instructions how to do this. If you are infected with a rootkit, you must backup all your files and re-install your system. (Thank goodness this is easy with Ubuntu, unlike with other operating systems).
Chkrootkit checks locally for signs of a rootkit. See the chkrootkit manual for usage instructions.
- Install:
sudo apt-get install chkrootkit
- Run:
sudo chkrootkit
Rootkit Hunter
Rootkit Hunter is compatible with (K)Ubuntu systems. See the usage instructions.
- Install:
sudo apt-get install rkhunter
- Run:
sudo rkhunter
Malicious commands to avoid
There are many malicious commands to be avoided in Linux (as in all operating systems). It is worthwhile to be aware of these dangerous commands so that they are not executed by accident or by malicious advice.
USB drives
USB drives are a major source of security risk and means of data theft.
- An administrator password should be set for the computer BIOS and booting from a USB drive or CD/DVD should be disabled. (Otherwise, any passerby can boot their own OS and then use it to steal data from the hard drive.)
- See this article for methods of restricting USB usage to authorized users.
Prevent unauthorized boots and system access
Many computers are kept in places where casual passersby may have an opportunity to access the computer, unobserved for short periods. In addition to physical precautions to prevent or slow computer theft (such as locked cases, alarms, and security cables similar to those used to slow bicycle theft), precautions should be taken to prevent an unauthorized operating system from being booted using an external device (such as USB drive). Once such as external OS is booted, it can be used to access most hard drive(s) on the computer and the contents copied to a second external device (to be examined or unencrypted later). This is a common means of data theft that is fast and easy to accomplish, and means to deter it should be taken on any public or semi-public computer.
- Set BIOS to restrict bootup to the hard drive only.
- Set a Supervisor/Administrator password for your computer's BIOS. (I recommend writing it down and taping it to the inside cover of the computer case prior to locking the computer case.) Disable booting from all devices except the hard drive. Setting the hard drive as the first priority boot device is not enough, as most current BIOS menus allow manual selection of any enabled boot devices. Only the hard drive should be left enabled.
- Enable Hard Drive locking, if your computer's BIOS allows it. Most hard drives allow a password to be set by the BIOS and stored in a chip on the hard drive controller which can only be reset by disassembling the hard drive. (Some manufacturers provide a backdoor security key, however.) BIOS versions found on newer computers/laptops allow this password to be set in the BIOS, so that only a BIOS containing the correct password can unlock the hard drive. (If the hard drive is then removed from the computer, it cannot be accessed by any BIOS that does not have the correct password or backdoor security key.) Note, however, that this precaution does not protect against booting from external devices if the BIOS is still set to allow that.
- There is a risk to this security measure. If you forget the password and the BIOS passwords somehow get reset, the hard drive would become inaccessible. The BIOS and Hard Drive password(s) should always be stored in a safe location.
- Password protect the Grub bootloader. Without password protection, Grub can be used to circumvent BIOS restrictions. See this section for Grub Legacy and this section for Grub2.
- Make sure all user accounts are protected by a password, and always require passwords for login. Never create an "administrator" user account (hidden or not) and leave it unprotected by a password. Never enable automatic login without a password to any user account.
- It is possible to enable automatic login to a preferred password-protected user account while simultaneously enabling a password-protected screensaver (the password for which must still be entered even before initial user access). This is a reasonable solution that offers protection while still allowing automatic login.
- Make sure a password-protected screensaver is always enabled (that will engage after a reasonably short period of inactivity).
Network Monitors
There are two types of network monitors: those that monitor your own system's network settings and those that monitor network traffic. The latter includes security tools (that can also be used as hackers tools) for exposing security weaknesses in a network. Be aware and be safe! A list of available tools is at Top Ubuntu Security Tools.
Netstat is the Linux command-line tool to monitor network status and functions. There are many usage parameters. See the manual for help.
Etherape (Network monitoring)
EtherApe is a graphical utility that allows you to see (in real-time) where connections are being made on your network, or between your network (or computer) and the Internet. If you are experiencing unexpected network activity on your computer or LAN and wish to see where the activity is occurring, this is an easy tool to use. Both "local" user and "root user" installations are created; in general you must use the root user installation to see all your network traffic.
sudo apt-get install etherape
List open files
Sometimes you will see your network slowing and want to know which files are sending data over ports. Use this command:
lsof -i -n -P
Nmap is a free open source utility for network exploration (including showing open ports and running services) and security auditing. Install:
sudo apt-get install nmap
Scan your own PC:
nmap localhost
(Once you have found out which ports are open, use a firewall to close the ones you don't want open.)
Nmap GUI
sudo apt-get install nmapfe
- or you can try Zenmap:
sudo apt-get install zenmap
Nessus is a proprietary comprehensive vulnerability scanning suite that is free for personal, non-enterprise usage. See the website for details.
Snort is the de facto open source standard for intrusion detection. Install:
sudo apt-get install snort
It can be used with an MySQL database (sudo apt-get install snort-mysql) or with a PostgreSQL database (sudo apt-get install snort-pgsql).
AcidBase is an intrusion detection / basic analysis and security engine that uses Snort. Install:
sudo apt-get install acidbase
AppArmor is a set of security enhancements developed by Novell for SUSE Linux. It is installed in (K)ubuntu by default.
Disable AppArmor
AppArmor can prevent some services from running as expected and cannot be used in conjunction with SELinux. To disable it:
/etc/init.d/apparmor stop update-rc.d -f apparmor remove apt-get remove apparmor apparmor-utils
SE Linux (Security Enhanced Linux) is an NSA (US National Security Administration) recommended set of tools for enhanced security in Linux systems. It enforces strict access controls (privileges) and is meant for mission-critical installations. It is not suitable for the casual desktop user. It was first available in Hardy Heron and is being updated for Intrepid Ibex. It is not compatible with AppArmor (which must first be removed).
sudo apt-get install selinux
Knockd (Port security)
Knockd is a small server that listens for a pre-defined sequence of port opening attempts (a "knock") before opening an otherwise closed firewall port for communications. Install:
sudo apt-get install knockd
Network Management
Monitor your network or datacenter with a framework of utilities. Comparable to IBM Tivoli (which can cost thousands of dollars), these solutions are generally available as either community or enterprise editions.
- Hyperic is an open-source network monitoring framework that can be used in either a datacenter or a cloud environment (it is used for Amazon Cloud). Both a free community version and a subscription enterprise version are available.
- Groundwork OpenSource offers a community edition that integrates other packages such as Nagios, Nmap, and others. There is a subscription enterprise version as well. It has its roots in a university setting.
- OpenQRM is the GPL-licensed, free open-source community successor to the very popular network monitoring solution Qlusters. It is available as a Debian/Ubuntu package. See the website for details.
- Canonical offers the Landscape network management service for $150 per node, with a free trial available.
- Zenoss is a commercial network monitoring subscription package (about $150/node) with a limited free "core" edition also available.
