Tag Archive for 'pix'

Cisco IOS images

Daftar links cisco images diambil dari persianadmins.com
http://www.persianadmins.com/site/news/latest_news/_cisco_ios.html

http://www.persianadmins.com/ios.htm

ftp://62.140.232.3/ios/

http://rapidshare.com/users/5F6T7J

http://rapidshare.com/users/K2860J

password for the folder : MakeMeProud

IOS for

http://bzzjh.4shared.com/

ftp://218.1.71.179/download/Cisco/Cisco%20IOS/
user:ftpnew4
pass:KD8YFN57LD

c1600-sy-mz.122-3.bin
c1600-y-l.122-2.T.bin
c2500-c-l.120-4.bin
c2600-is-mz.122-2.T.bin
c2600-is-mz.120-8.bin
c2600-is-mz.122-4.T1.bin
c2600-is-mz.120-5.bin
c2600-i-mz.120-7.bin
c2600-c-mz.121-9.bin
c2600-i-mz.121-3.T
c2600-c-mz.122-4.T1
c2600-ik8s-mz.122-11.T.bin
c2600-ik8o3s-mz.122-11.T.bin
c3640-d-mz.120-4.bin
c3640-is-mz_120-7_t.bin
c3640-dos-mz.120-4.t.bin
c4000-ajs-mz.120-10
c4000-is-mz.120-7.bin
c4500-boot-mz.122-1.bin
c4500-is-mz.120-7.bin
cat8510c-in-mz_120-1a_w5_6f.bin
c2900XL-c3h2s-mz-120.5.2-XU.tar
c2900XL-c3h2s-mz-120.5.2-XU.bin
PDM-201.bin

