Mailing-List: contact user-help@vcl.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@vcl.apache.org
Received-SPF: neutral (nike.apache.org: local policy)
MIME-Version: 1.0
Reply-To: aaron_peeler@ncsu.edu
In-Reply-To: 
 <CALDuW=n1MEHqi+HAi3c+rASFWTS=eJSjAB_Jk0VYhUiWpGtgbw@mail.gmail.com>
References: <CC46DA02.12218%evquir@fiu.edu>
	<CC47F63D.1C10F%evquir@fiu.edu>
	<CALDuW=n1MEHqi+HAi3c+rASFWTS=eJSjAB_Jk0VYhUiWpGtgbw@mail.gmail.com>
Date: Fri, 10 Aug 2012 09:50:35 -0400
Message-ID: 
 <CALDuW=kfZSqvzqD50xm1jnMBmd0OXRJPVNBOSHxcjVHTa4nU0g@mail.gmail.com>
Subject: Re: Capturing an unpatched Windows XP image
From: Aaron Peeler <fapeeler@ncsu.edu>
To: user@vcl.apache.org
Content-Type: text/plain; charset=ISO-8859-1

Resending to the user mailing list. I forgot to reply-all

-Aaron

On Thu, Aug 9, 2012 at 8:24 AM, Aaron Peeler <fapeeler@ncsu.edu> wrote:
> Hi Al,
>
> This is possible and not really a fix, but local custom change to
> remove the firewall dependency. You would need to modify the code that
> deals with the firewall and make it conditional instead of failing it.
>
> if( has firewall ) make use of it
> else ( ignore) and proceed with the reservation.
>
> There are a couple of locations in the OS modules that would need to be updated.
> /usr/local/vcl/lib/VCL/Module/OS/*
>
> I'm not sure exactly of the routines that depend on the firewall, but
> it should be pretty easy to find. in searching for netsh and iptables
> commands.
>
> This would likely be a local custom change that you'd have to keep
> maintained if only using for windows. If the group felt this was a
> feature that could be useful for long-term use. Then we would need to
> create a jira feature request.
>
> -Aaron
>
>
> On Wed, Aug 8, 2012 at 10:58 AM, Evelio Quiros <evquir@fiu.edu> wrote:
>> Can anyone comment on this please ?
>> Thanks,
>> Al Q
>>
>>
>> On 8/7/12 2:44 PM, "Evelio Quiros" <evquir@fiu.edu> wrote:
>>
>>>Sorry, used the wrong subject line before:
>>>
>>>>
>>>>Hello group,
>>>>
>>>>I may have mentioned this before, so bear with me.
>>>>
>>>>I would like to deploy an unpatched Windows XP OS for a hacking class.
>>>>This is used as a target to launch several well-known exploits by
>>>>students.
>>>>
>>>>The problem is when I try to configure Cygwin, I get a failure in setting
>>>>the Windows Firewall.
>>>>
>>>>That is because there is no Windows Firewall in this early version of XP.
>>>>
>>>>Is there a known fix for this ? Can I 'safely' (relatively) comment out
>>>>the sections of the config file that deal with the Firewall ?
>>>>
>>>>I know this is an unsafe system, but that's the point. We need this to
>>>>show students the importance of updating their OS and protecting
>>>>themselves from attack.
>>>>
>>>>Any idea how I can capture this unpatched image ?
>>>>
>>>>Thanks,
>>>>Al Quiros
>>>>Florida International University
>>>>
>>>
>>
>
>
>
> --
> Aaron Peeler
> Program Manager
> Virtual Computing Lab
> NC State University
>
> All electronic mail messages in connection with State business which
> are sent to or received by this account are subject to the NC Public
> Records Law and may be disclosed to third parties.


-- 
Aaron Peeler
Program Manager
Virtual Computing Lab
NC State University

All electronic mail messages in connection with State business which
are sent to or received by this account are subject to the NC Public
Records Law and may be disclosed to third parties.