AIX reset root password

1- Insert Media and boot the system.
2- When screen appear / when you hear beep press F1 key till you get SMS menu.
3- Select multiboot. IBM Database 2.1 Server for AIX
4- Select install from.
5- Select CD (If you are installing from CD ) select Install.
6- Select AIX version icon.
7- System console by pressing the F1 key and then press Enter.
8- Start Maintenance Mode for System Recovery by typing 3 and press Enter.
9- Select Access a Root Volume Group ignores the message.
10- Type 0 and press Enter.
11- Select Access this Volume Group and start a shell.
#passwd
Changing password for "root"
root's New password:
Enter the new password again:
# sync;sync;shutdown -Fr

Links

1- http://aixwithdipakwarade.blogspot.com/
2- http://www.sys-admin.net/
3- http://unixarticles.com/
4- http://www.rootvg.net/
5- http://www.torontoaix.com/

Disabling undesired TCP/IP services in AIX

Disabling undesired TCP/IP services in AIX

http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/TD100942

Viewing All Users and Tasks from HMC Command Line

Viewing All Users and Tasks from HMC Command Line
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/TD105422

Hardening AIX

Link : http://www.boran.com/security/sp/aix_hardening.html
Link : http://www.ibm.com/developerworks/aix/library/au-security_cmds/index.html
Link : https://www-304.ibm.com/support/docview.wss?origin=pSeriesTechnicalBulletin&rs=111&uid=isg3T1010741&context=SWG10

Increase AIX 5.3 password length ( TL must be 7 and upward )

Link 1 : https://www-304.ibm.com/support/docview.wss?origin=pSeriesTechnicalBulletin&rs=111&uid=isg3T1010741&context=SWG10

Link 2: https://www-304.ibm.com/support/docview.wss?origin=pSeriesTechnicalBulletin&rs=111&uid=isg3T1010741&context=SWG10

Password length and encryption algorithms
http://www.redbooks.ibm.com/redbooks/pdfs/sg247559.pdf

Configure ipfilter on Solaris10 as a host based firewall

1- Start by check ipfilter status if it's running you can go ahead and configure rules

-bash-3.00$ svcs -a|grep -i ipfil
online 10:29:37 svc:/network/ipfilter:default

if it's disabled enable it

#svcadm enable ipfilter

2- Display rules

#bash-3.00ipfstat -io
block out all
pass out quick on lo0 all
pass out quick on eri0 proto tcp/udp from eri0/32 to any port = domain with keep state
pass out quick on eri0 proto tcp from eri0/32 to any port = http keep state
pass out quick on eri0 proto icmp from 192.168.1.0/24 to 192.168.1.0/24
block in all
pass in quick on lo0 all
pass in quick on eri0 proto icmp from 192.168.1.0/24 to 192.168.1.0/24
pass in quick on eri0 proto tcp from any to eri0/32 port = http keep state
pass in quick on eri0 proto tcp/udp from any to eri0/32 port = domain with keep state

3- Edit rules
under

/etc/ipf/ipf.conf

#vi /etc/ipf/ipf.conf

#
# ipf.conf
#
# IP Filter rules to be loaded during startup
#
# See ipf(4) manpage for more information on
# IP Filter rules syntax.
####
set intercept_loopback true;
block in all
block out all
### inbound traffic ###
pass in quick on lo0 all
pass in quick on eri0 proto icmp from 192.168.1.0/24 to 192.168.1.0/24
pass in quick on eri0 proto tcp from any to eri0/32 port = http keep state
pass in quick on eri0 proto tcp/udp from any to eri0/32 port = domain keep state

pass out quick on lo0 all
pass out quick on eri0 proto tcp/udp from eri0/32 to any port = 53 keep state
pass out quick on eri0 proto tcp from eri0/32 to any port = http keep state
pass out quick on eri0 proto icmp from 192.168.1.0/24 to 192.168.1.0/24