Category: Technical

June 12, 2011

R1Soft CDP 3.0 with Atomic Secured Linux and PAX

If you want to run R1Soft CDP 3.0 on a system protected by Atomic Secured Linux and the ASL enhanced kernel with PaX/grsecurity then you need to disable memory protection for the CDP 3.0 binary. You do this by using paxctl to set the NOMPROTECT flag for the CDP 3.0 binary. /sbin/paxctl -m /usr/sbin/r1soft/bin/2-6/cdp-2-6 Unfortunately the CDP 3.0 binary lacks...

Categories R1Soft CDP Comments: 0

June 5, 2011

Fortinet FortiOS firmware upgrade – Upload file is too big or invalid

If you receive an “Upload file is too big or invalid” error message when trying to upload a new FortiOS image to your Fortinet device via the web interface, then the first thing to try is giving the device a quick reboot in order to free up memory to hold the uploaded copy of the firmware image. If this doesn’t...

Categories Fortinet Comments: 0

May 29, 2011

R1Soft CDP 3.0 – java.net.InetAddress.getLocalHost UnknownHostException

When you launch the CDP 3.0 web interface for the first time, you are prompted to activate your license, or at least you should be. If instead you get a Java error then take a look in /usr/sbin/r1soft/log/monitor.log and you will probably see something like this: INFO | buserver | 2011/05/29 16:21:59 | May 29, 2011 4:21:59 PM org.zkoss.zk.ui.impl.UiEngineImpl handleError:1253...

Categories R1Soft CDP Comments: 0

April 28, 2011

R1Soft CDP scheduler issues

After spending quite some time with R1Soft support investigating some bizarre issues where the CDP 2.0 scheduler was skipping over some tasks seemingly at random, we eventually discovered that the issue was caused by setting the e-mail reporting task to run every minute. Decreasing the frequency of this task allowed all scheduled CDP tasks to run as normal. R1Soft are...

Categories R1Soft CDP Comments: 0

April 28, 2011

Missing kernel initial RAM disk with SolusVM and Xen

If for any reason your /boot/solus-vmlinuz symlink as well the /boot/solus-initrd.img initial RAM disk are missing or incorrect in Dom0 on one of your SolusVM Xen slaves, then you can force SolusVM to regenerate them using the latest Xen enabled copy of the kernel installed on the server using the following command in Dom0 on the slave: php /usr/local/solusvm/includes/xenkernel.php This...

Categories SolusVM Comments: 0

April 28, 2011

RouterOS slow learning BGP routes with Winbox open

After banging my head against a wall waiting for a RouterOS powered router to re-learn the 330,000 routes that currently make up the global routing table, I was surprised to find that seemingly Winbox slows the learning of BGP routes to a crawl. Closing Winbox allowed the router to process the entire global routing table in the normal minute or...

Categories Mikrotik RouterOS Comments: 0

April 5, 2011

Preventing backscatter on aliased domains in Zimbra

By default, an aliased domain in Zimbra will accept all e-mail at SMTP time and then bounce a message later if it is unable to delivering it after carrying out the aliasing. This generates backscatter, which can be abused and even lead to your mail server appearing on some blacklists. Luckily, since Zimbra 5.0.12 there has been a way to...

Categories Zimbra Comments: 0

March 26, 2011

Fortinet SSL VPN interface limitations

There seem to be some interface related limitations with the SSL VPN implementation on Fortinet’s FortiGate firewall devices which prevent you from connecting to the Fortinet SSL VPN on the IP address of an interface other than the one which your traffic enters the firewall on. In other words, even with the appropriate rules configured in the firewall policy to...

Categories Fortinet Comments: 0

March 20, 2011

Recovering Logical Volumes deleted with lvremove

Need to recover an LVM Logical Volume that you deleted by mistake? No problem, luckily LVM archives all of the old Logical Volume and Volume Group metadata in /etc/lvm/archive/ whenever you use something like lvremove to make adjustments to the Logical Volumes. Before you start, remember that any kind of operation like this is potentially dangerous and so backup anything...

Categories Linux Comments: 6

February 9, 2011

Parallels Plesk 9 and SSL certificates signed by an intermediate Certificate Authority (CA)

Parallels Plesk 9 doesn’t seem to like installing certificates signed by an intermediate Certificate Authority (which is becoming more and more common and will be all certificates in the next year or two) through the SSL certificates part of the Plesk interface available to both administrators and end users. A work around to this seems to be to install the...

Categories Plesk Comments: 0