Papandut.Com: like IT, blog IT, share IT, help with IT

Installing and Configuring OpenVPN Server on CentOS using Webmin (part 4)

Configuring pfSense as OpenVPN client for site-to-site VPN

In this section, we will discuss the client side of OpenVPN site-to-site configuration. At the client side, I use pfSense as the firewall, webproxy, and VPN gateway to connect to the HO through site-to-site VPN with OpenVPN server.

More »

Setup time synchronization on HP Procurve switches

By default, when an HP Procurve switch reboot, the switch time will revert to 1 Jan 1990 at 00:00:00. Some time, inaccurate time setting brings difficulties when we need to look at the log at a specific time. Manual time adjustments are not saved on HP Procurve switches after reboot. The solution is to setup time synchronization to a time (NTP) server. More »

Installing and Configuring OpenVPN Server on CentOS using Webmin (part 3)

OpenVPN Configuration
Here are the steps to configure OpenVPN using Webmin:

1. Create Certification Authority
To create the Certification Authority, go to Server -> OpenVPN + CA, click on Certification Authority List. More »

Installing and Configuring OpenVPN Server on CentOS using Webmin (part 2)

Installing OpenVPN Server
In my configuration, I use CentOS 5.3 with 1 CPU 2.8 GHz, 2 GB RAM, 40 GB HD, and one NIC as the server.  To make it easier when installing OpenVPN, I use RPMForge repository. First I need to download rpmforge release package then install it. More »

Installing and Configuring OpenVPN Server on CentOS using Webmin (part 1)

Our company have several branches and mobile users that need to access data in the head office. I need to provide VPN access for them. I want a solution for site-to-site VPN that is cost effective, stable, easy to use and configure with Graphical User Interface. After exploring the documentation in the net, I find the solution for my need. I use OpenVPN with Webmin running on CentOS server in the head office side. As for the branches side, I choose pfSense. And for the mobile users, I use OpenVPN client for Windows. More »

You are blessed !!!

You are blessed. I am blessed. We are blessed !!!

Delete mail queue from or to a specific email address

Some times, you may need to delete mail queue from or to a specific email address in your Postfix mail server.   For example, if  you get spam attack that fills your server with a lot of emails from the same sender email address or to the same recipient email address, you need to clean those emails from your mail queue.

Manually deleting those email is very time consuming.  Here are the step to clean those email with one single command:

for i in `/usr/sbin/postqueue -p|grep '[email protected]' |awk {'print $1'}|grep -v '[email protected]'`; do /usr/sbin/postsuper -d $i ; done

This command will delete mail queue from or to [email protected].  To check current mail queue, run this command:

/usr/sbin/postqueue -p

Your mail queue will be much shorter.

HA error – Could not reach isolation address

I get this error message: “Could not reach isolation address: none specified” on one VMware VSphere host.  The error message only appear on one host. HA on the other hosts works normal.  I tried to run the “Reconfigure HA” on that host, the same error keep appear.   I also tried to disable HA for the cluster dan re-enabled it but no success.

After googled and searched, I found the source of the problem.  The default gateway on the Service Console was missing.   Not sure how this could happen.  After fill in the default gateway IP and run the Reconfigure HA, the HA works fine on that host.

Microsoft Trificiency @ JCC

Pada tanggal 24 November 2009, Microsoft Indonesia mengadakan acara Join Business Launch dengan agenda peluncuran produk baru Microsoft.   Produk yang diluncurkan adalah Windows 7, Windows Server 2008 R2 dan Exchange Server 2010.  Dengan tema acara “Trificiency – The New Efficiency” Microsoft memamerkan kehebatan ketiga produk tsb yang dapat “do more” with “less cost”.

Dalam acara ini Microsoft juga memberi penghargaan kepada para IT Professional dengan menampilkan di panggung 77 orang pertama Indonesia yang lulus sertifikasi Windows 7 serta recognition bagi 60 orang peserta Exchange 2010 Ignite Traning.

Dan seperti acara launching Windows Server 2008 tempo hari, kali ini saya juga dapat kaos baru dan berkesempatan naik panggung lagi sebagai peserta Exchange 2010 Ignite Training 🙂

Got my CSSA certification

Last week, I take the Sonicwall certification and successfully passed the exam at the first take.  Now I am a Certified SonicWALL Security Administrator (CSSA) for Network Security Essentials.
This certification will be my third certification in security field besides MCSE Security and Certified Ethical Hacker.  For those who would like to take this certification, here are some info about it:
– question: 50
– time: 120 minutes
– passing score : 75%

Tips:  some working knowledge of Sonicwall firewall product, and all materials in the class room  are more than enough for the preparation to take the exam.