Tag Info

New answers tagged

0

Perhaps turning recursion off will do the trick: allow-recursion { none; }; Or: recursion no; Explanation: Turning off the forwarders will prevent your DNS from sending requests to another (likely recursive) server. You also need recursion turned off on your own server to prevent it from doing the recursive queries itself.


4

Assuming there isn't a firewall or router between the end users and the server you could employ STP (spanning tree protocol) and the following layout: This would give you the redundancy you are seeking. If a single "core switch" (the m4100-50) goes offline traffic should be able to keep flowing. Depending on how STP is configured (what type of STP and ...


0

Your requirements aren't clear at all: why exactly do you need multiple Gigabit Ethernet ports on the same computer to handle a bunch of IP cameras? You should probably revise your design. Anyway, the answer to your question strongly depends on the card model. If it uses a standard bus, like PCI Express or plain old PCI, it will work fine on any ...


1

The "routers" you are using are all-in-one wireless access points, NAT firewalls, and routers combined. Turning off the Network Address Translation of the secondary routers may help, but you'll still need to introduce static routes on the primary one. Alternatively, just turn off the entire routing portion altogether on the secondary routers and configure ...


0

This looks like an OS error to me. It is very, very old, so who knows? In the short term, reboot. In the long term, consider upgrading to a supported OS; support for server 2003 ended 14 July 2015.


0

If you don't know where your system will be deployed you pick a sensible default configuration, possibly auto-negotiate and DHCP. And on the console you provide both a warning, the access and the instructions for whoever will be deploying the kit (end-users or field engineers) to modify the network settings when those defaults don't work or an unlikely ...


0

check this line in sip.conf : canreinvite = no ; allow RTP voice traffic to bypass Asterisk if it set to yes RTP traffic will _try_ to go directly between SIP endpoints. If it set to no - all traffic will be sent over PBX.


0

It depends. If you do any transcoding (in other words the two endpoints use different codecs) then Asterisk will definately be in the RTP stream. If your two endpoints are on opposite sides of NAT, then Asterisk will likely be in the RTP stream (also depending on reinvite settings). If both endpoints are on the same side of NAT then likely no.


0

It's entirely possible that if you're using pfSense 2.2 or later, you're being affected by this. Symptoms would include: Slowness for other VMs hosted on the KVM platform if they need to access a network resource which is on the other side of one of the router interfaces on the pfSense router Physical machines which need to access something across the ...


1

from DO pricing page: "Each droplet is billed per hour up to its monthly cap." You want to use traffic in internal DO network. Just create on each droplet interface with internal address and route your traffic into them. General question - general answer. Please, clarify - what is the problem ? How to create internal interface ? How to route it ? Anything ...


-3

Let's clarify: - You connect to provider's modem, without router. Look, what is your ip: ifconfig of often just ifconfig eth0 it address is a "white" ip address - you can connect to this address to your web server. Is it's a private - you can't do this, but can try to order an "white ip address from your ISP provider". More info on private ...


1

I had to make a couple of additional modifications to get this to work for me on my SLKWRM0000200 running Fabric OS v6.2.2b. I had to add the following to the %vendortable array in rancid-fe: 'brocade' => 'brocaderancid', Then I used "brocade" as the system type in router.db like so: fc-sw03:brocade:up I also had to change "set ...


0

If your public IP is assigned by a RIR (eg. ARIN, RIPE, etc.), you have a public ASN most probably, and you should peer with one or more ISP (Single-Homed, Stub-Multi-Homed, Multi-homed) rather than having a simple subscription. Basically you need to agree the peering policies (ie. BGP parameters) in this case. Otherwise, if it's your ISP that has assigned ...


0

Depending by the exact version of the 3750 and of the IOS in your devices, BGP could run on them. A basic BGP config is not rocket science, but of course you need to understand the design you want to deploy first. It seems that your switches are already routing between VLANs, but this is almost by default, do you have a static default routing only or any ...


1

Using Powershell. Here is an example of changing the network profile of a network interface called Ethernet to "Private." This is a one line command. Set-NetConnectionProfile -InterfaceAlias Ethernet -NetworkCategory Private This will work on any local computer with Powershell installed.


1

There are several ways to accomplish what you want, and yes, prepending your own AS to the routes (prefixes) you advertise to ISP, along with setting a LOCAL_PREF to the ones you (will) re-advertise internally is a good point. Basically, you need to: Make the prefixes (routes) you advertise through R1 preferred for ISPA (influencing inbound path). Make ...


