February 3rd, 2010 by Charles Gardner
Virtualization Benefits for Small Business
Coalescing a few links I’ve been keeping up with for further reading:
A Virtual Door Opens for SMBsA Virtual Door Opens for SMBs
Other, Virtualization
November 11th, 2009 by Charles Gardner

Photo credit pedrosimoes7
I’m bookmarking a couple more videos to watch.
First, Defcon released their teaser set of videos from this year’s con, including Adam Savage’s “Failure”.
https://www.defcon.org/
Second, I saw a link to Marcus Ranum talking at TEDx MidAtlantic.
http://tedxmidatlantic.com/live/#MarcusRanum
Education, Events, Security
November 10th, 2009 by Charles Gardner

I had the opportunity to watch the first few minutes of the stream of Marcus Ranum’s talk at DojoCon 2009 but then had to go to a client site. I was happy to see they posted the videos to UStream so I can go back and watch the rest.
Among those who spoke:
- Richard Bejtlich
- Marcus Ranum
- Chris Hoff
- …and a whole lot more
In case you want to catch up too:
http://www.ustream.tv/channel/dojocon-2009
Education, Events, Security
November 10th, 2009 by Charles Gardner
This post is mostly a note to myself. I haven’t tried this yet, but the Disk2vhd tool from Sysinternals is for P2V for Microsoft virtualization such as Hyper-V.
When I get to try this out, I’ll post some notes about using it and how it stacks up against something like VMWare Converter.
Hyper-V, Virtualization
June 12th, 2009 by Charles Gardner
Just a quick note. I will be moving my focus to putting posts up on my company web site at www.sterlingideas.com. Any really technical items will still end up here, but I am going to make a new effort to post regular content over on the company site, particularly items of interest to my clients.
Be sure to add http://www.sterlingideas.com/feed/rss/ to your feed reader.
Other
May 23rd, 2009 by Charles Gardner
Quick note:
When you do domain masquerading with sendmail, root is exempted from that by default. No big deal unless the host name of your system is not actually registered in DNS. I have a couple VMs that don’t need outside access or DNS registrations, but I’d like to receive their cron output cleanly.
This is a rather easy fix. In most sendmail .mc files you will find the DOMAIN(generic) statement. This refers to loading the generic.m4 file which includes a default statement to expose root without masquerading — EXPOSED_USER(`root’). Copy the generic.m4 to mycustom.m4 and remove the EXPOSED_USER line. Go to your .mc file and change the DOMAIN(generic) to DOMAIN(mycustom) and rebuild your sendmail.cf file.
Applications
May 12th, 2009 by Charles Gardner
This is a simple note to capture process.
- On the VMWare server, copy the guest’s directory to a new name.
- Rename the vmdk disk image
- cd /vm/srv2
- vmware-vdiskmanager -n srv1.vmdk srv2.vmdk
- Rename the other files
- Open the VM configuration and change the names there
- vi srv2.vmx
- :%s/srv1/srv2/
- In the VMWare host’s web console, use the Add Virtual Machine to Inventory to add the new VM.
VMWare
January 24th, 2009 by Charles Gardner
I just upgraded the main perl port on a FreeBSD box from 5.8.8 to 5.8.9 and a perl based service promptly died, complaining of problems locating dependencies. D’Oh!! That’s not good.
After a bit of crunching away I found that each perl module port (each p5-* port) needed a ‘make deinstall && make reinstall’ to align with the new perl version. The only bugger is that this machine has 54 p5-* ports installed. Now I’m basically lazy so I wanted a better way than manually reinstalling each port or even writiing a script to handle these specific ports.
Thankfully a little deeper google exercise turned up pearl-after-upgrade. From the man page:
The standard procedure after a perl port (either lang/perl5 or lang/perl5.8) upgrade is to basically reinstall all other packages that depend on perl. This is always a painful exercise. The perl-after-upgrade utility makes this process mostly unnecessary.
The tool goes through the list of installed packages, looks for those that depend on perl, moves files around, modifies shebang lines in those scripts in which it is necessary to do so, tries its best to adjust dynamically linked binaries that link with libperl.so in the old path, and updates the package database.

Brilliant!! Just what I was looking for.
I ran perl-after-upgrade followed by perl-after-upgrade -f, and it did all the heavy lifting of getting things straight. Just for good measure I ran a rebuild on mimedefang (portmaster mimedefang), and it was back off to the races for that system.
So I must say…. perl-after-upgrade is your friend!
FreeBSD, Is Your Friend
January 24th, 2009 by Charles Gardner
I am starting a new category of posts, called Is Your Friend. Frequently when talking with Todd Long (of the Jireh Consulting blog), one of us will find a cool tool or technology and inevitably it is said that <blank> is your friend.
Recently, Todd said that “OpenDNS is your friend.” I have to agree.
It seems that every few weeks or months another tool saves my bacon or another technology finds a home in my world. I will be filing these away under the Is Your Friend series.
Do you have a particular tool, program, gadget, widget, or whatnot that qualifies for Is Your Friend status? If so, let me know, and I’d be glad to include it here.
Is Your Friend
January 15th, 2009 by Charles Gardner
As I’ve been planning for my trip to Shmoocon, I’ve been thinking through what I will and won’t be taking along. I will also follow the advise I’ve heard time & again on podcasts about taking care at security conferences. As such, I’m planning to travel much lighter than usual. I will not be carrying my laptop. I will be taking:
- My phone – Bluetooth will be off, and the wifi never is on, so that’s good. If I have to connect, 3G and mail on the phone will be primary.
- EEEPC – I just got an Asus EEEPC 1000HA, and I’ve been impressed so far. I am considering loading an alternate OS or LiveCD image to an SD card and disabling my hard drive while I’m at Shmoocon. I haven’t tested this yet, but I’m hoping I can disable the hard drive in the BIOS and boot from SD so that even if the system is compromised the hard disk would be out of play.
That’s it. Toss in a book and some clothes, and I’m ready to roll. Yee-haw.
Events