https://www.linickx.com/Fri, 04 Sep 2009 09:56:00 +0100https://www.linickx.com/checkpoint-nokia-how-to-enable-ssh-thru-the-default-filter<p>I had lost this bookmark, saved here so I don't loose it again :)</p> <blockquote> <ul> <li>Solution Title: How do I control / change access using defaultfilter and initialpolicy?</li> <li>Solution ID: <a href="https://supportcenter.checkpoint.com/supportcente/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk41117">sk41117</a></li> </ul> </blockquote> <p>There are various options given in the article, this...</p> <pre><code>ipso[nick]# cp -p $FWDIR/conf/initial_module.pf $FWDIR/conf/initial_module.pf.OLD ipso[nick]# cp $FWDIR/lib/defaultfilter.ipso $FWDIR/conf/initial_module.pf ipso[nick]# comp_init_policy -g initial_module: Compiled OK. ipso[nick]# </code></pre> <p>... will do in most cases!</p>nickFri, 04 Sep 2009 09:56:00 +0100tag:www.linickx.com,2009-09-04:checkpoint-nokia-how-to-enable-ssh-thru-the-default-filterBlogcheckpointfirewallipsoNokiaSecurityhttps://www.linickx.com/ipso-from-clish-to-bourne-shell-sh<p>Note to Self:</p> <p>If an administrator has setup your Nokia (IPSO) shell account to log into clish rather than the unix shell... and you need to <code>cpstop;cpstart</code>... you can switch shells with the command...<br /> <code>Nokia:&gt;shell [admin@nokia]#</code><br /> It's quite a simple command, so why can't I remember it!</p> <p><strong><em>Footnote:</em></strong><br /> <code>iclid</code>is the "router shell" - where you can do show commands<br /> <code>clish</code>is the "voager shell" - where you can "set" things and make changes<br /> <code>/bin/sh</code> or Bourne shell (<em>or sh</em>) is the "Unix shell" - where you have access to the root operating system and can make changes to the file-system or restart processes.</p>nickThu, 14 May 2009 11:44:00 +0100tag:www.linickx.com,2009-05-14:ipso-from-clish-to-bourne-shell-shBlogclishipsoNokiaSecuritysh