Hi all, the following is completely baffling me. We currently have a gentoo box which acts as our LAMP, DNS, DHCP server. This is assigned a static IP on the network. This server is connected directly to the internet via a BT BusinessHub Router. The server is also connected to a patch panel/switch port which connects the remaining office (around 10 PC's) to the server.
Everything has been plain sailing until the other day when the server was restarted. For some reason now only portions of network accessibility is available depending on which ethernet device was last restarted. Restarting net.eth0 allows the office server to cURL, ping, etc but stops all networked PC's from accessing the internet. Then restarting net.eth1 restores all internet to the network but stops the server from curling, pinging, etc again.
However, even when the server can't ping, curl, etc, I can still remote SSH and remote MySQL connect from the server command line to other external servers that we own.
Here's my route map (router is 192.168.1.254):
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.1.254 0.0.0.0 UG 0 0 0 eth1
Here's my /etc/conf.d/net:
iface_eth0="192.168.1.99 broadcast 192.168.1.255 netmask 255.255.255.0"
iface_eth1="dhcp"
None of the above have ever been changed however. Things have just ceased to operate correctly, which makes me think it's a freshly added Iptables rule. Here's the Iptables Filter table:
Chain INPUT (policy ACCEPT)
target prot opt source destination
DROP tcp -- ##.##.##.## anywhere tcp dpt:ssh
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp dpt:2199
ACCEPT tcp -- anywhere anywhere tcp dpt:3199
ACCEPT tcp -- ##.###.###.## anywhere tcp dpt:http
ACCEPT tcp -- ###.###.##.## anywhere tcp dpt:2199
ACCEPT tcp -- ##.###.###.### anywhere tcp dpt:http
ACCEPT tcp -- ##.###.##.## anywhere tcp dpt:http
ACCEPT tcp -- ##.###.###.### anywhere tcp dpt:3128
ACCEPT udp -- ##.###.###.### anywhere udp dpt:3128
ACCEPT tcp -- ##.###.###.### anywhere tcp dpt:http
ACCEPT tcp -- ##.###.###.### anywhere tcp dpt:https
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere ##.###.###.##
DROP all -- anywhere ##.###.###.##
ACCEPT all -- anywhere anywhere state NEW,ESTABLISHED
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:2199
ACCEPT udp -- anywhere anywhere udp spt:4817
ACCEPT udp -- anywhere anywhere udp spt:4819
ACCEPT udp -- anywhere anywhere udp spt:3199
Help gratefully appreciated.
I worked on a proof on concept a while ago.... whereby I managed to get VNC going in full "unattended" mode...
I.e. The VNC Server dials into the viewer... which is running in Listening mode. The same concept of how single click works, but without the user interaction.
I cant seem to locate my source files for this concept I worked on... although I have found my shortcut that worked on the Viewer side to listen.
"C:\Program Files\UltraVNC\vncviewer.exe" -listen 5007 /noauto /256colors
I can not however remember/locate my demo of what the server is doing.... how to configure it. If I remember correctly, the server was also started with command line params that "dialed" into a remote IP/port, that the viewer is listening on.
Any ideas?
Thanks
I'm aware of how to use VNC to share screens or grant remote control of your machine over the internet by using VNC or one of the web-based "go to my pc" type services.
If two computers are connected to a router (i.e. standard home network), is there an easier way of viewing and controlling one computer from the other?
I'd like to avoid going outside the LAN, onto the internet, then back in if possible.
Both machines are Windows XP, but I'm not looking for Remote Desktop by the way.
I want to provide a remote employee remote desktop into a PC in the office and am trying to decide between the following two options:
Use Microsoft VPN to get him a local network IP. Use RDP to connect to host machine.
Use local SSH tunneling for VPN port. Connect RDP to localhost:portNumber
Is either option more secure than the other? Will either option perform better than the other? Are there any better options I've missed or considerations I should make?
Background:
I'm trying to stop and start IIS on a windows 7 build box, in order to run acceptance tests. But from what I have read, most of the remote web management features have been disabled by Microsoft in a retarted attempt to sell more Windows Server 2008 licenses. Still for some reason they didn't disable the least user-friendly ways of controlling IIS remotely, but they are all a total pain.
What I can do easily is remotely stop and start the WWW service from a msbuild task. But I want to be sure that this also restarts the app pool, so that when I copy in new web files the web server there will be serving the most recent version of the website.
Question:
If I restart the W3SVC windows service, will that also restart the app pool?
The LiNUX RHEL5 Workstation Z400 stop answering to ping and it was no more possible to connect to it, even on the local console; The workstation was not reachable in anay way.
