Author Archives: steve

Services to shutdown when locking down a windows 2000 server

to document Checkpoint Rulebase copy following: /var/opt/CPfw1-50-03/conf/Standard.W /var/opt/CPfw1-50-03/database/objects.c to fw1rules directory rename standard.w to dayair.w run dayair.cmd this will output a file called dayair.html

set time service windows net time /setsntp:192.5.41.40 net stop w32time net start w32time make sure windows time service is set to automatic

How to use OpenSSL to act as a CA to sign an IIS certificate request for SSL use 1. Create a certificate request via the Internet Services Manager under ‘Directory Security->Secure Communication->Server Certificate’. This is found under the property tab … Read More »

working on merak email server created domain dtgimail.dtdns.net

if setting hkey current user… highlight key export to file edit file for specific area save file and add to login script like below regedit /s \\merlin\netlogon\window-reuse.reg here is window-reuse.reg Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] “AllowWindowReuse”=dword:00000000

security policy AD add new user wanted to make them logon as service. under local security policy mmc under local policies under user rights assignment , added user to logon locally and log on as service note: effective policy was … Read More »

unattended install wok boot bart cd pick #1 exit cd ghost reload reboot pick 5 exit smartdrv msnet map s: \\dtgsbs\windist goto s: type unattended test1

misc notes during redhat9 install smb printing need to add following to conf file use client drivers = yes hostname needs to be resolvable inorder for httpd service to start smbpasswd -j DTG

checkpoint forwarding problem was having an issues when trying to forward port 25 to internal machine.. all rules where setup and topology was ok. but we getting a drop with following message dropped packet between 2 external interfaces This was … Read More »