to configure a VPN connection between two Cisco Routers.
I have the configuration in one side but for another side I have nothing.Is any one can help me about it??Another question is :are two routers need to have a valid IP or not?
I must add tons of subnets (in the xxx.xxx.xxx.xxx/xx format) to the IPsec policies. I am on Windows 2003 servers.
It will take forever to add them one by one...
It's almost 500 subnets.
Is there an automation script or...?
secure a windows server 2003 traffic.
I have one server with a small number of clients <10. The clients have dynamic IPs.
The server hosts a number of public facing websites, email, FTP and remote desktop.
What I want to do is make port 80 respond to all web requests but lock all other services down so that they only respond to my 10 clients. I was thinking some certificate or VPN solution but I've ruled VPN out as I don't have a firewall or VPN so would I be able to do this with IPSEC?
Is there quick utility that would do this or can you point me to a good example article?
Is it possible to use IP Security policies in Windows Server 2003 to help prevent types of DoS attacks? Today my server was attacked by a single attacker who merely connected and disconnected on open ports at an incredibly fast rate. This was enough to eat the cycles of the server processes effectively creating a DoS attack. I was hoping IPSec could help prevent this, but I'm open to use any other software as well.
View 4 Replies View RelatedDoes anyone know how to range ban IPs using IPsec.
I can enter IPs manually but unable to ban an entire RANGE of ips
i.e. For example 172.10.10.10 - 172.1.1.999
Anyone know?
I'm trying to establish a VPN server inside a Fedora 10 VPS under OpenVZ. Openswan or Poptop is preferred over OpenVPN because Windows has built-in support for these protocols.
It looks like the host node (it's actually the vps from myprohost.com) doesn't have the required kernel modules enabled(installed?). Take Poptop for example, if I run pppd after rpm installation, the output is like this:
[root@v ~]# /usr/sbin/pppd
/usr/sbin/pppd: This system lacks kernel support for PPP. This could be because
the PPP kernel module could not be loaded, or because PPP was not
included in the kernel configuration. If PPP was included as a
module, try `/sbin/modprobe -v ppp'. If that fails, check that
ppp.o exists in /lib/modules/`uname -r`/net.
See README.linux file in the ppp distribution for more details.
[root@v ~]# modprobe -v ppp
FATAL: Could not load /lib/modules/2.6.18-92.1.18.el5.028stab060.2/modules.dep: No such file or directory
And when I check for the availability of the encryption module "MPPE", I got the same result:
[root@v ~]# modprobe mppe
FATAL: Could not load /lib/modules/2.6.18-92.1.18.el5.028stab060.2/modules.dep: No such file or directory
Openswan complains about some missing kernel modules too. So what do I do? Do I tell the provider to enable these modules? Do they normally do that? Will the host node require a reboot after having done that?
What modules are required for Poptop and Openswan? And, do I need to tell them to re-enable these modules every time I rebuild my OS?
I have ftp server (pure-ftp). with firewall.
i allowed 20 and 21 port in "CSF" firewall
now when i or our client connect to the server connection done.
and the they fire dir or ls command they will receive error
"425 Could not open data connection to port 2535: Connection timed out"
what is the problem.i have already allowed passive port 2500:3500 then why i received this types of error
i do a tracert on my VPS and get the attached results. My location is South Africa. Lately it just seems a bit sluggish. Can somebody please do a tracert from USA and EU for me please to do a comparisons or advice me on this VPS
View 13 Replies View RelatedI am on a VPS server and want to know in high traffic conditions how many connections per IP address can come... because on my site connections per IP going to 300 and mostly around 100.
But these are fluctuating and from different locations... everytime.. so dont think as a Dos but so many connections per IP makes my server down for few minutes until connections dont go down.
how many maximum connections per IP will be fine... for a little popular site.
I have a directory, named downloads/
I have some huge files for download in this directory.
now, when our users trying to download files from this folder with flashget (or dap or ...) this programs create 5 connection to that files! so If a user trying to download 5 files , he have 25 connection to my server!
