I have openSUSE 11.3 installed. I'm using the openSUSE firewall configuration mechanism (/etc/sysconfig/SuSEfirewall2). I have a http server application running on port 8080. I want the http service to be accessible using port 80. I created a redirect rule usign:
FW_REDIRECT="0/0,0/0,tcp,80,8080"
This works fine for every request coming from external. But it doesn't for local requests. (example: wget http://myserver/)
Is there a way how I can tell the firewall to redirect local requests addressed for 80 to port 8080? (using the SUSE firewall configuration file)
I'm trying to find a way to setup a bi-directional L2L IPSec tunnel, but with differing group-policy filter ACLs for both sides.
I have the following filter ACL setup, applied, and working on my tunnel-group:
access-list ACME_FILTER extended permit tcp host 10.0.0.254 host 192.168.0.20 eq 22
access-list ACME_FILTER extended permit icmp host 10.0.0.254 host 192.168.0.20
According to the docs, VPN filters are bi-directional, you always specify the remote host first (10.0.0.254), followed by the local host and (optionally) port number, as per the documentation.
However, I do not want the remote host to be able to access my local host's TCP port 22 (SSH) because there's no requirement to do so -- there's only a requirement for my host to access the remote host's SFTP server, not vice-versa. But since these filter ACLs are bidirectional, line 1 is also permitting the remote host to access my host's SSH Server.
The documentation I'm reading doesn't seem to clear to me if this is possible; help/clarification much appreciated.
We have Routing and Remote Access configured on Server 2003 (also our primary domain controller), allowing users to connect in remotely to access files, email, etc.
With one user, the RAS Server is constantly sending data to that user's remote computer. From 9am this morning it has transferred almost 800MB. The user isn't transferring any files remotely, certainly not enough to total 800MB anyway.
None of the other remote users have had this issue. We have ensured that the user in question has "Use default gateway on remote network" disabled for both IPv4 and IPv6 and we are fairly confident that Offline Files isn't trying to synchronise with the server remotely, too.
My question is two-fold. Firstly, has anyone had a similar experience? Secondly, what would be the best software to discover exactly what data is being sent to the remote user?
I have a remote site with a website that only allows access from the outside IP assigned to our local PIX. I have users connecting to the local networking using a VPN that need to be able to view this remote site. I don't think this works because the packets want to come in and go out over the same (ext) interface. So I'm looking for a way to make this work using the PIX or setting up a service on a server on the local network to act as a middle-man for the HTTP requests.
The remote site doesn't support setting up a VPN to our PIX. The remote website is dishing out pages over a non-standard port.
Can I use squid or something similar to proxy just one site?
I'm trying to test a network device (firewall) using a Linux box, with two network cards, one interface connected to the WAN zone and another interface to LAN zone.
The configuration is similar with that
|ETH0| <-> | FW | <-> ETH1
So from both interfaces I'm able to ping the respective firewall interface. But i'm not able to fire something like:
ping -I eth0 ip.from.eth1
and to get any answer. Is that possible or should the linux network namespace solution or user level tcp stacks (VMs are out of question)
Hello there,
I have a very odd situation, I have a server (let's call it X) running 2008 R2 with two NIC's in it, one is connected to the work domain and has a subnet of 192.168.10.0/24 the other is connected to a ADSL connection and has a subnet of 192.168.1.0/24. The server has IIS installed.
On the ADSL connection I have setup a dynamic dns and port forwarding to allow external HTTP, HTTPS, FTP and RDP connections. FTP and RDP are working fine however neither HTTP or HTTPS are working at all.
I can browse the websites by going to localhost on the machine, the HTTP and HTTPS ports appear as "Filtered" when I try to scan them using PortQueryUI and browsers respond with a "Server took too long to load or was not responding" error.
This was working fine just a few days ago, Windows firewall is disabled I don't have any software firewall on it. And I'm really lost.
Any help would be great.
We have a proxy at school, which requires a login/password, and blocks a certain number of sites that aren't "school related" (facebook, youtube, etc.)
While I'm able to get through to most things, people who've upgraded to Lion can't get through to anything, even though I've replicated my proxy/network settings on their machines.
Is it possible that the difference in OS versions is causing this? I have Snow Leopard, they have Lion.
I want to set up an Astaro (Sophos) UTM in a Virtual Machine.
