Yuav Ua Li Cas Thiaj Li Netscreen Firewall: 8 Kauj Ruam

2024 Tus sau: John Day | [email protected]. Kawg hloov kho: 2024-01-30 09:31

Los ntawm joeFollow Ntau los ntawm tus sau:

Txog: Kuv nyiam tinker nrog ib yam dab tsi, qee zaum nws ua haujlwm thaum kawg. Muaj kev lom zem saib cov phiaj xwm, sim rhuav qee yam qhib thiab qhia rau kuv paub tias nws mus li cas. cheers, -Joe Ntau Txog joe »

Cov lus qhia no qhia pom ib tsab ntawv uas tuaj yeem siv los rov qab siv lub netscreen firewall uas siv ScreenOS.

Kauj ruam 1: Yuav tsum tau ua

Tsab ntawv no tau sau cia thiab xav tias koj tau qhib SSH ntawm koj lub netscreen thiab ib puag ncig linux. Yog tias koj tsis tau txheeb xyuas qhov xav tau, Oreilly muaj phau ntawv zoo "Tshawb Nrhiav Kev Cia Siab"

Kauj ruam 2: Variables

Peb yuav pib nrog teeb tsa qee qhov kev hloov pauv. Koj yuav xav teeb lub chaw nres nkoj/username/password/netscreen/sai hloov pauv kom haum koj ib puag ncig. #!/usr/bin/cia siab#Cia siab rau tsab ntawv rau thaub qab teeb tsa ntawm netscreen firewalls#Joe #Set qee qhov varsset timeout 60set tus neeg siv "hauv paus" teeb tus password "password" teeb chaw "2022" teeb netscreen "foo.bar.com" teeb tsa raws "/mnt/netapp/backups/foo.bar.com"set log" [timestamp -format%Y-%m-%d] -config.txt "teeb mailto" [email protected] "teeb mailsubject" Yuam kev: netscreen backup ua tsis tiav [timestamp -format%Y-%m-%d] "teeb tsa mailfail" "teeb tsa sai" foo->"

Kauj ruam 3: Txuas

Tom ntej hauv tsab ntawv peb yuav sim thiab txuas.send_user "NetScren Backup Script / n" xa_user "Txuas rau $ netscreen / n" spawn ssh $ user@$ netscreen -p $ chaw cia siab tias "" password: "{xa" $ password / r "cia siab tias {" $ tam sim "{xa_user" Txuas "}" Kev tso cai tsis pom zoo "{xa_user" Tus lej tsis raug, tawm "teeb tsa mailfail" Tus lej tsis raug, tawm "kaw" tas sij hawm {xa_user "Tsis tau rov qab sai sai" teeb tsa mailfail "Tsis teb tam sim "kaw}}}" Tsis muaj txoj hauv kev los host "{xa_user" Tsis tuaj yeem txuas rau $ netscreen / n "teeb tsa mailfail" Tsis tuaj yeem txuas rau $ netscreen / n "}" Lub npe lossis kev pabcuam tsis paub "{send_user" Tsis tuaj yeem txuas rau $ netscreen / n "teeb tsa mailfail" Tsis tuaj yeem txuas rau $ netscreen / n "} sijhawm tas {xa_user" Sijhawm txuas mus rau $ netscreen "teeb tsa mailfail" Sijhawm txuas mus rau $ netscreen "kaw}} yog {$ mailfail! =" "} { exec /bin /mail -s $ mailsubject $ mailto << "$ mailfail" tawm}

Kauj ruam 4: Tua Paging

Koj yuav tsum tau kaw paging - lossis qhov xav tau sai dua ntawm lub netscreen. #Disable qhov "ntau" promptsend "teeb tsa nplooj ntawv 0 / r" cia siab tias {"$ prompt" {send_user "\ nPaging Disabled / n"} default {xa "ScreenOS tsis suav nrog kev xaiv paging." N "teeb tsa mailfail" ScreenOS ua tsis tsuas yog kev xaiv paging. " kaw} timeout {send_user "ScreenOS tsis suav nrog kev xaiv paging / n" teeb tsa mailfail "ScreenOS tsis suav nrog kev xaiv paging." kaw}} yog {$ mailfail! = ""} {exec /bin /mail -s $ mailsubject $ mailto << "$ mailfail" exit}

Kauj ruam 5: Tau Config

Tam sim no peb yuav tau txais kev teeb tsa. send_user "Rub Tawm Kev teeb tsa / n" log_file $ basedir/$ logsend "tau teeb tsa / r" cia siab tias {"$ tam sim" {log_file xa_user "\ nConfiguration rub tawm / n"} timeout {send_user "\ nError thaum lub sijhawm teeb tsa rub tawm." teeb mailfail "Yuam kev thaum teeb tsa rub tawm." }} closeif {$ mailfail! = ""} {exec /bin /mail -s $ mailsubject $ mailto << "$ mailfail" tawm}

