Tag Info

New answers tagged

0

What about remote-client% ssh firewall-port22-which-goes-to-ssh-server -L 5900:mac:5900 followed by remote-client% vncviewer localhost:5900


0

Maybe this will work? netsh interface portproxy add v4tov4 listenport=5003 connectaddress=127.0.0.1 connectport=5003 listenaddress=0.0.0.0 protocol=tcp Otherwise try one of the options listed as answers to the question found here: Easy TCP proxy on Windows?


3

Connect the Airtel to the switch first. Then configure the Airtel with a free IP address on the same subnet as the other hosts and then change the default router on the three desired hosts which need to connect through the Airtel router. If you use DHCP on the LAN, make sure you have DHCP configured (disabled) correctly before connecting the Airtel device ...


0

After all the hectic and researching over the internet, I found out the solution. Resetting the router flushdns the WS2012 Re-installing the service Might help others, and thanks @Esa Jokinen, @roaima


0

Microsoft offers Forefront Threat Management Gateway as a solution for integrated firewall, VPN, intrusion prevention, malware inspection and URL filtering.


1

Your router is the best place to start. Many models have some sort of simple MAC allow/deny feature. Other ways of controlling it would to be to install filtering software, or to use custom IpSEC policies to deny addresses off of the LAN. This is easier to circumvent than blocking it at the router, but it is an option in a pure Windows environment.


0

You might succeed by chainloading iPXE. iPXE seems to support booting an ISO file from an HTTP server.


0

Restarting the Appliance fixed my issue.


0

Windows DHCP Server (2012) supports policies. See: https://technet.microsoft.com/en-us/library/hh831538.aspx Basically, you create a policy, establish an IP range, and assign MAC addresses to the policy.


1

NLB heartbeats operate at Layer 2, so no firewall ports need to be opened. Here's a screenshot of an NLB heartbeat, captured with Microsoft Network Monitor:


2

NLB operates at the Ethernet layer, which is below the whole TCP/IP stack and thus below any firewall. And, anyway, NLB hosts must be connected to the same network segment: there can't possibly be any block between them.


1

TCP does path MTU discovery to avoid fragmentation which can result in increased packet loss. Applications using UDP have two choices. They can just permit their datagrams to fragment. In that case, they won't get dropped, but if any fragments happen to get dropped, the entire datagram will not be received. This can magnify packet loss rates. They can also ...


0

It all depends on your SBCs; i.e. you could boot your SBC to a preloaded image located i.e. on a USB pendrive starting a PXE session that will install the desired image on the resident flash. But probably if I were you I'd try a Jtag based approach (if your SBC has a Jtag connector); That's what embedded professionals do.


3

Yes, you can directly connect them. But you must ensure that on at least one of the machines you run the opensm subnet manager. From the software side, if you were using Ubuntu 14.04, install these packages: sudo apt-get install opensm infiniband-diags librdmacm-dev libibverbs-dev libmlx4-dev Then add these to /etc/modules mlx4_ib ip_ipoib rdma_ucm ...


1

The 401 Unauthorized isn't an error: is how authentication mechanism works on SIP (see this answer) The line: [Mar 23 20:02:10] NOTICE[4067] chan_sip.c: Registration from '<sip:201@192.168.0.99>' failed for '192.168.0.15:39462' - Wrong password Seems clear: the password in your SIP client is wrong and the authentication doesn't succeed. SIP ...


0

You will need to create a virtual adapter (ie, tap0) that belongs to the bridge and give it an IP (say 192.168.1.1) then connect all the VMs to that bridge and have them use 192.168.1.1 as their gateway, and setup the Proxmox host to do NAT by enabling ip forwarding (add "net.ipv4.ip_forward=1 to /etc/sysctl.conf and run sysctl -p) and then add in the NAT ...


0

I'm assuming this is at a hosting provider? The simple answer is it depends on their policy, but generally you would only pay for the 1Gb once when it leaves Apache, not when it leaves the NFS server. Most hosting providers only charge for data when it passes through their router, so traffic between two machines at the same provider is free. If you want ...


3

What is the difference between an active and a passive cable? Passive cables only work to lengths of about 5m or under. Active cables boost the signal for increased distance. See this article What is the difference between QSFP and QSFP+? I think the QSFP+ supports higher data rates so 56Gbit FDR Infiniband. Maybe someone can ...