The only method I found is to restart the station (switch off, switch on) and after that everything works fine
Have somebody an idea on what can have happened
I don't see explanation of this in the /var/log/messages
Some more informations:
Placement/routing of a FPGA was running
I'm battling against this darn issue this morning. We have the following setup:
Big Hyper-V machine hosting the servers as VM's
VM for CAS: WEB.XXX.local
VM for Mailbox: EXC.XXX.local
Servers are running Server 2008 R2 with Exchange 2010 SP1
Clients are all running Windows 7 Pro x64 with Outlook 2010 x64
The problem we're having is that nobody is able to see any emails received today (16th of October), but they are able to send externally. When I reply back to the email received externally, I don't get an NDR, yet the user cannot see my email.
This is what I found and tried thus far:
If we create a subfolder in Outlook 2010 and move any email from the inbox into that folder, changes will be immediately reflected in OWA
We've been sending test emails to other users internaly and external email addresses and the sent items folder contains all those tests, synced properly to OWA as well
Have tried crating a new profile, new emails are still missing
Tried disabling Cache Mode, still no luck
Also disabled "Download shared folders", still no luck
Tried to setup a brand new Exchange mailbox and configured it on a VM that never had Outlook on it, still the same issue
Tried restarting Exchange services on both CAS and Mailbox servers, no luck
Tried rebooting both CAS and Mailbox servers, still no luck
Performed a Mailbox Discovery on my admin account, emails from today are being found in the Discovery results, so the stuff is there, just not updating the user inboxes
Any idea about what this hellish thing can be? I've done everything I can think of and also everything I could find out there.
Let me know if you need any more details and thanks for reading this!
I've found that Aircrack-ng is very powerful tool for wireless hacking. But it is a bit complicated to use (even with its documentation). Also, when I run the GUI, it needs to add a "capture file". What is that?
Additionally, it says Windows version is weaker than the Linux version. So how can I get it to run like a Linux version?
What are some step-by-step instructions (to use on Windows XP)?
Router (primary AP) is a WRVS4400N, WAP (signal booster) is a WAP4410N.
Problem: User is physically located within ten feet of WAP (200 feet from main wireless router). Signal is at 5 bars as user connects to wireless network. Within seconds, signal is at or below two bars and connection is poor.
Background: Trying to solve problem of weak wireless signal in back offices. Desired result is for client laptops to automatically switch to the stronger signal.
WAP is connected to network via Ethernet cable.
WAP is set to AP mode (instead of Wireless Repeater mode)
WAP does appear to boost signal. Using Windows 7 sys tray Connect To A Network applet, can observe signal boost as laptop approaches the WAP.
Above-described problem happens to users located near or beyond the WAP. It does not happen to users in close proximity to the router.
Secondary Question: If using WAP in AP Mode, do WAP and Router (primary AP) need to be on the same channel?
On a networked computer, I have a file which is coming up as read-only because someone else has it open. This is not true. This is a file stored locally on the computer and it is not being used by anyone else.
I can login to the same computer using a different user, and the file opens up fine. I just get the issue with a particular user account.
Other than deleting theses account/profile and creating it again, how can I unlock this file?
Double clicking on this file gives me a message saying
The file is locked for editing by another user, or the file (or the folder in which it is located,) is marked as read-only, or you specified that you wanted to open this file read-only.
I don't think the folder is locked, because I can use other files in that folder fine, it's just 1 particular file which is causing this issue. I know that only 1 user is using this file as the file is on his c: and the same file works fine if he logs off to allow another user to log in.
Consider this scenario:
Please don't say that it would be better if I created a Domain network;
Just consider this scenario.
10 PCs are all interconnected via a switch to a workgroup network named WORKGROUP;
PCs specs(all are the same): Windows XP SP2 en (build:2600.xpsp_sp2_rtm.040803-2158)
I have full physical control over my own PC (one of those 10 PCs) and what I know about the other ones:
IPs of all 10 PCs.
Administrator account name of all 10 PCs.
Administrator account password of all 10 PCs.
How can I execute an application on the other PCs???(without touching them)
How can modify their registry settings???(without touching them)
On a friends laptop following some viruses infestations there is a problem in starting the Windows firewall. The error is:
Could not start the Windows
Firewall/Internet Connection
Sharing(ICS) service on Local
Computer.
Error 2: The system cannot find the
file specified
When attempting to turn on automatic updates in the security centre, the message is:
We're sorry. The Security Center could
not change your Automatic Updates
settings. To try changing these
settings yourself, go to System in
Control Panel. On the Automtic Updates
tab, select Automatic (recommended),
and then click OK.
All the options under "Automatic Updates" are greyed out.
I've tried the suggestions below and many others:
http://windowsxp.mvps.org/sharedaccess.htm
http://support.Microsoft.com/kb/892199
http://windowsxp.mvps.org/repairwmi.htm
I can't do a repair install because the installer doesn't detect existing versions. It's XP pro service pack 3.