or

http://rapidshare.com/files/64476979/ata18x-v2-16-2-030909a-1.zip

http://rapidshare.com/files/64476982/ata_03_01_02_h323_040927_1.zip

http://rapidshare.com/files/64476996/c2900xl-c3h2s-tar.120-5.WC14.tar

http://rapidshare.com/files/64476999/c2900xl-c3h2s-tar.120-5.WC16.tar

http://rapidshare.com/files/64477006/c3500xl-c3h2s-tar.120-5.WC14.tar

http://rapidshare.com/files/64477007/c2950-i6q4l2-tar.121-22.EA7.tar

http://rapidshare.com/files/64477008/c5350-boot-mz.122-2.XB2

http://rapidshare.com/files/64477011/c2600-telco-mz.123-17a.bin

http://rapidshare.com/files/64477033/c5350-is-mz.122-11.T.bin

http://rapidshare.com/files/64477038/c5350-boot-mz.123-15.bin

http://rapidshare.com/files/64477045/c2801-spservicesk9-mz.124-5a.bin

http://rapidshare.com/files/64477050/c2800nm-spservicesk9-mz.124-5a.bin

hxxp://cisco.uta.cl/_gr1/download/cisco_ios/2500-igs-j-l.111-5.bin
hxxp://cisco.uta.cl/ccna_gr1/download/cisco_ios/2503igs-j-l.111-5
hxxp://cisco.uta.cl/ccna_gr1/download/cisco_ios/c2900XL-c3h2s-mz.120-5.WC2.bin
hxxp://cisco.uta.cl/ccna_gr1/download/cisco_ios/cat1900EN.9.00.06.bin
hxxp://rapidshare.com/files/13300148/SDM-V22a.zip
hxxp://rapidshare.com/files/16277670/Cisco_Security_Device_Manager__Sdm__v20A.zip
hxxp://rapidshare.com/files/8762790/c1100-k9w7-tar.122-13.JA2.tar
hxxp://rapidshare.com/files/8762197/c1600-k8osy-mz.122-15.T5.bin
hxxp://rapidshare.com/files/8762200/c1600-k8osy-mz.123-1a.bin
hxxp://rapidshare.com/files/8762271/c1600-sy-mz.122-15.T2.bin
hxxp://rapidshare.com/files/8761686/C1700-K9o3sy7-Mz_20122-11_20T.bin
hxxp://rapidshare.com/files/8761688/C1700-K9o3sy7-Mz_20122-4_20Yb.bin
hxxp://rapidshare.com/files/8761698/C1700-K9o3sy7-Mz_20123-1a.bin
hxxp://rapidshare.com/files/8761717/C1700-Sv3y7-Mz_20122-13_20Zh.bin
hxxp://rapidshare.com/files/8761691/C1700-Sy7-Mz_20122-4_20Xl5.bin
hxxp://rapidshare.com/files/8761735/C2600-Advsecurityk9-Mz_20123-5a.bin
hxxp://rapidshare.com/files/8762264/c2600-i-mz.120-8
hxxp://rapidshare.com/files/8762273/c2600-io3-mz.122-3.bin
hxxp://rapidshare.com/files/8761689/C2600-Io3-Mz_20122-16.bin
hxxp://rapidshare.com/files/8762288/c2600-is-mz.121-3a.T4.bin
hxxp://rapidshare.com/files/8762292/c2600-is-mz.122-12a.bin
hxxp://rapidshare.com/files/8761710/C2600-Is-Mz_20121-11.bin
hxxp://rapidshare.com/files/8761813/C2600-Is-Mz_20122-11_20T.bin
hxxp://rapidshare.com/files/8761817/C2600-Is-Mz_20122-15_20T.bin
hxxp://rapidshare.com/files/8762301/c2600-js-mz.121-5_T.bin
hxxp://rapidshare.com/files/8762305/c2600-js-mz.122-12a.bin