1

Typically in an active/failover environment, there will be 2 internet connections. With 2 internet connections, BGP would be an option, and is how I would do it (depending on your setup, gear, etc.) I've not seen what you're looking for done with a T1.


0

All you need to set up on the host is the bridge. When you configure virtual NICs, and attach them to the VM, the taps will get created automatically, when the VM is started. Now, without reading the actual guide, it looks like you need three interfaces on three DIFFERENT networks. If you plug all your virtual NICs into the same bridge (effectively, a ...


0

Apparently this can be done with a /s at the end of the query reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\ /v "search string" /s


0

Does nmap tell you that any ports are open at all -- and that just the one specific port(service) is being filtered? Have you checked that the service is bound to the interface (ip) you are trying to connect to? (For instance, some mysql installations by default only bind to the lo interface / allow access from localhost. For the rest, as you and others ...


0

You could use nmap to scan the subnet in question if you don't know which machine is listening on thatt port. If you do know the machine then lsof can show you what is using a port, also ensure that iptables isn't blocking the port. NMAP nmap -p 22 --open -sV 10.0.0.0/24 > sshservers LSOF lsof -i :80


0

If you have an OFED installed in your system and the package infiniband-diags you can use the command sminfo to list running subnet managers in your Infiniband network: ~ # sminfo sminfo: sm lid 18 sm guid 0x0000000, activity count 55554951 priority 0 state 3 SMINFO_MASTER It will list all known subnet managers for that nome and the master subnet ...


0

See if you can get a hold of network analyzer or network monitoring tool. See what would be your peak hours and grab an average of users logging in and maybe bandwidth that is being used. If you see a large number or a chunk of data, then you already know what your problem is


1

Debian is nice in using .d run-parts directories. Just put a script in /etc/network/if-post-up.d/ and /etc/network/if-post-down.d/ and you're done. For example: add_route_up_script: file.managed: - name: /etc/network/if-up.d/my-route - mode: 0755 - source: salt://network/if-up-route See interfaces(5) for available environment variables ...


1

Employees could be doing personal activities during their lunch break such as watching YouTube videos. If your router supports it you could do a packet capture of all network traffic, then load the capture up into Wireshark and do a conversation analysis to see which IPs are using the most traffic. You can then use www.arin.net to see who owns those IPs to ...


0

So you want to control the traffic on a per-service basis, is that correct? Do you have the services configured to only listen on the Service IP? I would think that would resolve the issue. IE, the management workstation attempts to access port 80 on the service network IP of the server. Since that service is only available on that IP/interface, the ...


0

You probably should look into port security topic here: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_52_se/configuration/guide/3560scg/swtrafc.html#wp1038501 Idea is that you can assign list of legit MAC addresses that are able to connect given port number without security warning.


0

You've got (b) wrong. You don't put in routes between the two NICs in the Win 7 box. Windows already knows to route from one network to the other when you put it in routing mode. What you might have to do on the Win 7 box is add routes to any other networks that are behind other routers. The other thing you'll have to do is configure all the controllers to ...


0

Ok, I've finally managed to solve the issue. The problem was the network adapter driver. I needed to download DevCon.exe and: List all network adapter installed Find the physical one Delete the driver Rescan system for new devices. Finally "Local Area Connection" reappeared within the list of ip interfaces.


8

External CSU/DSUs have been disappearing, even for T-carrier, for years now, and I haven't seen an external CSU/DSU (connected over X.25 to the router) since about 1999 or so. Routers or interface cards for circuits requiring CSU/DSUs have featured integrated CSU/DSUs since about that time, usually with the configuration of the CSU/DSU moved into software ...


1

5) Will our LAN be limited to 65536 (or some other theoretical limit) concurrent connections to the outside world through a single public IP address? No, because one port NAT IP can be used for multiple connections: cat /proc/net/ip_conntrack | grep 51380 tcp 6 191 ESTABLISHED src=10.1.8.5 dst=17.133.254.23 sport=51380 dport=5223 src=17.133.254.23 ...


1

the first two pictures you've referred to are used in "bigger" environments where expanding is probable. if you can plug the cables from the patch panel down to the switch directly and close the cabinet door (if applicable) without snapping them, you're fine. what i suggest however, is patching up all your patch panel ports right from the start, so you don't ...


0

According to your gist, the adapter is disabled. Try this in PowerShell: $adapter = Get-WmiObject -Class Win32_NetworkAdapter -filter "NetConnectionID='Local Area Connection'" You should have the adapter available as object $adapter; to verify this use: Write-Host $adapter.Name It should print the name of the physical adapter, "Intel(R) I210...". If you ...