We have a Startech KVM over IP model SV841HDI and it was stuck pointing a port where the machine has been removed. We ended up having to physically plug something into that port in order to switch ports again, meaning that if someone in support accidentally switches to an empty port, we need to have a documented solution for making it useable again.
The unit is old, no longer under warranty, firmware updates for it are no longer available (interestingly it runs a powerPC version of busybox). Since it does work well except for this one catch, we would like to avoid replacing it.
Reading the manual, you have a several recommended methods. I tried them. Hit the left CTRL key a few times (as well as all the other popular KVM keys I could think of). The VNC GUI offers lots of buttons - none of them switch away from a dead port.
The question is: how do I switch away from a dead port on this particular KVM remotely?
Here's the current configuration in our organization (which I believe is incorrect):
We have a number of Cisco 1500 series AP's (22 in total), that are mounted outdoors to provide seamless WiFi coverage over a large area. Each AP however has its own physical ethernet connection back to the WLC (All the AP's are marked as Root AP's). They are all broadcasting the same SSID. We have tried to stagger the channel selection but because there are only three non-overlapping channels to choose from, and in some areas the density of AP's is quite high, there is multiple places of channel interference. With this configuration we experience 100-150 disconnects from clients every day. (Our clients are mobile so they move throughout the coverage area constantly).
My idea is to switch the AP's to the same channel thereby forming a wireless mesh, use the built in functionality of the 1500 series to use 802.11a as the backhaul, designate one or two AP's as root AP's and wire them back to the WLC. Thereby forming a WiFi mesh, which if I'm not mistaken is the point of the 1500 series in the first place!
I am however completely new at WiFi networks and wondering if I am simply mistaken in what I believe my proposed changes will enable, or if there is a better way to tackle the WiFi topology.
I'm trying to connect from an Ubuntu server to a RHEL6 server using mysql. I've tried telneting into the server as well as trying to connect with mysql. I've tried commenting out the bind-address but didn't have any success with that either. I don't get an error code or anything with telnet. It just fails after a minute or so. With mysql, I get this error code ERROR 2003 (HY000): Can't connect to MySQL server on 'SERVER_IP' (111). "SERVER_IP" is of course a placeholder where actual error gives that actual IP.
I've included my my.cnf as well as well as my iptables from the destination server.
On Destination Server...
my.cnf:
[mysqld]
bind-address=0.0.0.0
tmp_table_size=512M
max_heap_table_size=512M
sort_buffer_size=32M
read_buffer_size=128K
read_rnd_buffer_size=256K
table_cache=2048
key_buffer_size=512M
thread_cache_size=50
query_cache_type=1
query_cache_size=256M
query_cache_limit=24M
#query_alloc_block_size=128
#query_cache_min_res_unit=128
innodb_log_buffer_size=16M
innodb_flush_log_at_trx_commit=2
innodb_file_per_table
innodb_log_files_in_group=2
innodb_buffer_pool_size=32G
innodb_log_file_size=512M
innodb_additional_mem_pool_size=20M
join_buffer_size=128K
max_allowed_packet=100M
max_connections=256
wait_timeout=28800
interactive_timeout=3600
# modify isolation method for faster inserting.
# Do not uncomment the line below unless you understand what this does.
# transaction-isolation = READ-COMMITTED
# do not reverse lookup clients
skip-name-resolve
#long_query_time=6
#log_slow_queries=/var/log/mysqld-slow.log
#log_queries_not_using_indexes=On
#log_slow_admin_statements=On
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
user=mysql
# Disabling symbolic-links is recommended to prevent assorted security risks
symbolic-links=0
#Added by Magento ECG
long_query_time=1
slow_query_log
[mysqld_safe]
log-error=/var/log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
iptables:
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 225 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp -i eth1 --dport 11211 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
sudo netstat -ntpl
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:11211 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:2123 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:1581 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN -
tcp 0 0 :::11211 :::* LISTEN -
tcp 0 0 :::22 :::* LISTEN -
tcp 0 0 :::225 :::* LISTEN -
I have an excel sheet with information about each employee. I keep getting new updated spreadsheet every month. I have to create a database managing cases related to the employees. I have a database and the bounded form already created for the cases which also contain emp info fields. What I am trying to do is to only type in the emp id in the form and want the form to look up in the spreadsheet(which can be a table in the cases db) and populate other fields in the form and that information can go into the cases db. Can this be done?
I have a Netgear N300 router that has DynDNS.org as a preset DDNS option. After setting it up it (unsurprisingly) sent traffic directly to my router. I'm essentially using this to connect remotely to my home (virtual) machine/s.
