ipfilter and ipv6

For people running older versions of Solaris, like 8/9, the firewall of choice to install was ipfilter. Now, with Solaris 10 it has become the default, built-in with the OS. I wanted to do a short post about adding configuration settings for ipv6 and plan to cover ipv4 in detail in a later post.

One thing to note is that ipfilter must run it’s ipv6 rules under a separate file. In Solaris 10, the default location for the filter rules is in /etc/ipf and the firewall rules are located in the files ipf.conf and ipf6.conf for ipv4 and ipv6 respectfully. Here is a sample of the current file on one of my servers,


#
# ipf6.conf
#
# IPv6 Filter rules to be loaded during startup
#
# See ipf(4) manpage for more information on
# IP Filter rules syntax. Continue reading ipfilter and ipv6 

Cisco archive command

The Cisco archive command has been around for several years now and is still valid for smaller operations that are unable to afford or require a commercial software package to do the same thing.  Two of the main benefits include backing-up your configurations after changes and logging the commands that were executed by each user. The commands necessary to accomplish these tasks are fairly straightforward,


sw1# config t
sw1(config)# archive
sw1(config-archive)# path ftp://192.168.100.50/configs/sw1
sw1(config-archive)# write-memory
sw1(config-archive)# log config
sw1(config-archive-log-config)# logging enable Continue reading Cisco archive command 

GPG Lab

Although we have seen examples of how to install gpg for Windows and integrate with Outlook, this class lab is designed to get gpg working in Linux with the Evolution email client.

Generate a Key for signing only


# gpg --gen-key
Please select what kind of key you want:
(1) RSA and RSA (default)
(2) DSA and Elgamal
(3) DSA (sign only)
(4) RSA (sign only)
Your selection? 1
What keysize do you want? (4096) Continue reading GPG Lab 

Books: September List

This is a listing of the current books that have found their way onto my desk for reading, reviewing or acting as a paperweight,

Linchpin: Are You Indispensable? by Seth Godin

Routing TCP/IP, Volume 1, 2nd Edition by Jeff Doyle, Jennifer Carroll

TCP/IP Illustrated, Volume 1: The Protocols, 2nd Edition by Richard Stevens

RHCSA/RHCE Red Hat Linux Certification Study Guide by Michael Jang

TcL Scripting for Cisco IOS by Raymond Blair, Arvind Durai, John Lautmann