Nagios is a free open source network monitoring solution. It is administered from a web interface (http://localhost/nagios) and is expandable using a large number of available plugins. For additional configuration information, see the official Ubuntu documentation. Install:
sudo apt-get install nagios3
Munin is a free GPL-licensed open source networking monitoring tool based on RRDTool, in which a master network node queries other network resources, cataloging and graphically displaying changes. It has a web interface and multiple plugins. For additional configuration information, see the official Ubuntu documentation. Install:
sudo apt-get install munin
Cacti Monitoring Server
Cacti is a complete, free open source network graphing solution designed to harness the power of RRDTool's data storage and graphing functionality. Cacti provides a fast poller, advanced graph templating, multiple data acquisition methods, and user management features out of the box. It uses MySQL and PHP (part of the LAMP server stack). All of this is wrapped in an intuitive, easy to use interface that makes sense for LAN-sized installations up to complex networks with hundreds of devices. For more info see Cacti Server Setup. Install:
sudo apt-get install cacti
Cluster SSH
ClusterSSH allows replication of a command on an administration console to be replicated via SSH to multiple computers in a cluster. Install:
sudo apt-get install clusterssh
Enterprise Network Firewall
IPCop is a free open source (GPL-licensed) firewall solution for use as an independent appliance (on a dedicated PC) in an enterprise network. It allows remote management and can protect multiple servers, including web and email servers. IPSec-based OpenVPN is supported. The CD image .iso and other files can be downloaded here. Installation instructions are on the website.
SmoothWall Express is an award-winning, free, open source (with a GPL license) firewall solution for use as an independent appliance (on a dedicated PC) in an enterprise network. Download the installation CD .iso image here (server OS included), burn onto a CD, and install on a new, dedicated PC. Many features, however, such as VPN server, database access authentications, and content filtering are only implemented in a commercial version, however, and are not available in the community version.
Endian is a very robust, free, open source universal threat management appliance similar to IPCop and Smoothwall. It also incorporates OpenVPN. Like Smoothwall, Dansguardian is used for content filtering (and is included in the community edition). Commercial and hardware versions with some additional features, automatic updates, and professional support are available. See the website for details.
LTSP (Thin client support)
LTSP (the Linux Terminal Server Project) adds thin-client support to Linux servers. The package is free, GPL-licensed, and the client can be used to run programs on either Linux or Windows LTSP servers. There is a module for classroom management (ltsp-controlaula) as well. Installation instructions are here. The alternate LiveCD can also be used to install a terminal server, as indicated in these instructions.
LTSP Server
sudo apt-get install ltsp-server ltsp-manager
LTSP Client
sudo apt-get ltsp-client
iTALC (Thin client for Education)
iTALC is a free, open source (GPL-licensed) thin client solution that supports both (K)Ubuntu Linux and Windows XP. It has been used widely in educational settings to monitor, share, and control multiple workstations. See the website for download and installation instructions.
Internet Cafe software
Internet Cafe (or CyberCafe) software is specialized LAN-administration software that includes time usage monitoring, billing, and administration. It can also be used in schools, libraries, and organizations with multiple monitored workstations requiring usage limits.
OutKafe is a free, open-source, GPL-licensed cybercafe solution based on a postgreSQL database server stack. It is run on hundreds of sites. It is GTK-based but can be run with Kubuntu (KDE).
OpenKiosk is a free open source multi-platform server/client solution for administering and monitoring groups of workstations, such as in libraries, school labs, and internet cafes. Installation is from source files. See the website for details.
CafePilot is a free multi-platform Java-based server/client solution for real-time monitoring and billing of Cybercafe workstations. A complete custom Ubuntu-based LiveCD server/multiple-client solution (including OS and many applications for unlimited workstations) is available for $100 here.
Miscellaneous solutions
This thread discusses several other solutions, including:
Pessulus (Lockdown Editor)
Pessulus is a GTK (Gnome)-based utility that allows an a computer administrator to restrict acccess to several administrative functions, including the command-line Terminal and many other functions. This is useful on public kiosk PCs, for example. Install:
sudo apt-get install pessulus
Cluster (cloud) computing
Cloud computing is the co-ordination of many servers to maximise computing resources and efficiency. The use of virtual machines, load balancing, and VLAN technology are combined into an integrated system. Distributed computing and parallel processing underlies the networks of computers that are now used in a number of supercomputing applications.
OpenStack cloud
OpenStack is the technology currently used by Ubuntu for cloud computing as part of the Ubuntu Cloud Infrastructure. (Also see the Ubuntu community help.) It is now included as part of Ubuntu server versions (starting with 12.04 LTS Precise).
- See the Ubuntu private cloud information to set up an OpenStack cluster.
Eucalyptus cloud
Eucalyptus is a project from University of California Santa Barbara to facilitate cluster computing on servers that have the Xen virtual machine implementation enabled. Prior to 11.10 (Oneiric) it was available for the Ubuntu server edition as the Ubuntu Enterprise Cloud.
- See the instructions for installing Eucalyptus on Debian systems.
The Beowulf cluster computing project is one of the earliest cluster computing examples and provides the underpinning for a number of Linux-based supercomputing clusters. A Beowulf cluster is designed to function like a single supercomputer, and can be scaled to any number of nodes. It uses open source components. See this introductory article on creating a Beowulf cluster with Ubuntu.
- OSCAR is a software platform that allows the creation of a Beowulf cluster on RedHat or Debian/Ubuntu Linux servers. See here for instructions on installing the .deb packages from repositories.
BOINC (Berkeley Open Infrastructure for Network Computing)
BOINC is middleware software developed at UC Berkeley to allow multiple computers to operate as a grid-based (cloud based) supercomputer. There are over half a million computers participating in BOINC projects. To install BOINC and participate in one or more of these projects:
sudo apt-get install boinc
A warning about distributed computing
Cloud computing is often mistaken for remote hosting. While cloud computing using public hosts may be beneficial in "farming out" a few of your non-sensitive computing needs, the recent ease of cloning filesystems and the promiscuity of datacenters has placed a great deal of sensitive data at risk when databases and critical server functions themselves are remotely hosted at a site not under your complete control. Even "trusted" banks and other large businesses routinely trade and sell our sensitive "private" data to multiple partners (sometimes for profit and sometimes unwittingly). Hosted servers are compromised on a daily basis and it is not very easy for an end customer to know how effective are the security practices of a remote hosting service. Further, any data left on public storage devices (cloud servers) in the US for more than 180 days are subject to search and seizure by government agencies there. Therefore, it is almost always more secure to host your own server(s) in house and to limit the traffic and access to your databases and servers to members of your own organization. Learning how to run your own servers is worth the effort, and powerful hardware on which to run them is inexpensive these days.
The Ubuntu cloud computing environment allows you to recruit the multiple computers within your own organization for distributed ("cloud") computing and thereby keep it all "in house" (behind secure firewalls). You do not need to expose your organization to insecure remote public hosts in order to use cloud computing.


