Displaying posts written in

September 2009

Sep
18
2009

SSH login alert by mail Linux or Unix based systems

As you may have noticed many security-related software/appliances are based on Linux or Unix operating
systems in their variety. And as the logical consequence of that remote managing of such devices is done with OpenSSH
package  .  What is lacking in these applications built on Linux/Unix platforms is alerting in real–time on successful
SSH login to the system [...]

Sep
13
2009

Reinstall Checkpoint UTM firewall, the hard way…

 Sometimes machines fail , in the end all machines fail some day anyway. When it happens to the firewall (Checkpoint ) it might be a very
frustrating event . By failing I mean machine turns on but doesn’t boot or boots into unusable state. The first thought that comes to
the sysadmin looking at such a miserable [...]

Sep
8
2009

eSafe has iptables too ….

Did you know that eSafe  software is based on RedHat Enterprise  Linux (RHEL) ? Of course you did.
But what does it mean? It means that all (or almost all) tools/utilities/programming logic of the Linux is at your fingertips.
Let’s take for example software eSafe runs on the boot
 [root@esafe root]# chkconfig –list
rdisc                          0:off   1:off   2:off   3:off   [...]

Sep
1
2009

Ping – setting don't fragment bit in Linux/FreeBSD/Solaris/Cisco/Juniper

 Ping.
Many times while debugging network problems of various kinds you need to send some packets
of desirable size  and don’t fragment bit being set. Below I list how to do it for  the different
equipment/OSes.
Let’s start with the  most popular operating system among network folks – Linux:
Linux
By default ping in any Linux-based system (It also means any [...]