0

try to pass all traffic from x.x.21.122 to your DNS. If the errors will dissappear - than you should improve your firewall rules. It logs, that you provide, we can't find any connection on port 39132. Also, please post your asa config.


0

One place you can put it is in the /sbin/ifup-local file which is run when an interface comes up. #!/bin/sh if [[ "$1" == "eth0" ]] then ip -6 route del default ip -6 route add default via 2001:470:xxxx:xx::1 src 2001:470:xxxx:xx::6 else #DO_NOTHING fi It doesn't exist by default so you will need to create it and set permissions to make it ...


0

Since I know that VMware strips VLAN assignments unless configured properly I would start there. If you have the new switch using VLAN and the old switch using direct ports then this would be the problem. In VMware you need to set the virtual switch to use all VLAN ports. Since you are only having problems with VMware I would pay close attention to the ...


0

Static route from an elevated CMD prompt it would go something like "route add 172.16.1.0 mask 255.255.255.0 (local ip address of your vpn router 10.0.0.xxx)"


1

One solution would be to make a script that does the following: Fetch network details of the WAN interfaces. Test their connectivity with ICMP probes by binding the probes to their appropriate interface (-I flag on linux ping command) Depending on connectivity status act accordingly (if primary link is down, switch-over to secondary) The above can be ...


1

Not getting far enough to be MTU-related. You're sending a SYN, getting a SYN ACK in reply, then RSTing the connection rather than completing the TCP handshake. Something is aborting the connection. That's an unusual circumstance, nothing about that suggests a specific cause. Looks like that capture reference point is your WAN, try the same on LAN to see ...


1

Please try Npcap: https://github.com/nmap/npcap, it is based on WinPcap and supports loopback traffic capturing on Windows. Npcap is a subproject of Nmap (http://nmap.org/), so please report any issues on Nmap's development list (http://seclists.org/nmap-dev/).


0

The only thing a trace route indicates is how long an ICMP packet takes to get to and from each route hop between your source and destination IPs. Period. If you want to test how a certain application will perform, you need to test and profile that application.


0

There could be many things that are off, like DNS, networking settings etc. A couple of MVP's created a WAP Wiki and OneNote that is a must read when you start implementing azure (pack) http://www.hyper-v.nu/archives/hvredevoort/2015/01/azure-pack-wiki-available-via-onenote/ Hope that provides some useful pointers. The official place for the ...


0

There are multiple ways to achieve this. For example by making a Linux Bridge (follow this tutorial for a bit). Another way is (for example) making a loadbalancer with IPVS (you can then bind the external IPs on the loopback interface on each client).


1

In Wireshark (1.12.4 here): you can try on the menu Statistics and use the tools Conversations or Endpoints (whatever it fits your needs), once there you can choose to show connections statistics on all or displayed packets by MAC, IP, TCP, etc. To export to CSV, on each dialog you will see a Copy button. This will copy the statistics shown on the dialog to ...


1

You cannot bring up an interface that is already up. The "File exists" errors indicate that you are trying to add IP addresses and routes that are already present. Make sure the interface is down and the IPs and routes are gone and run the script and you won't get those errors.


0

I don't have enough points to comment, so I'll post an "answer" instead. I'm having what appears to be a similar/identical problem (see serverfault question here). My (and probably your) problem is the send buffer of the iperf client on windows. It does not grow beyond 64 KB. Windows is supposed to dynamically grow the buffer when it is not explicitly ...


1

The bind_ip directive is meant to specify the IP addresses on that same system to which MongoDB listens for connections, not IP addresses from which it receives connections. Set this option to configure the mongod or mongos process to bind to and listen for connections from applications on this address. You may attach mongod or mongos instances to any ...


0

I think you can do what you are asking by turning on logging in Windows Firewall: https://technet.microsoft.com/en-us/library/Cc947815%28v=WS.10%29.aspx#bkmk_ToenableWindowsFirewallandconfigurethedefaultbehavior


0

The problem with -m limit is the limitation of all TCP packets whatever the client. So, if you have a low limitation for syn packets like --syn -m limit --limit 30/s --limit-burst 30 -j ACCEPT In this case, only one client with hping can take down your server by sending as many tcp packets with syn flag as it can. something like: hping thetargetedhostip ...