hxxp://rapidshare.com/files/8762280/c2600-js56i-mz.120-8.bin
hxxp://rapidshare.com/files/8762389/c2600-jsx-mz.122-8.T.bin
hxxp://rapidshare.com/files/8761780/C2600-P-Mz.991126
hxxp://rapidshare.com/files/8762785/c2900xl-c3h2s-tar.120-5.WC9.tar
hxxp://rapidshare.com/files/8762930/c2900XL-hs-mz-112.8.11-SA6.bin
hxxp://rapidshare.com/files/8762933/c2900XL-hs-mz-112.8.11-SA6.tar
hxxp://rapidshare.com/files/8762972/c2900XL-html-orig.112.8.11-SA6.tar
hxxp://rapidshare.com/files/8762805/c2950-i6q4l2-tar.121-19.EA1a.tar
hxxp://rapidshare.com/files/8762809/c2950-i6q4l2-tar.121-20.EA1.tar
hxxp://rapidshare.com/files/8762934/c3500xl-c3h2s-tar.120-5.WC9.tar
hxxp://rapidshare.com/files/8762944/c3550-i9q3l2-tar.121-19.EA1a.tar
hxxp://rapidshare.com/files/8761773/C3640-I-Mz_20121-5_20T10.bin
hxxp://rapidshare.com/files/8761779/C3640-Is-Mz.120-4.T.bin
hxxp://rapidshare.com/files/8762380/c3640-is-mz.120-5.bin
hxxp://rapidshare.com/files/8762393/c3640-is-mz.121-11.bin
hxxp://rapidshare.com/files/8762449/c3640-is-mz.122-15.T8.bin
hxxp://rapidshare.com/files/8762413/c3640-is-mz.122-21.bin
hxxp://rapidshare.com/files/8762412/c3640-is-mz.122-7.bin
hxxp://rapidshare.com/files/8761786/C3640-Ix-Mz_20122-15_20T2.bin
hxxp://rapidshare.com/files/8761777/C3660-I-Mz_20121-5_20T8.bin
hxxp://rapidshare.com/files/17008553/c3660-ik9o3s-mz.124-6.T.bin
hxxp://rapidshare.com/files/8761854/C3660-Jsx-Mz_20123-4_20T.bin
hxxp://rapidshare.com/files/8762947/c3750-i9-tar.121-19.EA1c.tar
hxxp://rapidshare.com/files/8762952/c3750-i9-tar.122-18.SE.tar
hxxp://rapidshare.com/files/8762363/c4500-boot-mz.120-4
hxxp://rapidshare.com/files/8762372/c4500-is-mz.112-21.bin
hxxp://rapidshare.com/files/8762482/c4500-js-mz.120-4
hxxp://rapidshare.com/files/8762485/c4500-js56i-mz.120-8.bin
hxxp://rapidshare.com/files/8762462/c5300-boot-mz.120-4.T1
hxxp://rapidshare.com/files/8762471/c5300-i-mz.120-3.T1
hxxp://rapidshare.com/files/8762475/c5300-i-mz.120-5.T1.bin
hxxp://rapidshare.com/files/8762480/c5300-i-mz.121-5.T.bin
hxxp://rapidshare.com/files/8762483/c5300-i-mz.122-1a.bin
hxxp://rapidshare.com/files/8762484/c5300-i-mz.122-2.XA3.bin
hxxp://rapidshare.com/files/8762527/c5300-i-mz.122-2.XB3.bin
hxxp://rapidshare.com/files/8762526/c5300-is-mz.120-4.XJ4.bin
hxxp://rapidshare.com/files/8762530/c5300-is-mz.120-7.T.bin..bin
hxxp://rapidshare.com/files/8762540/c5300-is-mz.122-2.XA3.bin
hxxp://rapidshare.com/files/8762077/C5300-Is-Mz_20123-3.bin
hxxp://rapidshare.com/files/8762536/c5300-j-mz.120-7.T.bin
