Florian Heigl FlorianHeigl

CheckMk Web Auth Fail2ban Config

Fail2ban Config for CheckMk Authentication over Web UI

This is a example fail2ban config for failed login attempts in the CheckMK Web UI Login Form.

Setup

Check for log files

CheckMK logs failed login attempts for each site separately at ~/var/log/web.log (relative path from the site's user).

How to update latest packages on Imagination Creator CI20 Debian 8 (jessie)

Imagination Creator CI20 board: A MIPS32 architecture evaluation board.

Creator CI20 quick start guide: PDF
eLinux: Creator CI20 board wiki

install vQFX10k on KVM/QEMU for Testing or QA

This vQFX Platform is supposed to be used with vagrant and ships with a few nice fabrics that spin up on the go. But there's a few problems with that - which may not be instantly obvious if you plan on using it for testing or QA in your NetOps department:

This Vagrant configuration relies and only supports virtualization via Virtualbox
- so far no plans have been announced to switch from Virtualbox to another out of the box solution, so you'll have to hack this up a bit. libvirt, kvm/qemu makes this relatively simple, but you have to get familiar with their tools (again).
vQFX comes in two "VMs": a Routing Engine (RE) and a Packet Forwarding Engine (PFE)

this is due to the way the hardware is actually set-up and working on a real bare metal switch or router (same story for vMX). ASICs are supplied in the form of shim kernel modules that make it possible to unit-test more advanced features or do functional testing before deploying on real (ide

Check MK Scripts

Add host to checkmk server:

Script automatically adds the computer to the hostlist on the checkmk server. Works on Windows 10, 7(with KB3191566 update).

Create .ps1 file with following code.
Change server and client(optional) variables.
Run

NetBox API (REST, GraphQL) with Powershell

REST API

(Invoke-RestMethod -Headers @{'Authorization'='Token 0123456789abcdef0123456789abcdef01234567'} -Uri "https://netbox.my.org/api/circuits/circuits/?site_id=123").results
(Invoke-RestMethod -Headers @{'Authorization'='Token 0123456789abcdef0123456789abcdef01234567'} -Uri "https://netbox.my.org/api/dcim/sites/?region=amer&tenant=tenantname").results | Select-Object name,status
(Invoke-RestMethod -Headers @{'Authorization'='Token 0123456789abcdef0123456789abcdef01234567'} -Uri "https://netbox.my.org/api/ipam/prefixes/?tenant=tenantname").results | Select-Object prefix,site
(Invoke-RestMethod -Headers @{'Authorization'='Token 0123456789abcdef0123456789abcdef01234567'} -Uri "https://netbox.my.org/api/dcim/devices/?tenant=tenantname").results | Select-Object name,status

	// SPDX-License-Identifier: MIT

	/*
	* Copyright © 2023 rusty-snake
	*
	* Permission is hereby granted, free of charge, to any person obtaining a copy
	* of this software and associated documentation files (the "Software"), to deal
	* in the Software without restriction, including without limitation the rights
	* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	* copies of the Software, and to permit persons to whom the Software is

	#!/usr/bin/env python3
	# Scrapes pfSense DHCP Leases into List of (IP, MAC, Hostname, Description) format.
	# Change URL/Username/Password below ... pip install lxml ... then you are all set.
	#
	# Modified 6/23/2019 (FryGuy)
	# Edits: Aligned IP/MAC/Hostname into struct accounting for blank lines
	# Minor: Cleaned up spacing, created global url/user/password vars, removed write to file
	# Original Code/Inspiration: https://gist.github.com/pletch/037a4a01c95688fff65752379534455f
	# Modified 03/14/2023 (schossel)
	# Added Field Description and changed CSRF to work with OPNsense

	- name: "Roles."
	hosts: localhost
	gather_facts: true
	vars_files:
	- ./vars/config.yml
	tasks:

	- name: "Run server role."
	ansible.builtin.import_role:
	name: tribe29.checkmk.server

	---
	- name: Add required dependencies.
	apt:
	name:
	- apt-transport-https
	- gnupg2
	state: present

	- name: Add Elasticsearch apt key.
	apt_key:

	fs.com type switches, model S5850 run regular linux.

	Secret command "start shell" can be used to spawn regular shell on switch for debugging.
	Password for this: !@#

	Example:

	$ show version
	FSOS Software, S5850, Version 7.2.1
	Copyright (C) 2020 by FS.COM. All rights reserved.