среда, 15 октября 2014 г.

Настройка IPSI TN2312

1.Install IPSI board into Gateway/Cabinet if new install. See bottom of form if swap.
2.Configure your laptop’s Ethernet port to 192.11.13.5 and 255.255.255.252
3.Connect laptop via Cross-Over Cable to Services port on front of IPSI board.
4.On your laptop, select Start, Run, and then type cmd in the space and hit enter.
5.At DOS prompt, type telnet 192.11.13.6
6.When connected, you should see an [IPSI]: command prompt.
7.Type the word ipsilogin and hit enter.
8.Type the words craft (for the user) and serv1ces (for the password). Note: the letter i in services is replaced with the number 1. You should be at the [IPADMIN]: prompt.
9.Now type set control interface [ipsi ip address] [subnet] and hit enter. Use the IPSI IP address and Subnet from above without the brackets.
10.Type exit and hit enter.
11.Now log into the IPSI board again using step 4 through 8 then come back to step 12.
12.Now type set control gateway [gateway ip] and hit enter. Use the Gateway IP from above. The customer may not have a LAN Gateway in use for the IPSIs, so this step may not be necessary.
13.Type exit and hit enter.
14.Now log into the IPSI board again using step 4 through 8 then come back to step 15.
15.Type show control interface and check to make sure the IP addressing matches the above info.
16.Type reset and hit enter, then type y and hit enter to confirm IPSI board.
17.Now log into the IPSI board again using step 4 through 8 then come back to step 18.
18.Type show control interface to make sure the IPSI board reset was successful.
19.Type exit and hit enter to exit the IPSI command line interface.
20.Type exit and hit enter to close the DOS window.
If this is a replacement of an IPSI board in a IP-Connect configuration, you need to log into the IPSI (if possible) and retrieve the existing IP addresses if they are not available from the customer. You may also retrieve them from the S87XX/S8500. Write those addresses down on the form and use those to configure the new IPSI board.

среда, 8 октября 2014 г.

Настройка ClamAV для фильтрации zip-архивов с исполняемыми файлами в почтовых вложениях.

Cоздаём файл в /var/db/clamav/archive.zmd c содержимым:
Block.EXE-zip:0:\.exe$:*:*:*:*:*:*
Block.COM-zip:0:\.com$:*:*:*:*:*:*
Block.JS-zip:0:\.JS$:*:*:*:*:*:*

Перегружаем clamd.

Описание формата строки:
The (now obsolete) archive metadata signatures can be only applied to ZIP and RAR files and have the following format: 
virname:encrypted:filename:normal size:csize:crc32:cmethod:fileno:max depth
where the corresponding fields are:
• Virus name
• Encryption flag (1 – encrypted, 0 – not encrypted)
• File name (this is a regular expression - * to ignore)
• Normal (uncompressed) size (* to ignore)
• Compressed size (* to ignore)
• CRC32 (* to ignore)
• Compression method (* to ignore)
• File position in archive (* to ignore)
• Maximum number of nested archives (* to ignore)
The database file should have the extension of .zmd or .rmd for zip or rar metadata
respectively.