Tuesday, October 23, 2007

White listing in Fortigate firewalls

When you have configured your Fortigate firewall with spam filtering in incoming emails you often end up with valid recipients being blocked. This article will talk about how to let these recipients pass through without being blocked.

To start you have to log into your firewall using your favorite Internet Explorer.

These are the steps you'll need to do to finish up;

  • Create a black/white list.
  • Populate the list with email addresses.
  • Attach the white list to your protection profile that scans incoming email.

Create a black/white list

To create a black/white list you'll first have to go into AntiSpam on your left hand side and choose black/white list. Then choose e-mail address on the main screen and type in the name you want on your list.

Populate the list with email addresses

When you have successfully created the list in step one you can start to add email addresses into the list.

Hit the create button and make as many email addresses as you want. Make sure you set Action to "mark as clear" or you for sure will loose your emails.

Attach the white list to your protection profile

When all this is done you are ready to attach your newly created white list to your protection profile. You should know for yourself what protection profile you use for incoming emails so I won't cover it here.

When you have found your protection profile you can edit it and move down to spam filtering. Under there you can find e-mail address BWL check. Choose your newly created list on the right hand side.

That should cover it!

Wednesday, October 17, 2007

Locked out of the administrator account

Some time ago I wrote about Liunx tools and how they can save my day as an Windows administrator. Today I had to download Trinity again. This time the quest was to reover a Windows 2000 server where the administrator password was lost and the account disabled.

The server was a HP server with an integrated Smart Array 5i. I had to load the cciss module manually to get the volume up and go. Then I ran a script called winpass to try change the passord and unlock the account.

Winpass is a script written by the Trinity folks and it seems to work fine. However, it only work with NTFS and fat partitions. And I could not write to the NTFS partitions. NTFS-3g is included, so for me these lines solved the day:

modprobe cciss
ntfs-3g /dev/cciss/c0d0p1 /mnt0
chntpw /mnt0/WINNT/system32/config/SAM

Labels: ,