text:
Arcadia, CA, April 10 -- The Kentucky Derby spotlight shifts to Oaklawn Park, and HRTV's (R) Westrock Coffee First Call show will emanate from Hot Springs, AR on both Friday and Saturday to cover all the racing action, which includes two Grade 1 races -- the $1 million Arkansas Derby, a Derby prep, on Saturday, as well as the $500,000 Apple Blossom for fillies and mares on Friday.
Hosted by Aaron Vercruysse and Jeff Siegel, and joined by Zoe Cadman, Westrock Coffee First Call will be at Oaklawn for the third consecutive year to chronicle the track's biggest weekend. The one-hour show, which airs at 11 a.m. ET, provides racing fans with pertinent interviews, commentary, news, race replays and morning workouts. Friday's show from Oaklawn will be a special edition of Westrock Coffee First Call.
Later each day, Vercruysse and Siegel will also co-anchor their lively, newly-created daily show, The Player (2-4 p.m. ET) from Oaklawn, as the show makes its "road" debut. The Player debuted in December, catering to serious horseplayers, while offering information and selections, spiced with a mixture of analysis, wagering strategies and minute-to-minute live Thoroughbred racing action.
HRTV on-site talent will provide full coverage of both outstanding days of racing, with Saturday's card including three other major stakes: the Oaklawn Handicap, the Count Fleet Sprint, and the Northern Spur.
About HRTV
HRTV, The Network for Horse Sports, is a television-based multimedia network dedicated to equine sports. HRTV's programming features horseracing from top U.S. and international racetracks, as well as a wide range of world-class English and Western horse competitions, news, original programming and award-winning documentaries covering the world of horse sports. The live stream of HRTV is available on a subscription basis to high-speed Internet users worldwide at www.tvg2.com <http://www.tvg2.com/> . In the U.S., the HRTV television network is available via telco, cable and satellite in over 19 million homes.
« Back
Sign up to receive frequent updates and promotions from TVG2
By clicking "Submit", you agree to the Terms of Use for the TVG2.com website, which includes the TVG2 Privacy Policy.
Join friends of TVG2 in the social world and share updates, opinions and news!