-3

is it in different loactions ! i assume that your SP should provie to you a specific vlan and associate a techonlogy called "qnq tunnel" that mapping to your multiple VLAN on your both DC to one Vlan on SP.


0

I would give the following resolutions in this order (try again after each): Use FQDN: example.com instead of just example. Check that your DNS server is resolving the server IP correctly. If you are using external DNS servers, they probably won't resolve internal addresses. If your domain controller has DNS role, set your DHCP to make it the primary DNS ...


1

you can use something like this: iptables -A INPUT -i eth0 -p tcp ! -s 192.168.1.0/24 -d 192.168.1.0/24 -j DROP and iptables -A OUTPUT -o eth0 -p tcp ! -d 192.168.1.0/24 -j DROP the first rule block the ip address with coming from other sources and the second rules block the access to destination outside 192.168.1.0/24


1

Yes with this : iptables -P INPUT DROP iptables -P OUTPUT DROP iptables -A INPUT -s 192.168.1.0/24 -j ACCEPT iptables -A OUTPUT -d 192.168.1.0/24 -j ACCEPT


0

Iptables' default policy is ACCEPT. So by adding IPs to your list, you're only ACCEPTing them twice. Your iptables -L should show as much - that is, the only rules will be ACCEPT rules. Change the default to DROP, then add your items to ACCEPT. Try this before your match set rule: iptables -P INPUT DROP Be careful - don't do this remotely or you're ...


0

Ok, the question of @enno-gröper gave me a hint. Of course host2 doesn't know anything about 10.1.0.0/24. So I tried it with masquerading all traffic from 10.1.0.0/24 to 192.168.178.0/24 through tap0 on the OpenVPN server and it worked.


3

Connections which stall and eventually recover is almost certainly caused by packet drops. It should be very clear from a packet capture, when there has been a packet drop. If a packet was send by one end of the connection and not received by the other end, then it must have been dropped by the intermediate network. It is possible that packets are corrupted ...


0

Looks like you can only bind MySQL to 0, 1 or all interfaces on a system (MySQL: Bind to more than one IP address?) You could try having MySQL bind to all interfaces on your server, configure a private IP space for the two directly connected NICs and configure MySQL to replicate using those private IP addresses. Example: Server 1 (Master): NIC1 - ...


0

Short answer: make sure the new DNS server has (or can quickly resolve) both forward (name -> IP) and reverse (IP -> name) entries for the Mac server. Long answer: OS X Server tends to like to look itself up via DNS, even for things you wouldn't expect DNS to be involved in at all. (I think it's a side effect of checking its own hostname via a reverse ...


1

You've got your networking a little mixed up. An IPv4 ip address where all host bits are set to 0 is a network address. An IPv4 ip address where all host bits are set to 1 is a broadcast address. A .0 or a .255 in an IPv4 host ip address are perfectly valid depending on the subnet mask in use. The confusion comes from too many books, schools and instructors ...


2

You definitely don't have the right grasp of CIDR. The definition of a broadcast address isn't one that ends in .0. It's an address where all the host bits are set to zero. In a /32, there are no host bits. /32 isn't even a real world network address. It's no doubt being used to indicate that the number written is in fact an IP host address.


0

So, I feel kind of stupid now but I'll share the solution with the rest of the class. It turns out that the network team we had setup on the Server was the issue. Our switch isn't load balancing and that apparently caused the connection to the server to be unstable in our new building and unreachable in our old building. So we disabled the network team and ...


2

You have a Windows 7 Home Premium. That version doesn't allow access via Remote Desktop. The ticked option you mention is for "Remote Assistance". You need to "invite" the remote party to view your computer with "Remote Assistance". You can see this from the checkbox is in the "Remote Assitance" groupbox and not in the "Remote Desktop" groupbox. If you want ...


2

To find out how it works try: ip route get ADDRESS [ from ADDRESS iif STRING ] [ oif STRING ] [ tos TOS ] [ mark NUMBER ] it will tell you where/how packet with such parameters gets routed


2

There is indeed defragmentation occurring. That's what IPTABLES does to inspect packets. It must reassemble them in order to validate content. In my case, I would see periodic ping dropouts and web browser stalls while I was web browsing on a CentOS 7 system, or my PuttY sessions from windows would mysteriously hang -- permanently. I used a variant of ...



Top 50 recent answers are included