From what I've read, it seems like I need to set up port forwarding. I tried forwarding "all" inbound traffic to a specific IP but that just didn't work.
What am I doing wrong?
Also, I just noticed I get this error after applying the settings:
"The specified port(s) are being used by other configurations. Please
check your configurations of Remote Management, Port forwarding, Port
Triggering, UPnP Port Mapping table, RIP, and Internet connection
type"
My own console .net application stuck in a "ghost" stage. It just shows a window that i can't close. It doesn't show up as a process in the task manager.
when i try to "find windows process" using Process Explorer (from sysinternals) it says there is no process that owns that window or something like that.
The problem is that it doesn't allow me to logout or reboot the server (remotely) because logoff process keeps waiting on that window to close.
shutdown /r /f also is stuck waiting for it.
I can probably have somebody go an reboot the server but i'd like to know if there is a way to close that process, close that session or force logout remotely.
This is windows server 2003, but i had the same issue on XP just a few days ago.
I have an Exchange 2010 UR3 deployment that I need to customize the OWA logon page for. I've created a new LGNTOPL.GIF file to replace the existing one in the folder:
“C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Owa\14.3.158.1\themes\resources”
When I bring up OWA, I still get the original “Outlook Web App” logo. I’ve searched and found a couple of other instances of LGNTOPL.GIF in the directories:
“C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Owa\14.3.123.3\themes\resources”
“C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Owa\14.3.146.0\themes\resources”
“C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Owa\Current\themes\resources”
I’ve replaced the LGNTOPL.GIF file in each of the above directories but got the same results. I’ve tried clearing my browser cache and even using multiple browsers from multiple PC’s but the same results. I’ve even tried making my GIF file the same pixel size as the original LGNTOPL.GIF logo but still the same results. I’ve tried restarting IIS on the CAS server and restarting the server but same results.
Has something changed with Exchange 2010 UR3 when trying to customize OWA? I don't see anything documented about any change to OWA customization.
Thanks
i have about 50 labels that are each just barely big enough to fit the letter x in them. the labels are on a report. i need to align all the labels very precisely.
is there an easier way to do this than trusting my eyes?
I have the following in my OpenLDAP configuration. Using the latest version OpenLDAP on Centos 5.3. Installed using yum.
From my /etc/openldap/slapd.conf
database bdb
suffix "dc=company,dc=com"
rootdn "cn=Manager,dc=company,dc=com"
From my /etc/openldap/ldap.conf
BASE dc=company,dc=com
I have successfully added an entry with ldapadd and retrieved it with ldapsearch from a local bash shell on the box.
Now I am trying to get a Graphical Editor to connect to this server remotely so I can enter people from my laptop. But I am having no luck. I tried JXplorer, and it connects with Anonymous bind without me having to specify a BaseDN but I can't edit anything that way.
If I try and give it a user name and password, using Manager and my rootpw I have in clear text just for testing, every GUI Client on my remote laptop complains about my BaseDN not being the correct format when I enter dc=company,dc=com and I tried cn=Manager,dc=company,dc=com.
Error opening connection:
[LDAP: error code 34 - invalid DN]
I have tried multiple clients and all of them connect as anonymous, none let me connect authenticated where I can actually create or edit anything.
I am using Manager as my username and the password from rootpw, is that correct?
Hi
I tried to do "Split a Database" and after I clicked on the "Split" button, here is what I got:
"The database engine couldn't lock the table, because it is already in use by another person or process"
Any idea?
Thanks
additional question:
is it possible to split your database many times? first i'm trying it at home and the following day i would like to try it at the office if it works. i already tried the split and if i do it tomorrow at the office would that be a problem?
Thanks
I am attempting to develop an Auditing application.
This audit application will be employed on windows networks.
The Audit will need to discover Hardware and software details of all machines attached to the network (including Printers)
I do not want to have to install this application on each workstation.
The audit app. needs to discover all the ip addresses of all the networked workstations.
I have been prototyping this app for the last couple of months and have decided to try a new tack
Is this possible?
a). You have a windows network, min Windows XP sp3 and upwards
b). Maximum of 100 Networked machines (if that matters)
c). I need to remotely reboot each WINDOWS machine in turn on the entire network and get it to startup using UNIX, say knoppix for example!
d). however the knoppix live cd is only available from one of the networked machines
Questions... Morphology? Longevity? Incept dates?
Cheers
DD
I have set-up Postfix with Spamassassin on Ubuntu 12.04.5. Fundamental usage of Postfix is to (pipe) trigger a PHP file. Till here I've arrived successfully.
Now, to avoid unneccessary load on the server, and also to avoid unwanted mails triggering my PHP script, I want to configure Postfix to allow mails only from [email protected] and reject everything else.
How to achieve this absolute lock-down on mail server unless mail comes from [email protected]?