alexm
  • Member for 12 years, 2 months
  • Last seen more than a month ago
  • Turkmenistan
iptables Tips & Tricks
22 votes

Add comments to your rules: -m comment --comment "Comments help to read output of iptables -nvL"

View answer
How can I get list of open SSH tunnels?
4 votes

In Ubuntu, with iptables and iptstate installed and standard ssh port: iptstate -D 22 each line will represent open tunnel.

View answer
Windows 7 Print Spooler service keeps stopping
Accepted answer
3 votes

+1 for bad driver Better way to delete drivers: Under Control Panel and Administrative tools theres a new option here in windows 7 labled Print Management. From here you can see all the ...

View answer
Remotely shut down multiple Windows XP PCs (in active directory domain)
3 votes

Try psshutdown.exe from PSTools

View answer
Can 32-bit Windows LiveCD modify the Registry of an Offline 64-bit Windows?
2 votes

NTFS is the same for 32- and 64-bit, so you will be able to read any files. As for the structure - The registry in 64-bit versions of Windows is divided into 32-bit and 64-bit keys. Many of ...

View answer
Building a WSUS server: where to start?
2 votes

Server 2003 is more reliable. Download from Microsoft. You will also need to download latest .NET Framework and MS Report Viewer 2008. Your WSUS server should be set as intranet update site GPO and ...

View answer
Best way to block Windows Workstations from receiving Microsoft updates
2 votes

If AD policies still work, you can either point workstations to WSUS or block windows or auto updates through GPO. Also, MS has Windows Service Pack Blocker Tool Kit which can block SPs downloading. ...

View answer
Print server banner sheets
1 votes

Try to switch off banner sheet via Advanced settings on the server as follows: Printer Properties - Advanced - Printing Defaults as some drivers treat Printing Preferences as local setting.

View answer
Auditing user behavior in a small organization to prepare IT restructuring
1 votes

BPR(Business process reengineering) - here you will find definition, terms, approaches, criticism and literature.

View answer
Top Infected Machines - Dealing with Threats?
1 votes

In similar situation I finally blocked everything but those 10-15 vendor sites. Can you do that to your associates? It is strange that your anti-virus is able to find threats only after PC got ...

View answer
Block Facebook for selected users
1 votes

The easiest(*) is to install Ubuntu on PC with 2 network cards, configure iptables + Squid + Dansguardian and block users by IPs. Proxy will be transparent, no need to configure users' browsers. In ...

View answer
Unicast to multicast via iptables
1 votes

It seems that you will have to use special daemon - look at igmpproxy or mrouted - as iptables will simply translate and forward incoming packet to one combination of addresses/ports in the given ...

View answer
Windows Server 2003 Blocking Outgoing FTP Passive Mode
1 votes

On Windows Server 2003 and Windows XP the default range of ephemeral ports used by client applications is from 1025 through 5000. Under certain conditions it is possible that the available ...

View answer
Windows 2003 Admin Password Lost
1 votes

Use Emergency Boot CD or Hiren CD to blank local administrator's password. Then, here is how to change Domain Admin's password using Directory Restore Service Mode.

View answer
iptables: forwarding ssh ports
1 votes

Below are my working rules - but I use state module: *nat :PREROUTING ACCEPT [101:9081] :POSTROUTING ACCEPT [89:5340] :OUTPUT ACCEPT [209:13346] # DNAT to local ip #-A PREROUTING -p tcp --dport $...

View answer
Why is the mail-server sending a copy of a message to wrong recipients?
1 votes

MDaemon has settings for parsing incoming and outgoing e-mails - check those rules if any; settings for address mappings; header substitutions; settings for monitoring mailboxes - source of the final ...

View answer
Weird networking problem
1 votes

Anything in events log?

View answer
RDP session re-locks right after login
1 votes

Not sure about remote session but have seen exactly the same behavior on local system logon: that was caused by removed or damaged userinit.exe ...

View answer
Multiple RDP sessions on a single computer?
1 votes

Did you try to 'runas' tsclient with different credentials? Trick works with some apps which allow single instance only... Did you try 'remote desktops' plugin of mmc? There should be a slight ...

View answer
Web/LAN Traffic Monitoring
0 votes

Logs of transparent proxy (or SNMP-monitoring of gateway) are IP-based, so you will need to map IP-addresses to AD users. Unfortunately, I did not find any tools which do that automatically. Luckily,...

View answer
Debian: 2 network devices on the same network
0 votes

I am using 3 IPs for my box, but with virtual interfaces as shown below. Don't know if that is appropriate for your case... auto eth0 eth0:1 iface eth0 inet static metric 100 address ...

View answer
linux server - centralized user management
0 votes

what if you create group AdminServerC in LDAP and then add to /etc/sudoers on Server C below statement? : %AdminServerC ALL=(ALL) ALL

View answer
how to forbid ultrasurf
0 votes

Blocking of port 9666 will not help - this is localhost port only. You have to monitor connections to port 443. There is Brazilian Linux script for blacklisting ultrasurf servers using iptstate (can't ...

View answer
Moving Windows 2003 To A new installation
0 votes

Do not give up cloning idea: there is (should be) a way to substitute all the hardware-specific drivers with universal ones, then clone to new hardware, then install proper drivers. Do you have AD? If ...

View answer
Security suite software
0 votes

Find out what anti-virus works better for your environment: - if you have any suspicious or quarantined files try to send them to online service - this one checks submitted file against 38 different ...

View answer
UNC Network Shares Fail
0 votes

Check that following services are up and running on the server: netlogon server computer browser They should be dealing with sharing... EDIT: Try to check also all dependences to Network ...

View answer
If a raid controller changes, are the drives still usable without re-formatting?
0 votes

Based on my home experience - do not spend your time with anything below RAID 5 :) Troubles of migration or crash recovery are much higher than performance gained.

View answer
Definitive list of everything a entry level network or unix admin must know
0 votes

Should be able to configure and maintain - Firewall - Proxy - DNS - Mail Server - Web Server - DB Server - Print & File Services - Network Monitoring and do it REMOTELY :-)

View answer
nslookup not working for some domains on my server
0 votes

Is your server running DNS service? What are the DNS setting of the server's network interfaces? Should be localhost. And DNS of your ISP should be set in forwarders.

View answer
Protecting files from system administrator
0 votes

Easiest is to archive data with the long strong password. But that will only buy you some time...

View answer