Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
-
Proxy Server Recommendation
Bluecoat is by far the best out there. They are pricey, but are worth every penny. Highly secure, very scalable, great performance, Anti-X, support for IM and Streaming Media, etc. There is nothing that you cannot control with the Bluecoat when it comes to Internet Browsing Connectivity...- mavenccie
- Post #6
- Forum: Security, hacker detection & forensics
-
VPN client behind home Router not working
The issue is that your client behind the SMC/Linksys/insert your brand here client router/firewall isn't passing the data to the client because it is doing PAT. And BTW, AH type vpn won't ever work. And you can verify this by looking at your logs if your client router/firewall keeps them. You...- mavenccie
- Post #7
- Forum: Security, hacker detection & forensics
-
Firewall Placement
Internal Addressing | (WAN CLOUD)---(Border Router)---(FW)---(LAN-VLAN80 and 88) | | External | Addressing |...- mavenccie
- Post #5
- Forum: Security, hacker detection & forensics
-
Starting vi I get "/var/tmp/Ex0000005296" No such device or address
I looked at the files in /var/tmp. Nothing was very old, but I did delete them. The problem is still there. Additionally, I have plenty of room on the /var partition.- mavenccie
- Post #3
- Forum: Sun: Solaris
-
Starting vi I get "/var/tmp/Ex0000005296" No such device or address
Hello All, I need some assistance. When I start Vi I get the message "/var/tmp/Ex0000005296" No such device or address. Also if I try to create a file by running "touch test" anywhere in the filesystem I get "touch: test cannot create" But it does create the file...- mavenccie
- Thread
- Replies: 2
- Forum: Sun: Solaris
-
LDAP Login and Mail message Error
To give some background. I installed OpenLDAP 2.x on a solaris server no problem. And also configured the server to lookup user by querying ldap with the native ldap client. I have turned off ldap cache manager, do to other issues with that product. Anyways, I read that is a good idea to...- mavenccie
- Thread
- Replies: 0
- Forum: Sun: Solaris
-
Do FW-1 can check rate of traffic
If you are trying to accomplish Bandwidth Management, then Yes. You purchase Checkpoint's Floodgate Module which is an addon to Firewall 1. This gives you the ability to manage traffic rates flowing through your box.- mavenccie
- Post #2
- Forum: Security, hacker detection & forensics
-
Sending all logs via Syslog
I wasn't very observant now was I. For NT, you could use a product such as Kiwi's sysloggen to do the same thing as logger on UNIX. Here is a link. http://www.kiwi-enterprises.com/info_sysloggen.htm Later.- mavenccie
- Post #4
- Forum: Security, hacker detection & forensics
-
CAN I DO THIS WITH PIX515 ?
Well a redirect message is issued when you send a packet to a device and it that a better route to that destination exists on that LAN. Does your router have a route to 69.0.0.0 network that is pointing to another router on the LAN or similar? Or are your logs showing different IP ranges...- mavenccie
- Post #7
- Forum: Security, hacker detection & forensics
-
CAN I DO THIS WITH PIX515 ?
You will still have the issue even if you put in three NICs because your default gateway is pointing to one of the particular NICs. Put the 192.168.1.4, .5, .6 on the NIC in the server. I think your easiest solution would be to remove the dmz1 and dmz2 cards from use on the PIX. Then do...- mavenccie
- Post #5
- Forum: Security, hacker detection & forensics
-
Sending all logs via Syslog
Go to the Log and Alert tab in the Rulebase Properties. Change the "User Defined Alert Command" field to read something like: /bin/logger -p daemon.notice By default, this should cause events tracked as "User Defined" to be logged to /var/adm/messages or to wherever you want.- mavenccie
- Post #2
- Forum: Security, hacker detection & forensics
-
Use same IP address inside and outside
What does it say when you put the commands in? Could you post your config to see what you have in there already? With no passwords and snmp, of course.- mavenccie
- Post #4
- Forum: Security, hacker detection & forensics
-
Use same IP address inside and outside
Try the following: static(inside,outside) 10.0.0.1 10.0.0.1 netmask 255.255.255.255 0 0 conduit permit tcp host 10.0.0.1 eq www any- mavenccie
- Post #2
- Forum: Security, hacker detection & forensics
-
PIX515 inside needs to access dmz1 host
static (inside,dmz1) 192.168.2.18 192.168.2.18 netmask 255.255.255.255 0 0 OR static (inside,dmz1) 192.168.2.0 192.168.2.0 netmask 255.255.255.0 0 0 And as far as conduits go, your dmz should have a security level that is less than your inside. Since conduits are only needed when you go from a...- mavenccie
- Post #2
- Forum: Security, hacker detection & forensics
-
Cisco 4000M+ Flash
If the chip you bought has 4000 code on it, then all you should have to do is change the config-register 0x142(this one also ignores config), 0x2102(recommend), or 0x2142(this one also ignores config). If not, then: You can load the router from the Router(boot)# Prompt. Use normal commands to... -
DNS Server - EMERGENCY!
Sounds like a routing issue. Did your previous DNS server have any static routes that might have pointed to those networks on the other side of your routers that you can't ping from.(Why I ask this question is that you said you rebuilt the box, and that is the only thing that has changed). Do... -
NTP losing Sync on Cisco 2611
I have seen this before. NTP process isn't a very robust on IOS. I couldn't tell you exactly what is wrong, but I can tell you the procedure I use to avoid NTP issues. If I need to change the time, I stop the ntp server on the Cisco router, then I update the time. Make sure it is correct in... -
VPN Basics
That could take a while. How about I send you to a link on cisco's website. http://www.cisco.com/warp/public/779/largeent/learn/technologies/VPNs.html- mavenccie
- Post #3
- Forum: Virtual Private Networks (VPN)
-
why I cannot ping my own router's interfaces ?
To Bojika - There is always more than one way to skin a cat in the IOS. Try the solution I outlined, and it will work. Even though there really shouldn't be a need to ping the router's own local interface, it sometimes gives engineers the piece of mind that they can. -
vlans across WAN
I wholeheartedly agree with you Wybnormal that MPLS is probably what his/her solution will requires(I have implemented it on many occasions in the Service Provider and Enterprise World and is a very solid and standardized protocol especially in the newer codes), but he/she hasn't given enough...
