Land of the Lemmings, v2

Or any other distribution that uses Debian network scripts:
$ cat /etc/network/interfaces
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto eth0
iface eth0 inet dhcp
# VLAN 100
auto eth0.100
iface eth0.100 inet static
address 10.0.15.1
netmask 255.255.255.0
broadcast 10.0.15.255
pre-up /sbin/ifconfig eth0 up
pre-up /sbin/vconfig add eth0 100


Grabbed from some random searching

Or, you could try the method mentioned here:
auto lo
iface lo inet loopback
auto eth0 eth1 vlan2 vlan3 vlan4 vlan5
iface eth0 inet dhcp
# VLAN 1 - native management VLAN
iface eth1 inet static
address 10.0.0.1
netmask 255.255.255.224
vlan_raw_device eth1
# VLAN 2 - DMZ
iface vlan2 inet static
address 10.0.0.33
netmask 255.255.255.224
vlan_raw_device eth1


And if you want to get really crafty: Transparent vlan bridging firewall with debian

Starting with the walkthrough from the Q*Box project, I’ve gotten a base Bering uClibc 2.4.2 image installed on a Compact Flash card in a PC Engines WRAP board.
(more…)

Yay, I got my new laptop.

Bath time!

Just a swingin’

Lots more pictures over at the July and August galleries.

Who would have thought I’d be talking about the Windows Server 2003 SP1 firewall? But, it really works. And it’s almost tolerable to configure from the command line.

REM Set variables:
set Network1=192.168.1.0/255.255.255.0,192.168.10.128/255.255.255.224
set Network2=172.16.0.0/255.255.0.0
set Network3=10.12.0.0/255.255.254.0
REM Concatenate addresses here, MUST HAVE ONLY COMMAS (",") between them
set ADDRESSES=%Network1%,%Network2%,%Network3%
REM Allow MSSQL from All
netsh firewall add portopening protocol = TCP port = 1433 name = MSSQL mode = ENABLE scope = CUSTOM addresses = %ADDRESSES%
REM Allow RDP from Network1 only
netsh firewall add portopening protocol = TCP port = 3389 name = RemoteDesktop mode = ENABLE scope = CUSTOM addresses = %Network1%
REM Allow BackupExec from Local Subnet only
netsh firewall add portopening protocol = TCP port = 10000 name = BackupExecAgent mode = ENABLE scope = SUBNET
REM Turn on logging of dropped packets
netsh firewall set logging filelocation = %windir%\pfirewall.log maxfilesize = 4096 droppedpackets = ENABLE
REM Clear variables:
set Network1=
set Network2=
set Network3=


The logfile generates too much useless information, especially if you use DHCP on your network, but it also shows that you didn’t waste your time configuring it:

2006-08-11 05:36:28 DROP TCP 67.108.111.43 192.168.1.130 27726 1433 48 S 3572543340 0 65535 - - - RECEIVE

HEFFELFINGER – Jeffrey D. “Hefty” Heffelfinger,
36, of Hoopeston died at 10:45 a.m. Monday,
July 31, 2006 in Burlington, Wis. Arrangements
were incomplete at Brown-Alkire Funeral Home.

Hopefully the poker players aren’t as tough where you are now.

So now we need to worry about our drivers being exploited? SANS and Intel say so.

Update: I’d like to echo what F-Secure has to say: 129MB for 1 device driver patch? That must be some hole, but I’m sure glad I’m on broadband….