Gunni M

Hér á eftir fylgir scripta sem tryggir að öll innlennd netumferð fari beint út gegnum ISP'ann ykkar í stað þess að taka krókaleið gegnum tunnel netsamskipta/openvpn.is UnZippa í My Documents: https://dl.dropbox.com/u/66544/is-net-routes.zip Keyra í run (windows takkinn+R): schtasks /create /ru %username% /tn is-net-routes /xml %userprofile%\Documents\is-net-routes\is-net-routes.xml Þetta virkar á windows 7 x64 professional. Ef schtasks skipunin virkar ekki á ykkar vél þá dugar að búa sjálfir til scheduled task sem keyrir við logon notanda og framkvæmir þessar aðgerðir í röð: powershell.exe -command {$client = new-object System.Net.WebClient;$client.DownloadFile('http://www.rix.is/is-net.txt',$env:temp+'\is-net.txt')} %userprofile%\Documents\is-net-routes\is-net-routes.bat Ef allt gengur vel mæli ég með að breyta nafnaþjónunum sem uppsettir eru á tunnel adapter OpenVPN.is yfir í nafnaþjóna ykkar ISP Hægt er t.d. að sjá með tracert mbl.is eftir uppse

Alright, so it seems inetpro.org is down atm and i'm not even sure they still have my scripts hosted so here are new links, new version and additions to my python network management scripts. I'm now using the excellent pexpect in most of them which you can grab from here: http://sourceforge.net/projects/pexpect/ rix.is ip filter: Edit the list from rix.is for an ASA object-group http://dl.getdropbox.com/u/66544/scripts/edit-rix-ipv4-is.py Send the edited list to the ASA http://dl.getdropbox.com/u/66544/scripts/update-ASA.py Icelandic whitelisting, much fun ;) the script that started the blog, still brilliant :D Configuration Downloader: http://dl.getdropbox.com/u/66544/scripts/dl-config.py In addition to the dl-config.py script you will need a settings file declaring the tftp host (ASA/PIX don't support scp afaik) and some other variables mentioned in the dl-config.py file itself. You will need a new-line delimited device list flat file (hostnames/ip addresses, pa

So i wrote a simple configuration nabbing script a while ago, using expect and python initially, i rewrote it the other day with pexpect, a python native version of expect. very nice, highly recommended. http://inetpro.org/pastebin/1461/ ofc you'd preferably want to copy your configurations over the internet with scp but the uber secure ASA/PIX platform doesn't support that afaik.. 

So i was getting tired of manually ssh'ing to the trio of name servers my company runs whenever we needed to add a new domain. I set out to script the process and ended up with this: Both expect scripts take a single argument, the domain to be added, be sure to modify the host part of the spawn ssh lines to fit your needs. The expect script run on the master for domain additions http://internetworkpro.org/pastebin/1213/ The Python script run by the expect script on the master: http://internetworkpro.org/pastebin/1218/ The Python script run by the expect script on the slaves: http://internetworkpro.org/pastebin/1217/ The expect script run on the master for domain deletions http://internetworkpro.org/pastebin/1214/ The Python script run by the expect script on all servers: http://internetworkpro.org/pastebin/1215/ The expect scripts assume you use public key authentication with ssh. These are some of my first attempts at python scripting and i'm not a seasoned expect/tcl guy eith

Since IOS 12.4(20)T the object-group network command has been introduced outside of the ASA family. And since rix.is holds out a list of icelandic subnets i got the idea to open access to various services only to icelanders :) The idea isn't new but i hope the scripts i created with the help of my dear friend Jón Rúnar will help someone out there. What we have is very basic stuff, we have a shell script run by cron on a CentOS box that executes wget to grab the list from RIX, a python script to edit the text file so that an ASA/Cisco IOS can use the list, and then an expect script to update the list on the device. bash script http://www.internetworkpro.org/pastebin/1066/ here we have two branches depending on your platform: edit the subnet list from RIX for ASA input http://www.internetworkpro.org/pastebin/1067/ expect script for ASA http://www.internetworkpro.org/pastebin/1071/ edit the subnet list from RIX for Cisco IOS input http://www.internetworkpro.org/pastebin/1069/ expect s