Network Interface may not come up online at reboot in Solaris
Everytime you reboot your Sun Solaris Server, you may find that one or more of your Network Interfaces may not come online.
If you did a “netstat -r”
sunsolaris# netstat -r
Routing Table: IPv4
Destination Gateway Flags Ref Use Interface
——————– ——————– —– —– —— ———
BASE-ADDRESS.MCAST.NET solaris10 U 1 0 hme0
default 192.168.0.1 UG 1 0 hme0
localhost localhost UH 1 61 lo0
You may not find that the network for the Network interface not found in there (192.168.0.0 here) and as you would expect adding the netmask manually fixes the problem.
sunsolaris# ifconfig hme0 255.255.0.0
Manually Mount local/remote CDROM in Sun Solaris
The Volume Manager (vold) daemon in Sun Solaris will automatically detect and mount a CDROM when inserted on Sun Solaris under /cdrom (if CD is not labelled )or /cdrom/<label> where <label> is the label of the CD
In instances where vold is not running or when there is a need to manually mount the CDROM the following the procedure should help.
Increase/Decrease route flushing time period in Solaris
Just as we saw modifying the caching time for ARP entries in the ARP table here. We can modify the default time that a sun Solaris system can hold the routing entries.
The default time for which a dynamically learnt Route entry in the routing table is 20mins (1200000ms)
Display/Add/Delete/modify ARP entries in ARP Table
Not so often we would end up troubleshooting or manipulating ARP and ARP tables in Sun Solaris. However, following are some of the useful commands which can help when required. The following commands will help you display,modify,add,delete ARP entries in Sun Solaris ARP table.
Reduce ARP caching time in Sun Solaris using ndd
ARP attacks are the easiest attacks that can be launched on a network or a Server causing a Denial of Service. One of those things that can be done on the Sun Solaris Operating System is to alter the caching time for the ARP cache whch reduces the time that a rogue ARP entry stays in the ARP table. While this is not fool proof but can certainly make it that extra difficult to the hacker.
The default time that ARP entries are cached in a Sun Solaris system is 5 mins.
Debug/View System Variables in Solaris using adb utility
The adb utility is a general purpose debugger tool for Sun Solaris. adb utility can be used to view system variables and the values of the various system variables in use by the Sun Solaris Operating System. It can be used to examine files and provides a controlled environment for the execution of programs.
Enable/Disable IP Forwarding in Solaris 10 without reboot
IP packet forwarding is the process of routing packets between network interfaces on one system. A packet arriving on one network interface and addressed to a host on a different network is forwarded to the appropriate interface.
In Solaris 10, IP Forwarding can be enabled or disabled using the routeadm & ifconfig commands as against the ndd commands in Solaris 9 and earlier. The advantage is the change dynamic and real-time and the change persist across reboot unlike the ndd command.
How to find files,directories,path,executables for packages
Sometimes you run into situations to try and understand where the files for your package that you just installed on your Sun Solaris Server. While this is no big deal for geeks lets help “not so geeks” with a way to find the files and path of installed package.
Sun Patch Check – Free Opensource utility to check Patch Status
Sun Patch Check is a simple opensource utility from “Titania” that runs in UNIX or Linux systems to check the Patch installation status in a Sun Solaris server running on a SPARC or Intel platform and compare it to its own database of the latest recommended patches for that version of Solaris operating system.
I loved the authors Nipper security audit tool for network devices. It was one of the greatest utilities I have ever come across and this is no ordinary as well.
Sun Security Alerts- Sun Alert 275590 A Security Vulnerability in the ntp Daemon (xntpd(1M)) May Lead to a Denial of the Solaris Network Time Protocol(NTP) Service
- Sun Alert 274110 Security Vulnerability in the Apache 1.3 "mod_perl" Module Component "Status.pm" May Lead to Unauthorized Access to Data
- Sun Alert 274990 Security Vulnerability in the Transport Layer Security (TLS) and Secure Sockets Layer 3.0 (SSLv3) Protocols Affects Multiple Server Products in the Sun Java Enterprise System Suite
- Sun Alert 275530 Integer Overflow Security Vulnerability in AES and RC4 Decryption in the Solaris Kerberos Crypto Library May Lead to Execution of Arbitrary Code or a Denial of Service (DoS)
- Sun Alert 271169 Multiple Security Vulnerabilities in the Common Unix Printing System (CUPS) Web Interface in OpenSolaris May Lead to Cross-Site Scripting (XSS) and HTTP Response Splitting Attacks