Megamon Tech Blog

vmware ubuntu rename ethernet nic

admin — Mon, 06 Feb 2012 14:25:43 +0000

Modify

/etc/udev/rules.d/70-persistent-net.rules

Reset internal ca

admin — Wed, 09 Nov 2011 11:09:44 +0000

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk62695&js_peid=P-114a7bc3b09-10006&partition=Advanced&product=Security

R75.20 Checkpoint SmartEvent Compilation Errors

admin — Mon, 07 Nov 2011 05:57:12 +0000

Getting this error when Installing event policy?

Installing policy for job [All online jobs]
ERROR: Failed to resolve service name – dns
Error processing Ignore rule (problematic field – ‘service’)
Failed to build correlation policy for event ‘Abnormal activity on service’

Goto

Policy -> Event Policy -> Anomalies -> Abnormal activity on service

Validate all predefined entries are in fact valid.

We had a cause where the third entry was defined as

Replacing this with fixed our issues.

Intermittent ICMP loss to Firewall Interfaces

admin — Sat, 29 Oct 2011 12:56:04 +0000

We ping sweep networks every minute – sometimes when pinging firewall clusters a random interface does not respond to icmp requests. This occurs when you ping multiple IP’s of the firewall at the same time.

Checkpoint R71

fw ctl set int fw_allow_simultaneous_ping 1

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk38465

for instructions on how to get the command to survive a reboot

vi $FWDIR/boot/modules/fwkern.conf

fw_allow_simultaneous_ping=1

Messanger Doesn’t load with 1300 MTU

admin — Sat, 29 Oct 2011 12:51:04 +0000

Symptom: you have internet but MSN ( Messanger ) refuses to load.

Solution: Check the MTU of your desktop and the MTU of your gateway / firewall interfaces.

Why? I Found MTU of 1300 on gateway lead to MSN not loading.

Rescan SCSI bus linux

admin — Sun, 14 Aug 2011 11:46:35 +0000

echo “- – -” > /sys/class/scsi_host/host0/scan

Checkpoint ARP cache tweaking

admin — Mon, 04 Jul 2011 03:17:40 +0000

If you see these messages:

Jul 4 09:49:50 xxxfw2 kernel: NET: 89 messages suppressed.
Jul 4 09:49:50 xxxfw2 kernel: Neighbour table overflow.
Jul 4 09:50:04 xxxfw2 kernel: NET: 22 messages suppressed.
Jul 4 09:50:04 xxxfw2 kernel: Neighbour table overflow.
Jul 4 09:50:04 xxxfw2 kernel: Neighbour table overflow.
Jul 4 09:50:05 xxxfw2 kernel: NET: 65 messages suppressed.
Jul 4 09:50:05 xxxfw2 kernel: Neighbour table overflow.
Jul 4 09:50:10 xxxfw2 kernel: NET: 264 messages suppressed.
Jul 4 09:50:10 xxxfw2 kernel: Neighbour table overflow.
Jul 4 09:50:15 xxxfw2 kernel: NET: 274 messages suppressed.
Jul 4 09:50:15 xxxfw2 kernel: Neighbour table overflow.
Jul 4 09:50:22 xxxfw2 kernel: NET: 97 messages suppressed.
Jul 4 09:50:22 xxxfw2 kernel: Neighbour table overflow.
Jul 4 09:50:25 xxxfw2 kernel: NET: 475 messages suppressed.
Jul 4 09:50:25 xxxfw2 kernel: Neighbour table overflow.

Then you need to increment your ARP cache size. Add these lines to the bottom of /etc/sysctl.conf:

# arp cache amendments
net.ipv4.neigh.default.gc_thresh1 = 1024
net.ipv4.neigh.default.gc_thresh2 = 2048
net.ipv4.neigh.default.gc_thresh3 = 4096

If you’re not going to reboot then you also need to set manually

cd /proc/sys/net/ipv4/neigh/default

echo 1024 > gc_thresh1
echo 2048 > gc_thresh2
echo 4096 > gc_thresh3

R75 issues Load on Module Failed – no Memory.

admin — Mon, 14 Mar 2011 06:47:04 +0000

Encountered issues with Checkpoint R75

Scenario

A number of R62 and R65 gateways cannot be burnt to from R75 manager. However gateways that are greater than or equal to R70.40 burn fine.

Error message in /var/log/messages on gateway:

fwloghandle_register_string: unable to put entry into table

Solution

Edit /etc/grub.conf on the target gateway and add vmalloc=512M to the kernel line like this:

kernel /vmlinuz ro pci=noacpi root=/dev/mapper/vg_splat-lv_current vmalloc=512M panic=15 console=SERIAL 3 quiet

Intel Quad Gigabit E1000 tuning

admin — Tue, 08 Feb 2011 04:28:46 +0000

for 2 quad gigabit cards the example is this

vi /etc/modules.conf

vi /etc/modprobe.conf

depending on your version of kernel

add

options e1000 RxDescriptors=4096,4096,4096,4096,4096,4096,4096,4096 TxDescriptors=4096,4096,4096,4096,4096,4096,4096,4096 RxIntDelay=1024

Mount Window 7 fileshare from Linux or Dreambox

admin — Wed, 26 Jan 2011 10:56:19 +0000

Dmesg reports this error:

CIFS VFS: cifs_mount failed w/return code = -12

Manual mount attempts report this:

mount: mounting //192.168.1.1/share on /mountpoint failed: Cannot allocate memory

Solution:

Regedit on the Windows 7 machine and disable SMB2:

1) HKEY_LOCAL_MACHINE ->SYSTEM ->CurrentControlSet ->Services ->LanmanServer -> Parameters.

2) Create a DWORD with the name SMB2. Value 0