text:
Black Sabbath unveil details & preview video of live DVD
Listen to Black Sabbath on iHeartRadio
Black Sabbath is sharing more information about their upcoming concert DVD. The group has released a preview of "Black Sabbath: Live...Gathered in Their Masses," which includes a performance of the classic song, "Paranoid."
"Gathered in Their Masses" features footage from Black Sabbath's shows this past spring in Melbourne, Australia, as the band launched their world tour behind their new album, "13." In addition to "Paranoid," Black Sabbath also treated the crowds to "Iron Man," "War Pigs," and other longtime favorites, and also gave the first live performances of tracks from the new disc.
"Black Sabbath: Live...Gathered in Their Masses" will be available on DVD, Blu-ray, and in combo packs with a ten-track audio CD, as well as in a deluxe box set including a host of bonus material. The release will hit stores November 26th.
"Black Sabbath: Live...Gathered in Their Masses" DVD and Blu-ray track listing
1. War Pigs
2. Into The Void
3. Loner
4. Snowblind
5. Black Sabbath
6. Behind The Wall Of Sleep
8. Methademic
9. Fairies Wear Boots
10. Symptom Of The Universe
11. Iron Man
12. End Of The Beginning
13. Children Of The Grave
14. God Is Dead?
15. Paranoid
"Black Sabbath: Live...Gathered in Their Masses" CD track listing
1. War Pigs
2. Loner
3. Black Sabbath
4. Methademic
6. Iron Man
7. End Of The Beginning
8. Fairies Wear Boots
9. God Is Dead?
10. Paranoid


