Cisco
Cisco and Syslogd
Monday, July 17th, 2006Just a quick note in regard to logging from a Cisco PIX to Redhat and OpenBSD.
To get syslog in Redhat to accept external logging events you have to run syslogd -r
To get syslog in OpenBSD to accept external logging events you have to run syslogd -u
Seems kind of odd at first considering if you start […]
Cisco PIX Shun
Sunday, July 2nd, 2006I learned something very interesting over the last few days about the PIX. Well actually several important things but one interesting. First it seems you cannot block subnets with shun … the syntax is shun src_ip [dst_ip sport dport [protocol]] ….. which I guess make sense as the shun list does not survive a reboot. […]
Nessus, PIX and DNS
Tuesday, June 27th, 2006I have been vulnerability scanning a network and have come upon something I think is odd. The network is behind a Cisco PIX firewall and there is a Microsoft DNS server running in the network doing DNS lookups and recursion for the internal domain. The firewall is set up to do one-to-one mapping for several […]