The Setup should be at the end the following:
Cable Modem (one IP adress)
| [Ethernet]
Sophos UTM (running as VM [VMWare Fusion 5] on the MacMini)
| [WIFI]
Airport Express v2 (for sharing Local Network to wireless and wired clients)
1)| [WIFI] 2)| [Ethernet over Thunderbolt Ethernet Adapter]*
Clients MacMini (Local File Server)
*To have the Mini also protected behind the UTM
So the setup process for the UTM works fine, but then the problems start:
I just have one external IP (from my cable modem provider)== So if I put the VM in briged mode my Internet connection drops, because the MacMini also has its IP adress.
If I put the VM to NAT mode the Mini itself is not protected by the UTM
So: is there a way to hide the en0 interface(Ethernet) and the en1 interface (Wifi) from the MacMini, so that they not even appear in System Preferences Network section but are available to the VM?
That way the Mini must connect to the en2 interface (Thunderbolt adapter) to make any Internet/LAN connection and I just use the given single IP from the Cable Modem.
Thaks for any suggestions...
Sebastian
I leach my neighboors wireless (it's all good I get him back), but I need a way to monitor the incoming and outgoing IPs/domain names on my own end, only because I think I have a trojan. Like some easy program you know?
I leach my neighboors wireless (it's all good I get him back), but I need a way to monitor the incoming and outgoing IPs/domain names on my own end, only because I think I have a trojan. Like some easy program you know?
I have a web application running as an http server inside the VMWare guest OS, and I'm trying to access the content from the host OS. The guest is running Ubuntu, and the host is running Windows XP.
The problem is, when I try to access the application from a browser in the host OS, the content takes a very long time to load (up to a minute for a single page). A browser in the guest OS can access the application with no problems.
I've tried using both NAT and bridged networking, but the results are the same.
The Windows firewall is turned off.
The connection itself appears fine, as ping requests from guest to host as well as host to guest complete without errors or delays.
Both guest and host can access the external Internet connection without a problem.
I'm using VMWare Player.
Any ideas?
Hey all,
I have a few questions about configuring a router to achieve low-latency, high speed throughput on a local area network that is not connected to the internet. I've read up on some stuff, but thought I would solicit some opinions here on what I've found and what I want to know....
Turn off SSID broadcast - it produces extraneous packets that all clients receive and reply (?) to. Not a huge deal, but it may help a bit.
Mixed-mode off - I should attempt to have all devices using the same standard (e.g. 802.11n) and turn mixed-mode off.
Any thoughts on security? Does having WEP or any of the WPA variants actually increase latency? Nothing super secure is going over this LAN so if turning security off made things better, that'd be cool.
Any other thoughts or things to focus on to create the low latency environment I'm trying to go for would be great. Links to webpages and papers are also cool. I'm open to go through a bunch of stuff.
Thanks in advance!
I read lot of posts related with blocking sites. Most of the posts says to edit hosts file. I know it is a good method. But this one is not working for me.
Can you guess what is the issue by analyzing the following details,
My PC is joined to a domain and using proxy settings, and the logged in user having administrator privileges.
After reading some answers, I did the following
Changed the hosts file to have
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
127.0.0.1 www.facebook.com
Added no proxy for facebook,
Still, it is not working. Why ?
I have configured a SOCKS ssh tunnel to a remote proxy, and set my Firefox to use localhost:<port> as a SOCKS proxy. My intention is to tunnel outgoing HTTP/S connections from my machine via a specific 3rd party server I own (on AWS).
In my testing, HTTP UTLs are forwarded properly (e.g. when I access http://jsonip.com/ from my computer I do get the server's IP)
However, whenever I try to reach an HTTPS address, I get this error:
The proxy server is refusing connections
How do I debug/fix it?
My PUTTY tunnel config is simply (some random source port number + dynamic checked):
P.S. I'm aware I might need to manually accept SSL certificates. The reason I'm doing this is to resolve problems using gmail as an outbound SMTP service.
Recently I've been looking at a range of network server cabinets with a mesh door at the rear. At the top of the cabinet are ceiling mounted fans with dust filters attached. These fans suck air out of the cabinet - presumably to remove the hot air that has risen to the top.
My question is why do these fans have dust filters? What point do they serve? If the air flow is pulled in by these fans through the mesh door, then surely they are not there to protect the hardware inside from dust?
Also, there are other minor grilled gaps around the enclosure, how does this kind of ventilation design work?