How can I limit connection per Ip on file in this folder ?
Today i get alert from server provider saying my server is under attack, i check netstat and found too many connections.
Quote:
This ticket was automatically generated by the Softlayer Network Protection System. Due to the large amount of traffic targeted to your IP address 74.86.157.184, SoftLayer has automatically injected the IP address into our Cisco Guard Protection system. This system diverts traffic destined to the IP address 74.86.157.184 through hardware devices that will try to identify and block the specific packets and flows responsible for the attack while allowing legitimate transactions to pass. The injection of 74.86.157.184 will remain in place until this attack subsides and then be automatically removed once traffic levels reach a normal level.
Details of the event follow:
Exceeded Bits In: 782.7 M (Threshold: 500 M)
[url]
The connections are from my server to port 80 of "140.211.166.134".
lsof -i :port gives
PHP Code:
# lsof -i :47837
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
crond 16004 root 269u IPv4 48880489 TCP server20.hosthat.com:47837->ftp-osl.osuosl.org:http (CLOSE_WAIT)
udevd 31116 root 269u IPv4 48880489 TCP server20.hosthat.com:47837->ftp-osl.osuosl.org:http (CLOSE_WAIT)
yum-updat 31347 root 269u IPv4 48880489 TCP server20.hosthat.com:47837->ftp-osl.osuosl.org:http (CLOSE_WAIT)
auditd 31683 root 269u IPv4 48880489 TCP server20.hosthat.com:47837->ftp-osl.osuosl.org:http (CLOSE_WAIT)
python 31685 root 269u IPv4 48880489 TCP server20.hosthat.com:47837->ftp-osl.osuosl.org:http (CLOSE_WAIT)
ntpd 31715 ntp 269u IPv4 48880489 TCP server20.hosthat.com:47837->ftp-osl.osuosl.org:http (CLOSE_WAIT)
#
I have rebooted the server and now server is normal.
I disabled yum on the server. Some days back, i have same problem with another server, server have too many connection to one of the yum respositry IP. The OS is CentOS 5.1
This is an error that dns report spat out to me. I have the firewall disabled as of now so I don't understand why packets would be blocked..if they are being blocked. From what I can tell, I can get to the server and resolve no problem...but could that stop other dns servers from connecting to it? I recently moved my cpanel box to another location in the LT datacenter in order to get on a different subnet - the previous one was a spam list nightmare. All IP's have been changed over and such...is this just cached from like the 14 hours I was down (ouch!) or is this still happening? I mean...its able to look up a records and it can get the mx servers...
error: Our local DNS server was unable to get your MX record. This usually means that a firewall in front of your DNS server is interfering. For example, it may be blocking DNS packets from low source port numbers (ours is often in the 1024-1030 range). Firewalls should never block DNS queries based on the source IP address; otherwise, it is guaranteed that legitimate queries will be blocked. This specific lookup must be cached, so a recent change may not be reflected.
I have a Linux box running CPanel and am having issues with 1 particular client trying to connect using FTP. I am also running lfd and csf.
The problem is that whenever they try to ftp to the server (regardless of the domain), they get an error saying:
"Connection to host lost".
I look through the logs (/var/log/messages) and see that there was a connection made and closed. No errors.
Otherwise, all my clients can connect without a problem.
I dont know much about server. I was wondering: if I plug in my laptop at work would the server log my connection, even if my laptop is not a client?
View 2 Replies View Relatedwhere I can't access my terminal because my connections keep getting timed out. Its been ok previously but for the last 2 days I could not connect because the connection timed out 9/10 times. No modifications were made during this time so whats the problem guys?
View 4 Replies View RelatedI am checking WHM apache status and I am seeing roughly 72+ connection from 127.0.0.1 (server), why? What could be the problem? Is the server hanging up or is this an indication that something is broken in the server?
View 2 Replies View RelatedIs anyone having issues with connection dropping alot with FDC servers?
View 2 Replies View RelatedI just saw a post talking about a better connection to Brazil, but according to the "internet lines", Peru has a different connection.