text:
PHOTO: Taylor Swift spotted at birthday dinner with Lorde
Listen to Taylor Swift on iHeartRadio | Listen to Lorde on iHeartRadio
Taylor Swift is getting friendlier with breakout "Royals" singer Lorde.
While continuing her "Red" tour in Australia, she was photographed out to dinner in Melbourne with the rising star on Thursday night, just before Taylor's 24th birthday on the 13th.
According to the "Daily Mail," Taylor and Lorde were joined by a group of friends all taking part in the star's two-day celebrations.
Their hangout isn't however being taken kindly by some fans on Selena Gomez, Taylor's best friend, who Lorde accused of being "anti-feminist" earlier this year. Selena and Lorde have had some back-and-forth over the comments, and the pop star even publicly declared she would stop covering "Royals" at her concerts.
Are Lorde and T-Swift new besties?
Photo Credit Splash News


text:
To learn more about HD radio, click here.
Thank you for choosing to listen to WDAC HD1 and HD2 online! This station is utilizing Liquid Compass http://www.liquidcompass.net/, a national streaming services company to broadcast its signal to the Internet.
This new and improved streaming media service supports PC, MAC and Linux users! To ensure that that you are able to fully enjoy this stream, please make sure that your computer has the latest free and computer safe Flash Player.
If you do not have latest Flash Player please click on the following link that will redirect you to the Adobe download center: http://get.adobe.com/flashplayer/
Common issues not allowing you to access the stream:
Pop-Up Blocker:
If you are unable to launch this station's media player after clicking on the listen link, and you receive the following error displayed below, please mouse over the error message and select "Always Allow Pop-ups from This Site". As a shortcut, you may also hold down your CTRL key and click on the listen link to launch the player.
Virus Protection Software:
If you cannot hear the stream, or other streams using Adobe Flash Player, please turn off your virus protection software, and try to reconnect. If you are able to connect after turning off your virus protection, you may need to disable your pop up blocker or add the web page's URL to your trusted sites section. Please consult your virus program's help files for these configurations.
If your system is behind a firewall (typical at an office network), please contact your network administrator to open up your firewall to allow your system to access this stream via port 80 or verify that they allow streaming media to be played over the network.
Refresh the Player:
You may also refresh the player by hitting either the F5 button, or the Control and R buttons together.
If you are still having problems accessing this stream, please log onto http://www.liquidcompass.net/, fill out a support ticket and a representative will assist you with any troubleshooting issues you might have to ensure that you are able to fully enjoy this station online!
Thanks for listening!


text:
Accused Rapist's Defense: My Twin Did It
(NEWSER) – An Army lieutenant accused of sexually assaulting several young girls will be allowed to make an unusual defense at trial: blaming his twin brother, the AP reports. DNA samples have linked the officer, Aaron Lucas, to three of the crimes, but the siblings share the same DNA. "I have never seen it, ever," says a criminal defense attorney. "The only time I have seen it was on 'Law and Order: SVU.'" A judge said it would be "inappropriate" to stop Lucas' lawyers from offering up his brother as a possible suspect.