hxxp://rapidshare.com/files/8762068/C5300-Jk8s-Mz_20v122_201_20Throxxle.cscdt03141
hxxp://rapidshare.com/files/8762553/c5300-jk9s-mz.122-2.XB3.bin
hxxp://rapidshare.com/files/8762545/c5300-js-mz.121-5.T5.bin
hxxp://rapidshare.com/files/8762565/c5300-js-mz.123-1a.bin
hxxp://rapidshare.com/files/8762088/C5300-Js-Mz_20123-3.bin
hxxp://rapidshare.com/files/8762611/c5300-js56i-mz.120-8.bin
hxxp://rapidshare.com/files/8762632/c5300-js56i-mz.121-5.T.bin
hxxp://rapidshare.com/files/8762609/c5800-p4-mz.113-10.AA1.bin
hxxp://rapidshare.com/files/8762630/c5rsm-io3sv56i-mz.121-2.bin
hxxp://rapidshare.com/files/8762579/c5rsm-jsm-mz.120-8.bin
hxxp://rapidshare.com/files/8762100/C7200-Is-Mz_20122-15_20T5.bin
hxxp://rapidshare.com/files/8762619/c7200-js56i-mz.120-8.bin
hxxp://rapidshare.com/files/8762610/c820-k9osy6-mz.122-8.YN.bin
hxxp://rapidshare.com/files/8762614/c820-k9osy6-mz.123-5.bin
hxxp://rapidshare.com/files/8762045/C820-K9osy6-Mz_20122-4_20Ya6.bin
hxxp://rapidshare.com/files/8762050/C820-K9osy6-Mz_20123-4_20T.bin
hxxp://rapidshare.com/files/8762696/c820-ov6y6-mz.122-4.XM4.bin
hxxp://rapidshare.com/files/8762051/C820-Sv6y6-Mz_20122-15_20T5.bin
hxxp://rapidshare.com/files/8762047/C831-k9o3Sy6-Mz_20123-2_20Xc.bin
hxxp://rapidshare.com/files/8762188/C837-k9o3y6-Mz_20122-13_20Zh2.bin
hxxp://rapidshare.com/files/8762926/cat1900EN.9.00.06.bin
hxxp://rapidshare.com/files/8762920/cat1900EN.9.00.06.readme
hxxp://rapidshare.com/files/8762193/Cisco_20IOS_20-_20c1600-nosy-mz.123-1a.bin
hxxp://rapidshare.com/files/8762190/Cisco_20IOS_20-_20c1600-sy-mz.123-1a.bin
hxxp://rapidshare.com/files/8762659/mcom-modem-code_5_3_30.bin
hxxp://rapidshare.com/files/8762660/mica-modem-portware.2.5.1.0.bin
hxxp://rapidshare.com/files/8762658/mica-modem-portware_2_2_3_0.bin
hxxp://rapidshare.com/files/8762662/mica-modem-pw.2.6.1.0.bin
hxxp://rapidshare.com/files/8762664/mica-modem-pw.2.6.2.0.bin
hxxp://rapidshare.com/files/8762665/mica-modem-pw.2.7.1.0.bin
hxxp://rapidshare.com/files/8762667/mica-modem-pw.2.7.2.0.bin
hxxp://rapidshare.com/files/8762792/rsp-boot-mz.120-11.bin
hxxp://rapidshare.com/files/8762799/rsp-boot-mz.121-6.bin
hxxp://rapidshare.com/files/8762860/rsp-jsv-mz.121-6.bin
hxxp://rapidshare.com/files/8762811/rsp-pv-mz.120-11.bin
hxxp://rapidshare.com/files/8762163/TFTPServer1-1-980730.exe
hxxp://rapidshare.com/files/8762155/TOTSWTCH.MIB
hxxp://rapidshare.com/files/8762157/TS020200.DWN
hxxp://rapidshare.com/files/25862116/c3725-ipvoice-mz.123-14.T7.bin

