Archive

Archive for January, 2008

Upgrade FreeBSD 6.2 to 6.3

January 27th, 2008

FreeBSD 6.3 has been released, so I want to start by upgrading one of my test machines from 6.2 to 6.3. To accomplish this, I followed the directions from Daemonic Dispatches.

  • mkdir /root/freebsd-update
  • cd /root/freebsd-update
  • fetch http://www.daemonology.net/freebsd-update/freebsd-update-upgrade.tgz
  • fetch http://www.daemonology.net/freebsd-update/freebsd-update-upgrade.tgz.asc
  • gpg –verify freebsd-update-upgrade.tgz.asc freebsd-update-upgrade.tgz
  • tar -xzf freebsd-update-upgrade.tgz
  • sh freebsd-update.sh -f freebsd-update.conf -r 6.3-RELEASE upgrade
  • yes to “Does this look reasonable?
  • sh freebsd-update.sh -f freebsd-update.conf install
  • init 6
  • sh freebsd-update.sh -f freebsd-update.conf install
  • init 6

That was painless enough to be very, very encouraging to me. Now I’ll have to go hit a loaded box and see how well it works….

FreeBSD

FreeBSD, Courtesy of Novell, Richard Bejtlich, and my friend Todd

January 20th, 2008

FreeBSD LogoIt’s happened. I looked around yesterday and realized I’ve switched from Linux to FreeBSD. I didn’t wake up one morning and decide to switch. It just seems that as projects came up I would find some compelling reason to choose FreeBSD over Linux. Now that I look around, I see the pattern. It wasn’t purposeful, but I’m happy with where it’s going.

You need to understand that I started using Linux about eight years ago and got serious with it over the last five years or so. Actually I have my friend Todd to thank for turning me on to Linux as part of his infatuation with integration. It started off innocently enough with some Linux firewalls (the LRP project to be exact) that I could make work, but it was still mostly black magic. Over time I got to using Sendmail, iptables/Shorewall, Samba, LAMP, and all manner of Linux goodness.

By this time I was settled in with SuSE as a distro of choice. SuSE was running in my office, most of my cilents in some fashion, and in my data center rack. Life was good. Then Novell entered the picture. They bought SuSE up, and as usual sucked the life out of something good. Dang. Actually it took a couple of releases before the fears were confirmed and I left SuSE. Over time I played around with a list of distros that I liked for some reasons and hated for others. Nothing ever seemed to fit well for the many scenarios I had used SuSE for.

Over the last couple years I’ve been reading Richard Bejtlich’s TaoSecurity blog, and his general endorsement of FreeBSD interested me. Then, my friend Todd pointed out pfSense, a BSD based firewall distribution running pf. After running shorewall on Linux hosts, pfSense was somewhat constrictive though. The logical extension was running pf directly on FreeBSD, and now my firewalls and many of my customers’ firewalls are on FreeBSD.

So now I am running FreeBSD on as many hosts as Linux, and I expect to convert most of what remains to FreeBSD as boxes age out. As a matter of fact, one of my next project will be to replace my office Samba server with new hardware running FreeBSD and Samba.

So far I like what I’ve learned, and I can foresee using FreeBSD as an OS of choice for quite some time.

FreeBSD, pfSense

TampaBaySec 2008-01-16

January 8th, 2008

The first meeting of 2008 for TampaBaySec will be Wednesday January 16th at 6pm.

As before we will meet at the Starbucks at Kennedy & Westshore.

If you work in information security or just have an interest in it, come out and enjoy the opportunity to meet others of a similar mind.

Events

Embedded Device Security Webcast

January 2nd, 2008

Just catching up on my feedreader, and I came across this gem:

http://www.pauldotcom.com/2007/12/18/tune_into_my_sans_webcast_thin.html

Webcast of Paul’s “Things That Go Bump In The Network” keynote. Nice to see SANS facilitating getting this out there. I look forward to checking it out.

Education, Events

Happy New Year 2008

January 1st, 2008

2008Here we are on the dawn of another new year. It’s hard to believe 2007 has come and gone, but alas it has. I hope 2008 finds you pursuing you passions and enjoying the process.

As for me, 2008 has a great deal of promise. This year I hope to move back to more project type work, as over the last few years I have done more long term maintenance work. Also, I will begin to produce original content for publication, beginning with blogging on an at least weekly schedule. Last year I decided to get Cisco certified, and I plan to follow it up this year with more personal enrichment, like the CISSP and a trip to ShmooCon. We’ll see where it goes from there.

Have a happy new year in 2008!

Other