text:
http://www.eliterestaurantequipment.com/thunder-group-round-slip-resistant-serving-tray-14-12-per-case-plrt014.html http://www.eliterestaurantequipment.com/media/catalog/product/cache/1/image/265x/9df78eab33525d08d6e5fb8d27136e95/t/h/thundergroup_plrt014.jpg PLRT014 Thunder Group
Thunder Group PLRT014 - Round Slip Resistant Serving Tray 14" (12 per Case)
Shop With Confidence
We have one goal in mind: provide food service professionals with all the products they need under one roof at affordable prices. Since then we have succeeded in creating an innovative, easy to use website that meets the needs for food service professionals throughout the United States and Canada. Food service experts, programmers, developers, content writers, technical support staff, and warehouse employees work together to make certain that we provide the best service and industry knowledge on the web.
Return Policy: All stocked items may be returned to us if the item has not been used and is in original packaging. In order for returns to be accepted, your items must be returned within 30 days from receipt. Please note when placing an order you agree to our return policies. Please contact a customer solutions specialist before returning an item. We will create a return authorization for you and send you an e-mail with instructions on how to complete the return. You will be credited 24-72 hours upon receipt and inspection of returned product(s). Products returned may be subject to restocking fees. All parts are non-refundable.
Ask A Question Thunder Group PLRT014 - Round Slip Resistant Serving Tray 14" (12 per Case)
You will receive a phone call and/or email answering the question above as soon as possible. Questions are generally answered same business day. If time is of the essence please call us: (888) 886-7279.
Your information is protected by high security encryption and is 100% confidential
Quick Overview
This Thunder Group Round Slip Resistant Serving Tray 14" (12 per Case) [PLRT014] is made from fiberglass. The material is ribbed for an "easy hold" feature. This material is heavy duty and light weight. This item is durable and built with longevity in mind. The stain and scratch-resistant material proves that. These items are stackable, and are mainly used in cafeterias, hotel service, hospitals, schools, and universities. When cleaning this item, you can rinse or use the dishwasher, as this item it deemed dishwasher safe.
Product Description
|Thunder Group
|Ship Weight:
|15 lbs.
|Base Material:
|Non-Skid Surface:


text:
INTERVIEW: Kenny Rogers on Dolly, Miley & more!
Listen to Kenny Rogers on iHeartRadio
(The Bobby Bones Show) - Kenny "The Gambler" Rogers stopped by the Bobby Bones Show to talk about his new song with Dolly Parton, "Can't Make Old Friends."
He chatted with Bobby about his party years, the current state of music and his favorite decade. Check out the interview below!


text:
An interview with the co-discoverer of one of the biggest breakthroughs in cancer research
Dim the lights and break out the…eggs? These 10 foods will kick your sex drive into high gear.
15 signs that it's more than just the blues
From your diet to your medication to your mindset, here are 13 culprits of low libido.
Forget the fountain of youth – try flossing instead! Here are 11 surprising ways to live longer.
Banish belly rolls for good with these easy moves to sculpt strong, sexy abs


text:
5134 results for "side"
Not a member? Sign up now!
Already have a Crated account? Login now.
Sign up now for free to start building a collection of your favourite art.
Sign up now for free to start following thousands of amazing artists from around the world.
You must be a member of Crated to be able to comment on a piece. It's fast, simple and free!


text:
California school district promises to revise crazy eighth-grade lesson promoting Holocaust denial
After initially defending it, a school district in the Inland Empire of Southern California has decided to modify a required English class assignment that instructed eighth graders to determine whether the Holocaust really happened or was just a "propaganda tool that was used for political and monetary gain."
Mohammad Z. Islam, the interim superintendent of the Rialto Unified School District, about 50 miles east of Los Angeles, has promised to "assure that any references to the holocaust 'not occurring' will be stricken on any current or future Argumentative Research assignments," reports Los Angeles television station KTLA.
"The holocaust should be taught in classrooms with sensitivity and profound consideration to the victims who endured the atrocities committed," said district spokeswoman Syeda Jafri in a statement.
The Holocaust was the systematic mass murder of approximately 6 million Jews and up to 5 million other human beings in Nazi Germany and Nazi-occupied territories during World War II.
Conspiracy-minded Holocaust deniers – mostly white supremacists and various factions in Arab nations and Iran – argue that that the Holocaust was a hoax perpetrated by Jewish people to advance Jewish interests.


text:
Bodum Coffee Accessories
Since the 1940's, Bodum has utilized innovative industrial design to produce kitchenware that is elegant, simple to use, energy efficient and relatively wasteless. Their coffee and tea presses are as aesthetically pleasing as they are functional!
Bodum Santos (Pebo) Stovetop Vacuum Coffee MakerWho knew making a cup of coffee could be so much like a science experiment? The Bodum Santos Stovetop Vacuum Coffee Maker takes us back to chemistry class (even its glass construction makes us think of beakers and bunsen burners) with its simplistic style of brewing coffee. The Santos brews up to eight cups and features heat-resistant glass. Learn More
Regular Price: $99.90


