I've installed (Slackware 12.2) Cisco AnyConnect Secure Mobility Client for vpn connection (it is OpenSSL based app). When I'm trying to connect using this agent I get the error
Code: AnyConnect cannot confirm it is connected to your secure gateway.The local network may not be trustworthy.Please try another network.I don't know much about vpn. Any help are very welcomed.
recently i have combined 2 machines into 1. after doing this, the ping to the new machine stops, for no apparent reason, and consequently all traffic to/from the machine also stops. when using the two machines individually this never happened.Lastly, if i restart the network, it kills everything (like the network just wont restart - it reaches the last interface and hangs), and if i reboot the machine, it seems to be fine for about 3-4hours.has anyone seen anything like this when connecting a large number of hosts to 1 gateway, using linux as the router?
View 2 Replies View RelatedIn my work I am trying to connect my home server behind symantech gateway but I cannot but when I try to connect with telnet to ssh port I can make connection.How can I connect my server via ssh client.
View 11 Replies View Relatedi have an ubuntu server box as my gateway and firewall. for days at a time itll run fine, then one or two days out of the week, it will drop connection often because it drops its ip addr. when renew an ip, itll work fine for about 5 minutes and drop again.ive tried different nics, different wire, my logs dont mention anything, my cron files dont have anything suspicious.
View 8 Replies View RelatedI'm having a problem with Subversion. When I try an "svn up" it gives me this error message:
SSL handshake failed: Secure connection truncated
I'm running Ubuntu 10/4 but I also had this problem with 9/10. Does anyone know what this error message means? It appears to be an SSL problem but it's not clear to me what exactly the problem is. I do not have this problem with svn on my other office computer, nor my home computer. FYI, I'm running subversion on the Regina project.
The full error message is this:
Code:
svn up
svn: OPTIONS of '[URL]': SSL handshake failed: Secure connection truncated [URL]. Although I don't think there's anything specific to Regina about this svn problem, as I mentioned, I can "svn up" from home, or from my other office computer.
Several of our servers that do not have direct exposure to the Internet have the following entry appearing in their respective /var/log/secure files.Are these messages harmless? If so, is there any way or reason to suppress their appearing in the log files?
View 1 Replies View RelatedI use a secure connection to reach company network from outside. There's a client application "Juniper network", which creates the secured tunnel to a company network. However, the connection never survives more than 8 seconds, when it goes disconnected with the message "Route monitor alarm". From my recent search for a solution I've found that this error is caused by a change in a route table, which violates a connection policy.
"This disconnect is typically triggered by a change in the routing table of the client machine, the change is such that the split tunnel policies defined by the administrator will be violated" - from [URL]
This is how a routing table looks before, during and after the connection attempt:
Code:
[vs@dilbert network-scripts]$ route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.64.64.64 * 255.255.255.255 UH 0 0 0 ppp0
xxx.xxx.xxx.0 10.64.64.64 255.255.255.255 UGH 0 0 0 ppp0
[Code].....
I am running an Ubuntu Server on a VirtualBox VM running on my windows machine. So I've created a self-signed certificate using the following tutorial: [URL]
From this tutorial I'm left with 3 files:
server.key
server.csr
server.crt
Then I found this very similar tutorial that has an extra bit on installing the certificates in apache: [URL] So I followed it's instructions which boil down to this:
[Code]...
So I'm thinking this should work now. However in Chrome I get: SSL connection error Unable to make a secure connection to the server. This may be a problem with the server, or it may be requiring a client authentication certificate that you don't have. Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error. IE8 gives me a typical "Internet Explorer cannot display the webpage" Note that [URL] fails while [URL] works fine, so it's definitely something in my ssl setup I'm thinking.
The Chinese below says the site is not trustworthy to go. What should I do?
http://www.4shared.com/photo/XqdcW0Qc/fig150.html
Very new to ubuntu, really liking it, however I am curious about how trustworthy the update manager is. For instance, could someone sneak malware into my system with it?
View 2 Replies View RelatedI'm writing a script that tars, bzips, and encrypts a set of files to my GPG key and then (ideally) uploads the files to a backup directory on my school's web server. I want to run it daily as a cron job. Problem is, the web server only allows connections with scp and sftp.