c3620-j1s3-mz.123-21.bin
c3640-js-mz.123-14.T7.bin
c3660-ik9o3s-mz.124-6.T.bin
c7200-adventerprisek9-mz.124-11.T.bin
c3660-jk9o3s-mz.124-12.bin
hxxp://www.megaupload.com/?d=AL96Q22O

7200 Image “ios”, c7200-adventerprisek9-mz.124-4.T1
hxxp://rapidshare.com/files/14059762/c7200-adventerprisek9-mz.124-4.T1.rar
hxxp://rapidshare.com/files/17035078/c7200-advsecurityk9-mz.124-11.T.bin.html

ftp 1
ftp://193.125.99.8/pub/CISCO/Ios

http://rapidshare.com/files/57877766/c2960-lanbasek9-mz.122-25.SEE4.bin

http://rapidshare.com/files/57878050/asa706-k8.bin

http://rapidshare.com/files/57925780/c7200-boot-mz.120-28d.bin

http://rapidshare.com/files/57925782/635.bin

http://rapidshare.com/files/57925795/pdm304.bin

http://rapidshare.com/files/57925826/pix712.bin

http://rapidshare.com/files/57925855/c831-k9o3sy6-mz.124-12c.bin

http://rapidshare.com/files/57925868/c851-advsecurityk9-mz.124-11.T3.bin

http://rapidshare.com/files/57925874/c850-advsecurityk9-mz.124-15.T1.bin

http://rapidshare.com/files/57925877/rsp-boot-mz.124-12a.bin

http://rapidshare.com/files/57925894/cat6000-supk8.8-5-3.bin

http://rapidshare.com/files/57926066/c7200-ik9o3s-mz.124-12c.bin

http://rapidshare.com/files/57926079/rsp-pv-mz.124-12c.bin

http://rapidshare.com/files/57926099/rsp-ik9sv-mz.124-12a.bin

http://rapidshare.com/files/57926108/rsp-ik9sv-mz.124-12c.bin

http://rapidshare.com/files/57931711/c3560-advipservicesk9-mz.122-40.SE.bin

http://rapidshare.com/files/57931794/c3500xl-c3h2s-tar.120-5.WC15.tar

http://rapidshare.com/files/57931795/c2950-i6k2l2q4-mz.121-22.EA8a.bin

http://rapidshare.com/files/57931804/c2950-i6q4l2-mz.121-22.EA10.bin

http://rapidshare.com/files/57931806/c1200-k9w7-tar.123-8.JEB.tar

http://rapidshare.com/files/57931819/c2960-lanbasek9-mz.122-37.SE.bin

http://rapidshare.com/files/57931825/c2970-lanbasek9-mz.122-37.SE.bin

http://rapidshare.com/files/57931847/asdm-512.bin

http://rapidshare.com/files/57931872/c3560-advipservicesk9-mz.122-37.SE.bin

http://rapidshare.com/files/57931908/c1700-k9o3sy7-mz.124-12c.bin

http://rapidshare.com/files/57931928/c1700-advsecurityk9-mz.124-12c.bin

http://rapidshare.com/files/57931989/c1811-advipservicesk9-mz.124-11.T3.bin

http://rapidshare.com/files/57932029/c2600-ipvoice-mz.124-12c.bin

http://rapidshare.com/files/57932035/c1841-advsecurityk9-mz.124-12c.bin

http://rapidshare.com/files/57932036/c2600-advsecurityk9-mz.124-12c.bin

http://rapidshare.com/files/57932162/c3845-adventerprisek9-mz.124-12c.bin

http://smallservers.net/asdm-512.bin

http://smallservers.net/c1200-k9w7-tar.123-8.JEB.tar

http://smallservers.net/c1700-advsecurityk9-mz.124-12c.bin

http://smallservers.net/c1700-k9o3sy7-mz.124-12c.bin

http://smallservers.net/c1811-advipservicesk9-mz.124-11.T3.bin

http://smallservers.net/c1841-advsecurityk9-mz.124-12c.bin

http://smallservers.net/c2600-advsecurityk9-mz.124-12c.bin

http://smallservers.net/c2600-ipvoice-mz.124-12c.bin

http://smallservers.net/c2801-adventerprisek9-mz.124-12c.bin

http://smallservers.net/c2801-adventerprisek9-mz.124-12c.bin

http://smallservers.net/c2950-i6k2l2q4-mz.121-22.EA8a.bin

http://smallservers.net/c2950-i6q4l2-mz.121-22.EA10.bin

http://smallservers.net/c2960-lanbasek9-mz.122-37.SE.bin

http://smallservers.net/c2970-lanbasek9-mz.122-37.SE.bin

http://smallservers.net/c3500xl-c3h2s-tar.120-5.WC15.tar

http://smallservers.net/c3560-advipservicesk9-mz.122-37.SE.bin

http://smallservers.net/c3560-advipservicesk9-mz.122-40.SE.bin

http://smallservers.net/c3845-adventerprisek9-mz.124-12c.bin

http://smallservers.net/c7200-boot-mz.120-28d.bin

http://smallservers.net/c7200-ik9o3s-mz.124-12c.bin

http://smallservers.net/c831-k9o3sy6-mz.124-12c.bin

http://smallservers.net/c850-advsecurityk9-mz.124-15.T1.bin

http://smallservers.net/c851-advsecurityk9-mz.124-11.T3.bin

http://smallservers.net/cat6000-supk8.8-5-3.bin

http://smallservers.net/pdm304.bin

http://smallservers.net/pix635.bin

http://smallservers.net/pix712.bin

http://smallservers.net/rsp-boot-mz.124-12a.bin

http://smallservers.net/rsp-ik9sv-mz.124-12a.bin

http://smallservers.net/rsp-ik9sv-mz.124-12c.bin

http://smallservers.net/rsp-pv-mz.124-12c.bin

CISCO PIX Firewall dan ESMTP

Jika terinstal di belakang , berarti ada ‘hal kecil’ berikut yang perlu diperhatikan.

