Checkpoint: Object Filler and Object Dumper (ofiller)

This article offers a download of Martin Hoz’s (Checkpoint SE) Ofiller tool and describes basic usage.

The package software can be downloaded here:

ofiller_v2.4.tgz

There is full documentation in the package but a quick look at page 53 of the manual yields the following:

odumper -f file [-p file] -o file [-d] [-html] [-v]
-f specifies the path to the objects (Objects_5_0.C or objects.C) file you want to process
-p specifies the path to the rulebases (rulebases_5_0.fws) file you want to process - Optional
-o specified the path to the output formatted file you want to have
-d tells the program to also print the default objects - Optional
-html formats the output to HTML (instead of default CSV format) - Optional
file is a valid filename - such as output.txt, output.html or objects.C
Required parameters: -f and -o

** Important ** – Run this on copies of the files and not against the files on the live firewall!

  • To dump objects only:

odumper -f copy_of_Objects_5_0.C -o my_objects.csv

  • To dump rules only:

odumper -p Copy_of_rulebases_5_0.fws -o my_rules.csv

  • To dump both rules and objects to the same file:

odumper -f copy_of_Objects_5_0.C -p Copy_of_rulebases_5_0.fws -o my_objects_and_rules.csv

 

Note: If you are dumping these to re-import on another management centre then dump rules and objects individually as per the first two examples.

Hardening WordPress: Pre-Install – Don’t Use the Default wp_ Database Table Prefix

The default table prefix for a wordpress install is ‘wp_’ – make it different! Any attacker attempting to access database tables will use the default naming convention first – don’t make it easier for them!

Changing the table prefix on an existing site is quite involved so employ this from the outsetwhen you’re running through the setup.

Should you wish to do this to an existing installation, the table_prefix variable can be found as shown below in the wpconfig.php file:

Exit mobile version
%%footer%%