0

If you REALLY want to ensure you only communicate via the public interfaces, then have the ssh sever(s) only listen for connections on the public interfaces. Assuming you're using openssh or some variant open your /etc/ssh/sshd_config (that's a common path for it) and add: ListenAddress <your.public.ip.address> If you have lines such as this in ...


-1

I believe it may be due to the services heavily taxing your system resources. Another possible solution may be to look at how many possible connections you can have to your web server and/or how many hosts can use the router.


0

If you are looking for a justification for the multiplicative decrease factor of 0.5 (as opposed to, for example, an additive decrease, or a larger multiplicative constant like 0.9), there is one in appendix D of this paper by Van Jacobson, one of the designers of the original TCP congestion control algorithms.


0

There is a program named iptables-persistent which make iptable's rules persistent as a OS service. this service include a configuration file as the iptables-save export. So you can reorder the lines in the configuration file and restart the service. sudo service iptables-persistent restart So easy!!!!!


2

Where "teaming" and "bonding" used to be used interchangeably, starting in RHEL 7, they are two completely different things. Both perform the same link aggregation and redundancy/failover functions, but they do so in different ways. If you have a team0 interface instead of the usual bond0 interface, you can get status for the team with the teamdctl team0 ...


-1

If you want to share a folder or a fiel within your network you can use the folder sharing option. Here is a tutorial for windows 7. For Linux look for samba


2

If you want to see it in a web browser via the HTTP protocol, then you need to install an HTTP server (e.g. IIS). If you want to access the file to work with it, maybe in something like Word or Photoshop, then you would only need to turn on Windows file sharing.


0

You need some sort of web server to host things via http. It could be a short script, but usually apache or nginx is easier to get going for hosting a few static files.


0

You can create an internet facing load balancer using ARM and Resource Groups. All the machines you want behind the load balancer will need to share the same backend IP pool. You can find the steps to set one up here - https://azure.microsoft.com/en-us/documentation/articles/load-balancer-arm-powershell/


1

It sounds like network-manager is reverting the interface back to dhcp because it's not aware of the config change. Rather than doing ifup/ifdown restart the network-manager service: sudo service network-manager restart If network-manager isn't installed check to see if dhclient is still running. If it is stop it and try restarting the interface ...


0

If you have changed email services, and need to download the PST files from your old outlook, you may want to connect using IMAP to download your old emails. Some limitations exist, such as syncing contacts and calendar events, but connecting as an Exchange client will not yield you PST files (Exchange stores offline data in OST files, a little different). ...


6

The HTTP protocol allows the client application (usually a web browser) to create HTTP requests containing the name of the web site it wants to contact; this allows multiple web sites to coexist on the same IP address and port. All web servers can be configured to serve different contents based on the name of the web site the client is asking for; also, ...


1

Because ISPs choose the most cheapest paths for them. If routing traffic to the ISP (C) for ISP (A) is cheaper through ISP (D) (which is probably a big company with really big links, which sells the traffic in significant volumes and because of that have lower prices) than by ISP (B) (which can be a pretty small ISP with small resources, so they traffic ...


0

If you want to simply restrict access to port 21 remove the PREROUTING rule you added: -A PREROUTING -p tcp --dport 21 -j REDIRECT --to 2221 And remove the rule permitting access to port 21: -A ufw-before-input -p tcp -m tcp --dport 21 -m state --state NEW -j ACCEPT And reload the firewall rules. If you need to have port 21 open to a specific IP you ...


0

Considering that the WebSockets protocol initiates its handshake by the client making a special HTTP request and defaults to using the regular HTTP ports (80/tcp and 443/tcp for plain and TLS connections, respectively), it's actually entirely expected that both of these protocols would connect to the same port(s). I suppose what may be a problem is if you ...


1

I guess that this is only possible if the application that is bound to the port does the protocol switching. Usually there is no way to bind two applications/services to one port.


0

If you're using a First Hop Redundancy Protocol, especially Multigroup HSRP, on your local network then you want to split half your users to default out Router1 and the other half out of Router2. So to explain you have 2 routers at a site with redundancy in mind. You want to load balance traffic out both of the routers. Each router acts as a gateway to the ...


0

"Cat 5" is part of the TIA/EIA-568 standards for "commercial building cabling for telecommunications products and services". Note that such cabling need not be used for Ethernet switching to be rated. Also, the organization in question has not chosen to rate switches. The intent of these standards is to provide recommended practices for the design and ...



Top 50 recent answers are included