text:
Alicia Keys, Swizz Beatz Expecting Second Child
Listen to Alicia Keys Radio on iHeartRadio
Congratulations are in order! Alicia Keys and Swizz Beatz are expecting their second child.
Alicia made the announcement on Instagram Thursday morning, posting a picture of her and Swizz with both their hands on her baby bump.
In the accompanying caption, Alicia wished Swizz a happy anniversary. She wrote, "Happy Anniversary to the love of my life @therealswizzz !! And to make it even sweeter we've been blessed with another angel on the way!! You make me happier than I have ever known! Here's to many many more years of the best parts of life! "
Swizz posted the same picture and called the new edition to their family "another gift from up above." He wrote, "Love is life & life is love and we're so excited for another GIFT from up above. Happy Anniversary my Goddess. 4 years of greatness & cheers to 100 plus more inshallah. @aliciakeys ❤❤❤❤❤❤❤❤❤❤"
Alicia gave birth to their first son, Egypt, back in 2010. Swizz Beatz also has three other children from previous relationships.
Photo: Alicia Keys on Instagram


text: OverviewBack to top Redbarn - Filled Bone Small Dog Treat 3 in. Chicken Flavor - 3.5 oz. Item# :116615UPC# :785184403068 Brand:Redbarn Size/Form:3.50 oz. Ship Weight:0.60 Flavor:Chicken Flavor Redbarn Filled Bone Small Dog Treat 3 in. Chicken Flavor 3.5 oz. (99 g) Redbarn Filled Bone Dog Treat Chicken Flavor is a white, cut femur bone stuffed with a wholesome chicken mixture. The resulting treat couples the teeth-cleaning advantages of the hard bone with the delicious taste of the stuffing. The result is all-natural goodness manufactured in Redbarn's own plant to strict quality controls - a standard of excellence passed down to the dogs everyone loves. Does your Chicken Jerky come from China?Redbarn Manufacturing plants, at home or abroad, are a reflection of Redbarn. Although Redbarn Chicken Jerky items are manufactured in a Chinese plant, it is visited and inspected annually by the owners of Redbarn. They go to a lot of effort to assure themselves of the quality of product coming from this plant. Their chicken jerky is processed in a plant in China that has been inspected and approved by the FDA and Redbarn has invested in testing protocol that must be met prior to the shipping of any product. They demand accountability. Redbarn has a company policy of not buying any "offshore" ingredients or finished products through third party brokers or trading companies. They buy only from the manufacturer, thus enabling them to control the quality of the product produced. They perform strict quality control procedures. Redbarn personnel perform an H.A.C.C.P. (Hazard Analysis and Critical Control Points) inspection at all of their "offhsore" suppliers. In addition to the supplier's quality control procedures, each lot is now analyzed by the Chinese government laboratories and sampled by the FDA upon arrival in Los Angeles. As is the case with all incoming product, regardless of origin, it is tested internally by Redbarn Quality Control Department by perfomring a fully microbiologicaion inspection and samples are also submitted to an outside independent laboratory. They have been producing these chicken jerky items for over 3 years with no incidences of salmonella or melamine. How does the product keep so long, and which preservatives are used?Red Barn uses only natural preservatives. These include Ascorbic Acid (vitamin C) and Citric Acid (Acids found naturally in citrus fruits). Redbarn does not use harmful BHA, BHT, or Ethoxyquin as preservatives. The mission of Redbarn Pet Products is to provide high quality, innovative pet treats at competitive prices, and to maintain the highest level of customer service possible by conducting business with integriry and respect to others. All Made In The USA products are manufactured in their own plant, to strict quality control standards so you can feed your dog with confidence, each and every day. Redbarn's GuaranteeFeed your pet with confidence, each and every meal! At Redbarn, quality is #1. They have strict control specifications in their factories to ensure the freshest product goes out their doors for your dog to enjoy. All Redbarn Natural Dog Treats come from free-range, grass-fed bulls raised eating a healthy grass diet as nature intended. The result is all natural goodness manufactured in their own plant to strict quality control standards. The same standards they expect for their own dogs are passed down to the dogs you love. Redbarn - Simply Natural!


text:
Detroit Went Way Overboard Paying Pensions: Report
(NEWSER) – In its path to declaring bankruptcy, Detroit didn't help itself on the pension front: The city, it seems, was overly generous with its pension payments to the tune of billions of dollars. The city offered extra cash to workers still on the job, while retirees got bonuses and families received payments following the deaths of workers not yet qualified for pensions, the New York Times reports. Some 23 years of above-and-beyond payments cost Detroit $2 billion, according to an outside actuary.


