Solaris / ESX – Networking Issues

Networking connectivity Issue / Dropping packets Ok, so I finally installed Solaris 10 32bit, but then found that the network interface keep dropping packets (??)To fix this I installed VMware tools which installs a new vmxnet driver but as a result this also renames your interface to vmxnet0.  Installing VMware tools has affected your machine … Read more

Solaris – Enabling DNS resolution (Client)

 To enable the DNS resolver client on Solaris, follow these steps, Change the line in the file /etc/nsswitch.conf that reads “hosts:     files” to hosts:      dns files Add the following line to the file /etc/resolv.conf. If the file doesnt exsist, create one. nameserver      [DNS IP]

Solaris – Sed -i work around

The version of sed on Solaris cannot actually save the file. So as a work around just type ‘perl -pi -e’ instead of the sed command : perl -pi -e ’s/who/when/g’ /tmp/afile

DNS / nslookup – How to find the root servers ?

DNS servers are based on a recursive look up as you can see below. Below you can see XP forwarding the request to its DNS server. The DNS Server then recursively resolves the DNS request. Once it has the answer to the Clients request, it forwards the answer back to the client. A great tool … Read more

Netscreen – Debugging / Troubleshooting

In order to debug and obtain output for the traffic flow through the Netscreen, you will need action a couple of commands, these are shown below, 5gt-> unset ff filter 0 removed 5gt-> undebug all 5gt-> clear db 5gt-> set ff dst-port 8080 filter added 5gt-> debug flow basic 5gt-> get db str Below shows … Read more

Netscreen – NSM Issues

Heres a couple of issues I ran into when adding some devices to the NSM, When trying to enable NSM via the GUI you get “No initial ID configured. NSM agent remains disabled” The communication between nsm and screenos is based on public key authentication. You don’t have to enable NSM manually. Cant import the … Read more

Netscreen – MSS

Below shows you the various MSS settings that can be set via the CLI, MSS of netscreen –   set tcp mss 1460 MSS for VPN traffic – set flow tcp-mss 1460 MSS for clear traffic – set flow all-tcp-mss 1460

Check Point – SSH Blocked

Problem You find that your gateway is blocking SSH connections and showing in the logs even though you have the ssh and ssh_version_2 protocols added to your rule. message_info: SSH version 1.x is not allowed Reason On closer inspection when you look at the ssh_version_2 protocol object it says in the comment, Secure Shell, version … Read more