Posts tagged with: firewall

Links of interest for 6 Jan 2009 - 29 Jan 2009: iWeb acquires the Sun Storage 7410 for its storage area network - It#039;s nice to see companies starting to promote the fact they#039;ve switched from a proprietary storage system to the Sun Storage 7000 range. Understanding ZFS: Disk Space Discrepancies - I#039;ve seen this discrepency before, but haven#039;t had the time to research it. Thanks to Ben, I don#039;t have to. Definitely worth remember this one. IPMP Re-architecture is delivered - A great introduction to the re-architected IPMP including examples of the old and new configuration styles. Once OpenSolaris... Continue reading ►

Links of interest for 13 Jan 2008 - 27 Jan 2008: Transactional ZFS Upgrades on Nexenta - This is pretty impressive usage of ZFS. Once Solaris officially supports ZFS boot, this is a fantastic feature that could be added to patching and live upgrade. Mystery web infection grows, but cause remains elusive - Pity no one seems to have been able to pin-point an underlying OS for the affected web servers. If something like Solaris, FreeBSD or OS X are involved, DTrace could be used to work out what's going on. Fixing ptrace(pt_deny_attach, ...) on Mac OS X 10.5 Leopard... Continue reading ►

Links of interest for 27 Nov 2007 - 11 Jan 2008: 2008 Technology of the Year Awards: Storage - And the award for Best Filesystem goes to... ZFS, naturally. No other filesystem has been as innovative, with such wide spread adoption, recently. Official ZFS on OS X Page - Your source for bleeding edge ZFS on OS X from one of the ZFS developers at Apple. 2008 Technology of the Year Awards: Platforms - And the award for the Most Innovative Server OS goes to... well, Solaris 10 of course. Who else? shimmer - A great alternative to port knocking,... Continue reading ►

I'll admit now, none of this work is mine: all credit needs to go to Borgan Chu and Shawn Ferry. All this post is doing is making it easier to find all the relevant information as it's scattered around a bit. Many people implement firewalls for security reasons, and many people encounter the one nightmare with firewalls that is RPC services, e.g. NFS. The problem with RPC services is that they use dynamic ports when they run. This makes it a bit of a nightmare to configure the respective ports as they're likely to change everytime the host reboots or the service restarts. Continue reading ►