SMTP Fixup protocol pada PIX akan memblock ESMTP. PIX akan memfilter EHLO command dari client. Kemudian client menggunakan HELO yang tidak bisa melakukan autentikasi. Hal ini akan menyebabkan protokol seperti STARTTLS dan AUTH LOGIN nggak bisa jalan dibelakang PIX. Test sent email via Outlook melalui Network yang dipisahkan PIX akan selalu gagal waktu proses SMTP AUTH. PIX juga akan menyebabkan delay yang tinggi dan tidak ada respon dari Mail Server.

Delay itu bisa disebabkan oleh packet fragmentation dari packet filtering. Contoh sederhana untuk melihat bagaimana filtering dilakukan oleh PIX adalah dengan telnet ke port 25 mail server.

telnet mail.hafidz.web.id 25
220 hafidz.web.id ESMTP Postfix (2.5.1)

Jika ESMTP terfilter oleh PIX hanya akan muncul:

220 XXXX

PIX akan mereplace EHLO command menjadi XXXX. SMTP sederhana saja yang akan bekerja, sedang Extension tidak.

Pada CISCO PIX, untuk mengatasi hal ini gunakan saja command :

no fixup protocol smtp 25

Referensi problem ESMTP dan Firewall:
chris-linfoot.net
greatcircle.com
gordano.com
support.mricrosoft.com
blogs.technet.com

Bacaan lainnya:
netcraftsmen.net
seclists.org
cisco.com PIX 6.1
cisco.com mailserver
Cisco.com Firewall Basic
cisco.com PIX 7

Cisco PIX: Block Port Torrent

Kenapa koq nggak block di proxy? Berhubung kebetulan contoh case-nya dengan konfigurasi network seperti pada posting ini, dimana hanya port 80 yang di-redirect ke proxy squid, trafik lain tetep lewat jalur LAN — ROUTER — FIREWALL — . Jadi alternatif block dilakukan di Router atau PIX Firewall. Kali ini kita manfaatin aja si PIX.

Langsung aja! Konfigurasi paling sederhana untuk blok BitTorrent dengan case konfigurasi LAN sbb:

LAN ——– (inside) PIX Firwall (outside) ——— Internet

object-group service torrent tcp-udp
description torrent
port-object range 6881 7000
access-list 102 deny tcp any any object-group torrent
access-group 102 in interface outside

Keterangan port yang bisa dilihat dari link ini:
6881-6999/tcp,udp BitTorrent full range of ports used most often
6969/tcp BitTorrent tracker port
7000/tcp Default port for Azureus‘s built in HTTPS Bittorrent Tracker

Jika dilakukan scanning port, BitTorrnet terlihat open pada PC client:

# nmap 10.10.10.10
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) ….
Interesting ports on 10.10.10.10:
Not shown: 1677 filtered ports
PORT STATE SERVICE
3389/tcp open ms-term-serv
5101/tcp open admdog
6881/tcp open bittorent-tracker

torrent sebelum diblok:

connected download torrent
Log download torrent yang terblok seperti berikut:

download torrent yang terblokdownload torrent yang terblok

Ok, good luck.

(Cisco PIX-515e Firewall Version 6.3)

Tags: , ,

Biar PIX mau ngelewatin Paket ICMP

Kenapa sih?

Inbound ICMP yang lewat otomatis akan di-deny. Outbond ICMP diperbolehkan , tapi echo-reply secara default juga di drop. So kalo ngeping pasti hasilnya RTO.

Versi PIX?

PIX Version 6.3(5) 

Gimana?

Biar bisa ngeping, dan mungkin untuk keperluan yang lain, begini contoh konfigurasinya:

access-list 102 permit icmp any any echo-reply
access-list 102 permit icmp any any source-quench
access-list 102 permit icmp any any unreachable
access-list 102 permit icmp any any time-exceeded
access-group 102 in interface outside
icmp permit any outside

referensi: http://www.cisco.com/warp/public/110/31.html 

Tags: , ,