Great Circle Associates Firewalls
(June 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: FW-1 and IP Forwarding on NT Box
From: Ryan Russell/SYBASE <Ryan . Russell @ sybase . com>
Date: 5 Jun 97 19:24:08 EDT
To: "Steve Rudolph" <srudolph @ datacommcorp . com>
Cc: "David Harvey-George" <david @ threewiz . demon . co . uk>, firewalls <firewalls @ GreatCircle . COM>

Retrieving and/or resetting the Cisco password is fairly
trivial if there is a console port on that card.. haven't used the
card version, but I've done it on real 2500's many times.
Search the Cisco web site for "password recovery."

If they've turned on password encryption, you can either change
the password, or do a web search for Cisco password crackers,
I've seen a couple.  Haven't tried those.

     Ryan

---------- Previous Message ----------
To: david, firewalls
cc: 
From: srudolph @ datacommcorp.com ("Steve Rudolph") @ smtp
Date: 06/05/97 08:26:39 AM
Subject: Re: FW-1 and IP Forwarding on NT Box

David and group....

I have already got this running.  Thank you to all who responed to my
inquiry.  I have learned alot just from the replys.  I left my brain in the
shower that day.....  I forgot to set the Default Gateway on EACH machine
on both networks to the NIC in the router on that machines network.  

Now I just need to krak the router password for a Cisco AccessPro 2500 PC
card.  This piece of equipment came in a firewall disguise call MCI
Webmaker.  This was a combination Port filter router and proxy server.  As
it turns out Intel programed the software (proxy), and configured the
router.  Vanstar installed the os (NT), and none of the above are able to
get me the router password.  Right now my DNS is being partially blocked
because of this (I know very little about DNS, any good books?  I am using
MS DNS-OK for now (:o)  ).  I contacted Cisco and the only way to break the
password is to send a break to the com port (remember it is a pc card) in
terminal mode within 60 seconds.  And then begin the  recovery sequence. 
Kind of hard to do with NT or 95.  I can't seem to find a copy of Dos 5.0
or an old hard drive anywhere with a dos based terminal program.    Ths
whole situation is messed.  My employer wants to wait to use the router and
not buy a new one.  It is holding up US$40K in billing though.  Can anyone
help, or if you have a similar problem let me know and I will get you the
correct person to call.

Thanks again

Steve Rudoph
http://www.datacommcorp.com
srudolph @
 datacommcorp .
 com

http://www.rude-dog.com
http://www.rust.net/~stever
stever @
 rust .
 net

----------
> From: David Harvey-George <david @
 threewiz .
 demon .
 co .
 uk>
> To: Steve Rudolph <srudolph @
 datacommcorp .
 com>; firewalls @
 greatcircle .
 com
> Subject: Re: FW-1 and IP Forwarding on NT Box
> Date: Wednesday, June 04, 1997 7:14 PM
> 
> 
> > I followed all of microsoft's reccomendations.
> 
> Possibly a bad move.
> 
> > Two nic cards a and b
> 
> Sounds like the start of a stand-up comedy routine
> 
> > 
> > A is set with default gateway of b
> > and b is set with gateway of a
> 
> it is!
> 
> Okay, look, the system with the two cards knows how to route to each
> network.  All you've gotta do is set up the default gateway for
> workstations on network A (NIC A) and the default gateway for
workstations
> on network B (NIC B).  Don't touch anything on the router if your network
> really is this simple (e.g. no other routes).  If you have other routes
> then use the route command directly.
> 
> > Workstations can ping a and b
> > Workstations cannot ping network b
> > Ip forwarding is enabled and my route print matches exactly the format
of
> > microsofts reccomendations.
> > 
> > I really need to get this up and running.  I would get you the route
> print,
> > but I cannot get the addresses to copy onto the clip board..duh :)
> 
> Yeah, I think you better send us the output from netstat on both the
> 'router' and the workstations.
> 
> Run netstat -rn from a DoZ window, click on the little Doz icon at the
left
> of the title bar, select edit/mark, mark the stuff you want to send, copy
> it and paste it.
> 
> David





Indexed By Date Previous: Does Winframe need a firewall?
From: Ken Gunther <kgunther @ nassau . cv . net>
Next: FW: [FW1] Out of Band Data Attack against NT-Hosts
From: rabbi @ www . valuu . net (Rabbi Haim Cassorla)
Indexed By Thread Previous: Re: FW-1 and IP Forwarding on NT Box
From: "Steve Rudolph" <srudolph @ datacommcorp . com>
Next: Re: FW-1 and IP Forwarding on NT Box
From: "Steve Rudolph" <srudolph @ datacommcorp . com>

Google
 
Search Internet Search www.greatcircle.com