text:
unsettling adjective (CHANGING)
unsettling adjective (WORRYING)
Thesaurus: synonyms and related words
(Definition of "unsettling" from the Cambridge Advanced Learner's Dictionary & Thesaurus © Cambridge University Press)
(Definition of "unsettling" from the Cambridge Academic Content Dictionary © Cambridge University Press)
Get a quick, free translation!
Create and share your own word lists and quizzes for free!
Word of the Day
A platonic relationship or emotion is loving but not sexual.


text:
Rick Perry Booked on Felony Charges
(NEWSER) – Texas Gov. Rick Perry smiled for his police mugshot and promised to be vindicated on abuse-of-power charges today. Perry turned himself in at the Travis County Courthouse in Austin on the felony accusations, reports Reuters. "I'm here today because I believe in the rule of law," he said before entering the courthouse to be booked, reports the San Antonio Express-News. "I'm here today because I did the right thing. I'm going to enter this courthouse with my head held high knowing that the actions that I took were not only lawful and legal but right."
Read the full story on Newser.com
PHOTO: Travis County Courthouse


text:
Octomom being investigated for welfare fraud
(TMZ) Welfare fraud investigators have taken steps to seize Octomom's bank records and other documents that may prove she's been stealing taxpayers' money ... and what they find could land her in prison.
Welfare fraud officials obtained a search warrant to seize Octo's financial and employment records -- because they smell a rat.
TMZ broke the story ... the L.A. County Dept. of Welfare Fraud Prevention and Investigation (WFP&I), has been investigating Nadya Suleman after getting a tip that she was collecting welfare in 2012 ... when she grossed more than $200,000.
Read more from TMZ


text:
Obama Doesn't Return Marine's Salute, Shakes Hand Instead — Is This a Protocol Misstep?
CBS News' White House correspondent Mark Knoller tweeted this morning that President Barack Obama did not return a salute to a Marine before boarding Marine One on the South Lawn:
Indeed, the press pool report notes the same thing:
In-town pool report #1
South Lawn departure for Annapolis
Under gray skies and intermittent drizzle, President Obama boarded Marine One at 9:30 a.m. EDT in an open press event.
A few White House regulars were atwitter (and on Twitter) when the President walked directly up the steps of Marine One without saluting the Marine on duty. He soon came out of the helicopter, walked down the steps, shook hands with the Marine and engaged in a brief conversation.


text:
Justin Timberlake signs new deal with WME talent
Listen to Justin Timberlake on iHeartRadio
After announcing the dates for his solo world tour, Justin Timberlake has inked a new deal with talent agency WME. The agency has been representing the star in his acting pursuits but now it will take over the rest of his career.
According to "The Hollywood Reporter," WME will now have a hand in all of Timberlake's future projects, including his touring and endorsement deals. The deal comes in the midst of the star's music comeback.
His album The 20/20 Experience sold 968,000 copies when it dropped in March, and a follow-up to it is coming in September. He's also set to hit the road with his "Suit & Tie" collaborator Jay-Z in July.
But Justin's film career isn't taking a back seat to music. He will be appearing in the new Coen brothers movie "Inside Llewyn Davis," about New York's folk music scene in the 60s. He has also reportedly signed on to play record executive Neil Bogart in an upcoming biopic.


text:
Jesus spotted at the New York City Marathon
The New York City Marathon usually falls just after Halloween, and as a result, there are always plenty of runners in costume.
On Sunday, one costume in particular delighted thousands of spectators along the 26.2-mile route: Jesus Christ, barefoot, with a large cross strapped to His back.
The sight of the Messiah among a parted sea of runners was reported by dozens of witnesses, many of whom snapped photos of the jogging Jesus and uploaded them to Instagram, Facebook and Twitter.
I found Jesus at the NYC Marathon pic.twitter.com/hd20wUBUG5— Margaret Milnes (@Milnes123) November 3, 2013
Jesus running the marathon 🙏🌆⛪➕ pic.twitter.com/ywM62iKKEW— cate walsh (@catewalsh3) November 3, 2013
It appears that Jesus was among the record 50,000-plus runners officially registered for Sunday's marathon.
According to the New York City Marathon website, his bib number — 55-970, affixed, naturally, to the cross — belongs to Makoto Takeuchi, from Chiba, Japan. (It appears Takeuchi is a New York-based photographer; an email sent to the address listed on his website was not immediately returned.)
No word yet on the Son of God's finishing time, though he did reportedly have a little trouble running with the extra load.