Heartbleed (CVE-2014-0160, CVE-2014-0346) - Affected Products From Major Vendors

Consolidated list of responses from Major Vendors

VMware - http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2076225

Citrix - http://support.citrix.com/article/CTX140605

Red Hat - https://access.redhat.com/site/solutions/781793

I will add more as and when I find the links/KB.

Finding Glue Records For A Domain

Glue records are very important for DNS infra. Here is how to check glue records for a DNS domain.

Use Dig  - http://www.adminsehow.com/2010/05/how-to-check-domain-ns-glue-records-using-dig/

(Or)

Be a lazy bitch like me :P  - https://mebsd.com/glue#disqus_thread

Hope it useful for someone

Sophos UTM320 To IPsec With AWS VPC

Here are some pointers using Sophos UTM320 firewall to set up IPsec VPN to AWS VPC.

1) Select 'Dynamic Routing'  when you create customer gateway.  Otherwise,  you won't be able to get configuration file from AWS for your UTM. AWS dynamic routing use BGP.
2) If you firewall WAN interface is not directly facing to Internet,  you need to modify interface IP correctly in downloaded configuration file before importing. 
3) If you can't get connection even after importing configuration and VPN shows 'up' status, check BGP setting in your UTM.  In my case, it simply failed to import BGP portion from configuration file. I had to configure BGP in UTM manually. 
4) Of course,  do add firewall rule to allow traffic between your local network and VPC. 

You may add more to the list....  :-D

RHCS Cluster Fencing With vSphere/vCenter 5.5

Red Hat's latest KB list only up to vSphere 5.1 in term of cluster fencing support. (as of this blog was written)

As customer's requirement,  I have tested cluster fencing on RHEL6.3 with vSphere 5.5 environment.

Guess what!

'fence_vmware_soap' works perfectly with vSphere 5.5. 

I have inform people from Red Hat so that they can speed up the process of adding vSphere5.5 into support matrix.

Happy Clustering!

Best SSH Client On Windows OS

One of my customers suggested me to try using MobaXterm when he saw me using Putty,    WinSCP and Xming server on Windows OS.  I gave it a try and have to admit that MobaXterm seems to be  the best utility for remote administration. 

Why? Here are some highlighted features that makes my life way easier than before. 

- Integrated sftp client and Xserver for SSH
- Tabbed terminal Windows
- Multi-exec mode (similar to clustered SSH)
- Credential saving
- Easier & neater copy & paste in terminal
- All-in-one (ssh/telnet/rdp/vnc/serial console and etc...)

Try out by yourself for complete list of features.  You can download it free from below site. 

http://mobaxterm.mobatek.net

Hope it useful for someone out there....

To Delete Bank Account Info From AWS Account

Creating AWS account requires you to fill in a valid bank account. Normally I use my own bank account. After testing is done, I will not used that AWS account any more and delete my bank account from unused account.

https://www.amazon.com/gp/css/account/cards/view.html

Hope it useful for someone.