The problem with our server is that we need to use the bug ridden and awful AT&T network client, which causes our server to bluescreen once per 24 hours.
Does any one know how to (or has a good guide) quickly set up a workstation running Windows server 2008 R2 as a proxy server. So this spare workstation would run AT&T and would act as a bridge between our server and the server that can be connected to only via the AT&T VPN software. And this way our own production server would not crash so often (or not at all) and the workstation can happily crash whenever it wants to.
I have a broadband ADSL line with plus.net in the UK. Having checked the modem there is no firewall or any weird features enabled.
But since I arrived at the apartment (the broadband already being installed), I cannot log into Twitter nor update any of my wordpress blogs (I can browse them and log in, but cannot save any edits or new posts). It only seems to affect these two sites in their unique ways.
If I take the netbook I use in this place out to say a McDonalds or some other wifi access point then these sites work fine again.
Anyone know what could possibly be preventing access of the pages in question? The only thing common to these pages are the POST response they are expecting. But POST form submission works fine on other sites...
I added eth1 and eth2 to my Ubuntu Server, all 3 use DHCP and are on the same lan
eth0 10.0.0.41
eth1 10.0.0.42
eth3 10.0.0.43
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default router.net 0.0.0.0 UG 100 0 0 eth0
10.0.0.0 * 255.255.255.0 U 0 0 0 eth0
10.0.0.0 * 255.255.255.0 U 0 0 0 eth1
10.0.0.0 * 255.255.255.0 U 0 0 0 eth2
curl --interface eth1 www.google.com doesn't work
what else do i need to do for the above to work?
I have simple task to do:
I have wni7 with two nics.I want to connect another comp(osx) to win7 through second nic to connect it to internet.
I already changed the registry.
Win7 interface with 192.168.2.1 has no gateway set (no point to do that)
OSX interface with 192.168.2.2 has gateway set to 192.168.2.1
I do not add any routes on win7, every thing seems to be already there
network on second nic is detected as "undefined network" (probably effect of no gateway)
i can achieve any connectivity to internet from OSX only by enabling network connection sharing on nic with 192.168.2.1, but it enables NAT and I'm interested only in pure routing without nat(it's a setup for some research).
firewall is off.
It seems to me that win7 refuses to forward packets for some reason. Perhaps "undefined network" and NLA service is to blame, although i couldn't find any info about that.
Below ascii schematics of my setup:
internet<--router(192.168.1.1)<--(192.168.1.1) WIN7 (192.168.2.1)<--(192.168.2.2)OSX
Thanks
I currently have message filters set up in Thunderbird to put incoming email messages from various sources in appropriate server side folders. Since I envision starting to use a smartphone (Android) based IMAP client which doesn't support folders or message filters I'd like to move these filters server side and take them off the clients.
The Linux server email system is sendmail and UW IMAP. Can someone steer me in the direction of setting up such filters on the server side?
My company runs filters on contents available for browsing and I have to check if everyone is respecting the browsing policies. Recently I have spotted some users activate OpenVPN on their workstations and i have discovered that they connect on port 443 of an external server and then use a proxy to circumvent the company filters.
Is there any method to monitor VPN connections on allowed ports or to avoid the connections?
I'd like to use m0n0wall inside a (VirtualBox) VM to play about with and see what it can do. Ultimately the goal is to have a number of virtual machines connected to a internal virtual network which goes through to the m0n0wall VM, and then the m0n0wall box connected to the internet through NAT or a bridged addaptor on my host machine. I can find out how to set the LAN and WAN addresses, but this seems to be only for using m0n0wall as a router intead of attached to another router.
Let's see if I can diagram this:
[Virtual Machine]---Internal (VM Only) Network ---[m0n0wall VM]---Bridged/NAT Addaptor---["real" router]---Internet.
Can anybody suggest how I should do this or am I thinking m0n0wall isn't meant to be used like this?
Is there a way on my Windows XP machine to blacklist certain HTTP URLS so that embedded web service calls won't trigger activity from my PC to those URLs?
Is it possible to view only those elements of GPO that are actually modified/specified?
For example, when looking at RSOP for an OU, I have loads of options which are mostly not specified - can I automatically filter it to show only e.g. that it doesn't allow to use control panel or install software, instead of looking through all options?
I am using Win2003 and I have only the default tools.
Thanks in advance!