Here’s a guide on managing your iptables rules with line numbers, including adding, appending, deleting, and moving rules: [TOC] List rules with Line numbers To view your current iptables rules with line numbers, use the following commands: iptables -t filter -L INPUT --line-numbers -n iptables -t filter -L OUTPUT --line-numbers -n iptables -t filter -L …
Fortinet – Customize replacement messages for individual web filter profiles
# config system settings set gui-replacement-message-groups enable end config system replacemsg-group edit "wf-incomming" set comment '' set group-type utm config http edit "urlfilter-err" set buffer "<!DOCTYPE html><html> <head> <meta charset=\ "UTF-8\"> <title> Redirecting to pp52.de </title> <meta http-equiv=\"ref resh\" content=\"0; url=https://pp52.de/\"> </head> <body> </body></html >" set header http set format html next edit "url-block" set …
Continue reading "Fortinet – Customize replacement messages for individual web filter profiles"
What is my IP? ifconfig.me / ifconfig.io
Short collection of what is my IP Servers. ifconfig.io ifconfig.me ifconfig.co icanhazip.com Usage curl ifconfig.co/port/22 SD-WAN As a personal note route ifconfig.* over the primary connection on the Fortigate firewall and icanhazip.com over the secondary config firewall address edit "ifconfig.co" set type fqdn set fqdn "ifconfig.co" next edit "ifconfig.me" set type fqdn set fqdn "ifconfig.me" …
Linux CLI Useful Commands
How to convert letters to lower case in BashUPPERCASE using bashlowercase using bash How to convert letters to lower case in Bash echo "THIS IS MY DATA" | tr '[:upper:]' '[:lower:]' UPPERCASE using bash # y="this Is A test" # echo "${y^^}" THIS IS A TEST lowercase using bash # x="THIS IS a TeSt"# echo "${x,,}"this is …
Bind9 – Named
This is just a collection of some information to remember about named setup. This is not comprehensiv and just suits my needs. ConfigurationBind9 - Caching NameserverBind9 - LoggingLogging ConfigurationLog analyse Configuration Bind9 - Caching Nameserver https://www.digitalocean.com/community/tutorials/how-to-configure-bind-as-a-caching-or-forwarding-dns-server-on-ubuntu-14-04 Bind9 - Logging Based on https://kb.isc.org/docs/aa-01526 print-time yes; print-category yes; print-severity yes; Logging Configuration mkdir -p /var/named/logchown named:named /var/named/log …
Curl – Request and Response Times
I had again the need to calculate proxy performance. So a few notes on this topic. Time to First Byte Using Curl Jon Fox published an post how to find the time to first byte (TTFB) with curl. curl -w "Connect time: %{time_connect} Time to first byte: %{time_starttransfer} Total time: %{time_total} \n" -o /dev/null [url to …
Cisco Policy Based NAT
ip access-list standard dialer1-acl    permit 10.0.0.0 255.0.0.0   permit 192.168.2.0 255.255.255.0 ip access-list standard vlan4-nat-acl    permit 10.0.0.0 255.255.255.0 route-map dialer1-nat permit 10 match ip address dialer1-acl match interface dialer1  route-map vlan4-nat permit 10   match ip address vlan4-acl    match interface vlan4 ip nat inside source route-map vlan4-nat interface vlan4 route-map vlan4-route permit …
CheckPoint dbedit
# dbedit # http://www.cpwiki.net/index.php/Creating_objects_with_dbedit # https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=skI3301 http://msdk.fusiondementes.net/ # creating a new host create host_plain H.FW.angmar2 modify network_objects H.FW.angmar2 ipaddr 10.0.8.8 update network_objects H.FW.angmar2 modify network_objects H.FW.angmar2 comments "Created by fwadmin with dbedit" <http://dl3.checkpoint.com/paid/fd/fdd98fb831a41d62debbdf80cec0f341/CP_R77_CLI_ReferenceGuide.pdf?HashKey=1405256814_16d7518520e77124c7528f55f5372ac0&xtn=.pdf#page=12&zoom=auto,0,841> # creating a new network create network N.Trust.10.0.8.0--21 modify network_objects N.Trust.10.0.8.0--21 ipaddr 10.0.8.0 modify network_objects N.Trust.10.0.8.0--21 netmask 255.255.248.0 update network_objects N.Trust.10.0.8.0--21 # …
Juniper Junos (JNCIA-Junos)
Junos (JNCIA-Junos) Certification
Puppet
http://blog.credativ.com/de/2010/02/howto-einstieg-in-puppet.html http://itand.me/using-puppet-to-manage-users-passwords-and-ss apt-get install puppetmaster apt-get install puppet apt-get install subversion vi /etc/puppet/fileserver.conf # This file consists of arbitrarily named sections/modules # defining where files are served from and to whom # Define a section 'files' # Adapt the allow/deny settings to your needs. Order # for allow/deny does not matter, allow always takes precedence …
i got my first juniper
It is a Netscreen 5gt. So now commands maybe usefull: Cisco PIX Cisco ASA Netscreen Description show configuration get config saved get saved configuration show running-config get config get device configuration save to save changes to config show version get system gets system information, Netscreen mode get session info shows load on the firewall 85+ …
