New answers tagged

0

I can sympathize with the authors question because of the additional features offered by routing appliances. There are several options from WatchGuard and SonicWALL which do web filtering services, Antivirus, Antispam and others all from the appliance. The difference is that they do all this without requiring you to configure proxy settings in your ...


4

On windows server OS's after WinNT 4.0 SP3, this information is coming up by design. The Winsock applications on your machine are listening (waiting for information) from those ports. 0.0.0.0 means 'all addresses' This will come up wether you are connected to the internet or not. Think about it like this: a person has earphones in their ears, but no music ...


0

Im posting as an answer due to lack of reputations, but its more of a thinking-out-loud response. Apple Configurator and Profile Manager has a "Always-On VPN" options. However, it only works on "Supervised" devices. I dont know whether laptops can be supervised. Also you need a VPN server that supports IKEv2


1

Here's a fairly simple Fail2ban configuration for PostgreSQL based on the HOWTO linked above but fine-tuned to actually work with Ubuntu packages, catch another error condition and skip over various debug messages to make it quicker: /etc/fail2ban/filter.d/local-postgresql.conf: [Definition] failregex = <HOST>\(\d+\) FATAL: password authentication ...


1

Don't waste your time trying to find the source. It will be another victim. The spammer will have a network of compromised machines they are using. The first thing you should do is apply a password policy and force everyone to change their passwords. Make sure that you change the administrator password as well, as that is the most abused account. Next, on ...


0

The NAT multiplexes users using different port number. Sometimes routers also has port triggering setup to multiplex connection on the same port. In a pure NAT situation, you can address that device via its public ip and port generated by the NAT. In port triggering case, you can access the device via the public IP and port.


1

Yes, bridged mode + PPPoE on a pfSense box should work fine. One notable caveat to test though is that some ISPs who use PPPoE have an MTU blackhole and don't set PPP MTU (some Cisco client equipment fails to negotiate the PPP session if the far end tries to set MTU) and also don't themselves clamp TCP MSS to work around this. Setting your PPP MTU manually ...


1

By default the DNS server listens on all interfaces / IP addresses. Most DNS servers set to allow recursive queries should not be listening on a public interface / IP address. Doing so allows them to be used in a DNS applification attack (a type of DDOS), ref: US-Cert DNS Amplification Attacks. Configure the DNS server to only listen on internal ...


1

You need to configure forwarders. To quote from the linked article: Click Start, click Run, type dnsmgmt.msc, and then press ENTER. The DNS Manager console will open. In the console tree, click the name of the DNS server you wish to configure. On the Action menu, click Properties. Click the Forwarders tab. Modify the list of forwarders as ...


0

If your client can ping the address 'eth0' of your server I think you miss a NAT basic rule as "iptables -t nat -A POSTROUTING -j MASQUERADE" for browsing to internet.



Top 50 recent answers are included