Search This Blog

Monday, October 5, 2009

Cisco VPN client on 192.168.1.0

As you know if VPN client connected to 192.168.1.0 or any other local LAN subnet will connect to a remote LAN that use 192.168.1.0 or other subnet that is the same as local LAN, then there will be an IP range conflict. If you do full tunneling to remote LAN then you need to make sure that routing for remote LAN has lower metric than local LAN. You can use this script to fix the metric:



@ECHO off

%Windir%\system32\ipconfig.exe > %temp%\ipconfig.txt
type %temp%\ipconfig.txt|findstr /c:"IP Address" > %temp%\ip.txt
type %temp%\ip.txt|findstr /v "0.0.0.0" > %temp%\ip1.txt
FOR /F "delims=: tokens=2" %%I in (%temp%\ip1.txt) DO ECHO %%I > %temp%\justip.txt
FOR /F "delims=. tokens=1" %%A in (%temp%\justip.txt) DO SET octet1=%%A
FOR /F "delims=. tokens=2" %%B in (%temp%\justip.txt) DO SET octet2=%%B
FOR /F "delims=. tokens=3" %%C in (%temp%\justip.txt) DO SET octet3=%%C
FOR /F "delims=. tokens=4" %%D in (%temp%\justip.txt) DO SET octet4=%%D
del /q %temp%\ip1.txt
del /q %temp%\ip.txt
del /q %temp%\ipconfig.txt
del /q %temp%\justip.txt

Set IPAddress=%octet1%.%octet2%.%octet3%.%octet4%

REM ECHO %IPAddress%

%Windir%\system32\route.exe change 192.168.1.0 mask 255.255.255.0 %IPAddress% METRIC 1




As you know if in routing talbe there are two similair routes with different gateway then the last installed interface will get prority. Re-install Cisco VPN client and it will get priority over other interfaces, no need then for script above.

Thursday, September 17, 2009

Inssider WiFi tool

Nice little tool for Windows XP and Vista that will show RF interference for your WiFi.

http://www.metageek.net/products/inssider

And it's free.

Tuesday, September 1, 2009

TrendMicro

TrendMicro OfficeScan 8.0sp1 with latest engine and pattern can not detect this nasty worm:

http://www.threatexpert.com/report.aspx?md5=13c36740aae01c7417d7a55d23156075

Ticket has been raised at TM, but it may take some time before we get a cure... Housecall also does not detect it. Sad story.
Check if your FW detects calls home to 88.247.183.228 on port 8882

We are using AVG and other tools to clean up PCs.

Checkpoint fw monitor

a command line to capture packets in Checkpoint:

fw monitor -m i -e "accept [20:2,b]=445 or [22:2,b]=445;" -o monitor.cap -ci 10 -co 10

will save 10 packets on port 445 in the file monitor.cap.

You can upload it using tftp from Checkpoint to another server and analyse it with wireshark.

However my preference is to set switch monitoring of the port to another port and use Microsoft Network monitor 3.3 to capture packets.

Friday, July 17, 2009

what is the root password in mac os x?

no, idea,

but here is a command to change it:

sudo bash

and put your passwd

then do passwd root

thanks Gaz!

installing Midnight commander in Mac OS X 10.5.7

I installed fink from http://sourceforge.net/projects/fink/files/
Then in terminal started
fink install mc
mc

it gives error:
dyld: Library not loaded: /sw/lib/libintl.1.dylib
Referenced from: /sw/bin/mc
Reason: image not found
Trace/BPT trap

to fix it I replaced link
ln -s /sw/lib/libintl.3.4.3.dylib /sw/lib/libintl.1.dylib
as suggested in http://www.claws-and-paws.com/node/1266

and now it works fine.

Sunday, June 28, 2009

CPU comparison

Compare CPU performance - notebooks and desktops
http://www.notebookcheck.net/index.php?id=2436