So, almost 80% of the people here uses Telefonica and some Telmex. I know ThePlanet has direct connect with Telefonica, but, is there any other good provider with the same benefits or even better?
I have a problem with my VPS. Hosting company have migrated my vps to a new and better dedicated server and now on all my sites(and IP) I got connection timeout error. I have changed "Main IP" and resolvers in HyperVM 10 minutes ago and it's not working(or I have to wait to wait like for nameservers registration?). I can ping my IP and all services(lxadmin,lighttpd etc are started successfully and its not wotking, I still getting connection timeout error.
View 5 Replies View RelatedI am having some serious issues on one of my servers. The server/browser error I (and clients) get when executing something that needs more than 5 secs to finish is "The connection to the server was reset while the page was loading".
[Sat Feb 23 11:27:22 2008] [info] (104)Connection reset by peer: core_output_filter: writing data to the network
[Sat Feb 23 11:27:24 2008] [notice] Digest: generating secret for digest authentication ...
[Sat Feb 23 11:27:24 2008] [notice] Digest: done
[Sat Feb 23 11:27:24 2008] [warn] pid file /var/run/apache2/httpd.pid overwritten -- Unclean shutdown of previous Apache run?
[Sat Feb 23 11:27:24 2008] [notice] Apache configured -- resuming normal operations
[Sat Feb 23 11:27:24 2008] [info] Server built: Jul 28 2006 09:04:55
[Sat Feb 23 11:27:26 2008] [info] (104)Connection reset by peer: core_output_filter: writing data to the network
[Sat Feb 23 11:27:27 2008] [info] (104)Connection reset by peer: core_output_filter: writing data to the network
I don't know it anymore. Tried everything. I can not reach my server properly. A lot of time time out.
netstat -anp |grep 'tcp|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
1 127.0.0.1
1 38.99.44.101
1 64.131.90.38
1 78.176.158.75
1 78.179.73.135
1 88.229.70.143
1 88.242.97.204
1 88.247.87.58
1 92.112.211.223
3 78.176.175.136
3 88.229.40.142
3 88.231.180.181
4 78.183.227.146
18 0.0.0.0
348
348 connections from an empty IP? i have tried syn cookies, let the firewall block all ports without results.
When i try and connect to my server via SSH it replys with an error saying;
Server refused to allocate pty
stdin: is not a tty
My host's knowledge base says to click "Fix Centos Dev" but this doesn't work...
I am trying to access a few websites like auction websites and gaming websites.
But everytime they try and load I get a message "The connection has timed out"
They have been blocked so I can't access them I have tryed checking my "HOST" file and it doesnt seem to be blocked that way. Does anyone know any other ways it could of been blocked?
What on earth is going on? I have had my business website hosted by 2mhost.com for years and now it has been down for 2 weeks and their site is down also? What a rip-off! There are no phone numbers to contact them on the internet (none from google), no email addresses to contact anybody! How professional i tell ya! I am paid until January and i am losing money because my site is NOT up and running, there have been problems ALL YEAR! But it has never went this long, and they could at least email or notify customers of something major going on or something. Does anybody know of how to contact them and/or if there was anything that is going on like are they still in business?
View 14 Replies View RelatedI've just set up a website on our new dedicated server but every time I try and access it through the internet I keep getting "The connection has timed out" anu ideas what this could be?
View 4 Replies View RelatedJust wondering if anyone facing same problem like me on VPS.
i have a VPS which has 512 MB memory.
i'm hosting few sites on this VPS, and it does not allow more than 100 connection at a time. when i check apache it shows 100 connection, when i try to visit my site i cant.
So, is there any way i can make it more connection at a time?
What is this error cause?
Quote:
The connection has timed out
The server at[url]is taking too long to respond.
VPS Spec.
Quote:
Nixcon
Dual 2 Core
4 GB RAM
I have a client trying to log in via ftp. They cannot log in and get this error.
