Troubleshooting FortiGate command line check debugging trace sniffer
- 2 Comments
- Nov, 10, 2016
- Angelo Schalley
- Fortigate/Fortinet, Networking, security
Login via ssh.
running vdom’s : config vdom first
Troubleshooting examples for debugging a Fortigate :
Reverse path check, iprobe, policy check, etc …
DNS port only :
diag debug reset
diag debug flow filter clear
diag debug flow filter port 53
diag debug flow show console enable
diag debug flow show iprope enable
diag debug flow show function-name enable
diag debug console timestamp enable
diag debug enable
diag debug flow trace start 1000
Read more on Troubleshooting FortiGate command line check debugging trace sniffer…
Linux Bonding explained
- No Comments
- Nov, 06, 2016
- Angelo Schalley
- Linux, Networking
What is bonding?
Bonding is the same as port trunking. In the following I will use the word bonding because practically we will bond interfaces as one.
But still…what is bonding?
Bonding allows you to aggregate multiple ports into a single group, effectively combining the bandwidth into a single connection. Bonding also allows you to create multi-gigabit pipes to transport traffic through the highest traffic areas of your network. For example, you can aggregate three megabits ports (1 mb each) into a three-megabits trunk port. That is equivalent with having one interface with three megabits speed.
Where should I use bonding?
You can use it wherever you need redundant links, fault tolerance or load balancing networks. It is the best way to have a high availability network segment. A very useful way to use bonding is to use it in connection with 802.1q VLAN support (your network equipment must have 802.1q protocol implemented).
The best documentation is on the Linux Channel Bonding Project page
I strongly recommend to read it for more details. Credits: Linux Channel Bonding Project page , Thea
This small howto will try to cover the most used bonding types. The following script (the gray area) will configure a bond interface (bond0) using two ethernet interface (eth0 and eth1). You can place it onto your on file and run it at boot time..
Read more on Linux Bonding explained…
Block POST requests on websites using .htaccess
- No Comments
- Nov, 05, 2016
- Angelo Schalley
- joomla, Linux, Plesk Linux
That block will only prevent POST requests from hosts other than 127.0.0.1, and you will get a 403 Forbidden response:
RewriteCond %{REQUEST_METHOD} POST
# allow the server to POST to itself
RewriteCond %{REMOTE_ADDR} !127.0.0.1
Read more on Block POST requests on websites using .htaccess…