Kauj Ruam 6: Txheeb Xyuas seb Puas Yog Qhov Teeb Meem Yog Qhov Loj

Peb yuav paub txheeb xyuas seb qhov teeb tsa tsawg kawg 1k.set filesize [cov ntaub ntawv loj $ basedir/$ log] yog {$ filesize <= 1024} {send_user "Netscreen teeb tsa me me, thov tshawb xyuas / n" teeb tsa mailfail " Netscreen teeb tsa me me, thov tshawb xyuas / n "exec /bin /mail -s $ mailsubject $ mailto <<" $ mailfail "exit}

Kauj ruam 7: Ntxuav

Cia khiav me ntsis kev ntxuav kom tshem tawm cov teeb tsa laus dua ob lub lis piam. #Tshem tawm teeb tsa laus dua 2 lub lis piam sexec nrhiav $ basedir -name '*config.txt*' -mtime +14

Kauj Ruam 8: Txhua Tus Ua Ke

Muab tag nrho ua ke tam sim no. Nws tau txuas nrog ua cov ntawv sau. Nws yuav xa email ntawm txhua qhov ua tsis tiav. #!. "/mnt/netapp/backups/foo.bar.com"set log" [timestamp -format%Y-%m-%d] -config.txt "teeb mailto" [email protected] "teeb mailsubject" Yuam kev: netscreen backup ua tsis tiav [timestamp -format%Y-%m-%d] "teeb tsa mailfail" "teeb tsa sai" foo-> "xa_user" NetScren Backup Script / n "xa_user" Txuas rau $ netscreen / n "spawn ssh $ user@$ netscreen -p $ chaw nres nkoj cia siab tias {"password:" {xa "$ password / r" cia siab tias {"$ sai" {send_user "Txuas"} "" Kev tso cai tsis pom zoo "{send_user" password tsis raug, tawm "teeb mailfail" Tsis raug lo lus zais, tawm mus "kaw} sij hawm tas sij hawm {xa_user" Tsis muaj kev xa rov qab "teeb tsa mailfail" Tsis muaj kev xa rov qab sai "kaw}}}" Tsis muaj txoj hauv kev los tuav "{xa_user" Tsis tuaj yeem txuas rau $ netscreen / n "teeb tsa mailfail" Tsis tuaj yeem txuas rau $ netscreen / n "}" Lub npe lossis kev pabcuam tsis paub "{xa_user" Tsis tuaj yeem txuas rau $ netscreen / n "s et mailfail "Tsis tuaj yeem txuas rau $ netscreen / n"} sijhawm tas {xa_user "Sijhawm txuas mus rau $ netscreen" teeb tsa mailfail "Timeout txuas rau $ netscreen" kaw}} yog {$ mailfail! = ""} {exec /bin /mail -s $ mailsubject $ mailto << "$ mailfail" exit}#Tam sim no uas tau dhau mus, txuas ntxiv#Lov tes taw "ntau" promptsend "teeb tsa nplooj ntawv 0 / r" cia siab tias {"$ sai" {xa_user "\ nPaging Disabled / n "} default {xa" ScreenOS tsis suav nrog kev xaiv paging. / n "teeb tsa mailfail" ScreenOS tsis suav nrog kev xaiv paging. " kaw} timeout {send_user "ScreenOS tsis suav nrog kev xaiv paging / n" teeb tsa mailfail "ScreenOS tsis suav nrog kev xaiv paging." kaw}} yog {$ mailfail! = ""} {exec/bin/mail -s $ mailsubject $ mailto << "$ mailfail" exit} send_user "Downloading Configuration / n" log_file $ basedir/$ logsend "tau teeb tsa / r "cia siab tias {" $ tam sim "{log_file xa_user" / nConfiguration rub tawm / n "} timeout {send_user" / nError thaum lub sijhawm teeb tsa rub tawm. " teeb mailfail "Yuam kev thaum teeb tsa rub tawm." }} closeif {$ mailfail! = ""} {exec/bin/mail -s $ mailsubject $ mailto << "$ mailfail" exit} teeb tsa cov ntawv [file loj $ basedir/$ log] yog {$ filesize <= 1024} {xa_user "Netscreen teeb tsa me me, thov tshawb xyuas / n" teeb tsa mailfail "Netscreen teeb tsa me me, thov tshawb xyuas / n" exec /bin /mail -s $ mailsubject $ mailto << "$ mailfail" exit} #Remove config laus dua 2 lub lis piamsexec nrhiav $ basedir -name '*config.txt*' -mtime +14