[14:36:05] Resolving host name "www.domain.com"
[14:36:05] Connecting to "IP ex 1.1.1.1" Port: 21
[14:36:06] No connection could be made because the target machine actively refused it.
[14:36:06] Cannot login waiting to retry (30s)...
[14:36:06] Client closed the connection.
I restarted FTP and checked to see if apf was blocking them and neither worked. She is using smartftp and I also had her try filezilla and neither worked.
However I am able to log in fine from my pc using this login info.
I use Charter as my ISP. Normally my connection speeds are VERY fast to the majority of the web. However, my own website has become like molasses in January (it wasn't always this way, or I would have not chosen my host), as can the entire hosting service. For the sake of discussion, I use two networked PC's, one is Win2K and the other is XP. Both are using the latest free version of ZoneAlarm, NO virus checker. I have a Linksys router. Asking for tech support with Charter is equivalent to wanting to discuss the methods for rebooting your PC with someone who didn't grow up speaking English. I've tried, it's useless.
(Warning: my site is about nude art photography, so don't look if you don't want to see that. The site is pencilartist.com, and I am hosted with Lunar Pages.)
I've run tracert several times, and I always come up with a timeout on the first hop.
I've asked a friend to view both my site and Lunar Pages from his Charter account (lives 5 miles from me) and he says both come up in nanoseconds. I've tried various online speed checkers, and they all give blazing results.
Here's the latest tracert:
Quote:
Tracing route to pencilartist.com [216.227.212.182]
over a maximum of 30 hops:
1 * * * Request timed out.
2 21 ms 11 ms 13 ms 10.208.128.1
3 10 ms 11 ms 11 ms 68.186.73.29
4 11 ms 23 ms 13 ms 68.186.73.49
5 15 ms 17 ms 24 ms 12.87.58.5
6 17 ms 19 ms 17 ms tbr1.st6wa.ip.att.net [12.122.111.14]
7 16 ms 15 ms 15 ms 12.127.6.57
8 17 ms 19 ms 25 ms so-3-2-0.gar1.Seattle1.Level3.net [4.68.127.109]
9 19 ms 17 ms 18 ms ae-31-53.ebr1.Seattle1.Level3.net [4.68.105.94]
10 45 ms 16 ms 18 ms ae-1-100.ebr1.Seattle1.Level3.net [4.69.132.17]
11 39 ms 38 ms 33 ms ae-61-61.csw1.SanJose1.Level3.net [4.69.134.194]
12 48 ms 49 ms 40 ms ae-63-63.ebr3.SanJose1.Level3.net [4.69.134.225]
13 41 ms 37 ms 55 ms ae-2.ebr3.LosAngeles1.Level3.net [4.69.132.10]
14 56 ms 57 ms 53 ms ae-78.ebr2.LosAngeles1.Level3.net [4.69.135.13]
15 71 ms 53 ms 47 ms ae-21-54.car1.LosAngeles1.Level3.net [4.68.102.1
08]
16 46 ms 45 ms 44 ms ge1-1.cr01.lax01.mzima.net [64.156.173.126]
17 46 ms 52 ms 52 ms xe1-0.cr01.lax02.mzima.net [64.235.224.182]
18 47 ms 45 ms 49 ms ge2-lunarpages.cust.lax02.mzima.net [72.37.172.2
6]
19 45 ms 60 ms 46 ms ge2-lunarpages.cust.lax02.mzima.net [72.37.172.2
6]
20 48 ms 47 ms 45 ms lioba.lunarpages.com [216.227.212.182]
Trace complete.
So is the problem just in my local connection? What is happening?
I have 3 servers, but one of them has some problem.
When Internet connection is slow and I try to access any webpages on this server, very often I get just a blank page or "The connection was reset" error. When I refresh page, it loads normaly. Sometimes it happends on each 5th-10th click.
It happends only with one server.
I have a vb forum that keep sending me email errors: max_user_connections. I've increased the setting in my.cnf to 2000 (max allowance) and still getting error.
What's possibly are the other reasons? Anyone has any idea?