Hot answers tagged

4

On windows server OS's after WinNT 4.0 SP3, this information is coming up by design. The Winsock applications on your machine are listening (waiting for information) from those ports. 0.0.0.0 means 'all addresses' This will come up wether you are connected to the internet or not. Think about it like this: a person has earphones in their ears, but no music ...


1

Here's a fairly simple Fail2ban configuration for PostgreSQL based on the HOWTO linked above but fine-tuned to actually work with Ubuntu packages, catch another error condition and skip over various debug messages to make it quicker: /etc/fail2ban/filter.d/local-postgresql.conf: [Definition] failregex = <HOST>\(\d+\) FATAL: password authentication ...


1

You need to configure forwarders. To quote from the linked article: Click Start, click Run, type dnsmgmt.msc, and then press ENTER. The DNS Manager console will open. In the console tree, click the name of the DNS server you wish to configure. On the Action menu, click Properties. Click the Forwarders tab. Modify the list of forwarders as ...


1

By default the DNS server listens on all interfaces / IP addresses. Most DNS servers set to allow recursive queries should not be listening on a public interface / IP address. Doing so allows them to be used in a DNS applification attack (a type of DDOS), ref: US-Cert DNS Amplification Attacks. Configure the DNS server to only listen on internal ...


1

Yes, bridged mode + PPPoE on a pfSense box should work fine. One notable caveat to test though is that some ISPs who use PPPoE have an MTU blackhole and don't set PPP MTU (some Cisco client equipment fails to negotiate the PPP session if the far end tries to set MTU) and also don't themselves clamp TCP MSS to work around this. Setting your PPP MTU manually ...


1

Don't waste your time trying to find the source. It will be another victim. The spammer will have a network of compromised machines they are using. The first thing you should do is apply a password policy and force everyone to change their passwords. Make sure that you change the administrator password as well, as that is the most abused account. Next, on ...



Only top voted, non community-wiki answers of a minimum length are eligible