Neither program allows specifying a password as a switch. I want to run it as a cron job, so I won't necessarily be present to type the password, and I'd like to just be able to specify the password in the script.
"Ah ha!" you're thinking. "He needs to generate a keypair and set up ssh to not require a password!" And I've found tutorials on the web that show me how to do just that. Problem there is that they all require me to install software and/or access files outside my home directory on the remote machine.
I have zero access to anything other than my own home directory on the remote machine. None. Nada. Zip. I can't install software, access files in /var or /etc, or find out anything about running processes. The local IT priesthood won't give me any information about what's running on the machine or how I can connect to it (and has made a point of telling me that they don't care for Linux users and I should stop asking questions).
I'd really like to to just be able to specify my password in the script. I understand that scripts are really just text files and that anyone who can get at my desktop computer can read them with a text editor and that this would reveal my password and blah blah blah, but I'm willing to trade that particular risk for the convenience of not having to be awake and monitoring the computer when the cron job is running.
Is there any way to specify the password in the script itself? I'd be happy using either sftp or scp (I've used them both successfully from the terminal to transfer files to this machine).
I want to secure my internet connection by hiding my ip with another ip so I can log to my server with 2 ips . and when someone is tracing the "fake" ip it wont affect me .
Is my ssl connection secure if I'm going through a proxy. Is it possible to craft a malicious proxy to steal/crack authentication?
View 2 Replies View RelatedI have installed eeebuntu NBR on my laptop and it looks great on a 17 inch widescreen. It looks so different from the usual interface that I get people ask about it and I can evangalise without being considered a boring weirdo! Anyway, I have one problem. Every time I boot I have to run the following command.
Code: sudo /sbin/route add default gateway 192.168.0.1
How do I get this to happen automatically (as it normally does)?
My server is suddenly getting giving the following error: Quote: Secure Connection Failed An error occurred during a connection to inenergy.dvrdns.org. SSL received a record that exceeded the maximum permissible length. * The page you are trying to view can not be shown because the authenticity of the received data could not be verified. * Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site. I had been trying to configure the server to do secure logins (before Christmas) , but I don't think I had completed the configuration and I'm not sure how to reset it so that I can start again.
View 1 Replies View RelatedI have a compaq pressario v6000 with broadcom wireless card bcm4312. I was running Suse 11.3 and one day the wireless stopped working so after several hours googling I gave up and installed 11.4 but I have exactley the same problem I can connect to my bt openzone or btfon network but not to my own secure network I have tried everything I can think of including disabling security settings on my homehub but I can't get it to work at all I have used network manager and traditional I just can't get it to work.
View 6 Replies View RelatedI followed the tutorial found here [URL] but when I try to access [URL] I get the following:
Code:
Secure Connection Failed
An error occurred during a connection to www.mydomain.com.
SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)
Not sure what I might have done wrong... I have retraced all of my steps and I don't believe I missed anything.
Since important information like pass-phrases is sent via a Bluetooth link, I wonder how secure this is. I think it must be quite a weak point.
View 3 Replies View RelatedI have the following details on my system:
- CentOS
- RHEL 5
- WebWare for Python
We have an exisiting website written in Python and was developed by other entities and now being maintained by us. We want to run the website using secure connection (HTTPS), I tried reading this article and successfully executed every instructions but still failed to run the website using HTTPS.
[URL]
The way we run the website is using port 8080, e.g. [URL] I am sure I am missing something here, first, I am still looking on where does the port 8080 comes from since I've checked the httpd.config and it wasn't there.
i want to secure the USB port by any external device connection. so i need the code of detection of an external device when plugged in the USB port.
View 1 Replies View RelatedI recently upgraded a 11.0 installation running on Xen Server to 11.3. I am experiencing frequent network disconnections now. The ip address and default gateway is assigned statically. However, the system seems to ignore the default gateway after a while. Then after several minutes it seems like it comes back.
Code:
root@poe5e:~/ > route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.111.0 * 255.255.255.0 U 0 0 0 eth1
172.16.107.0 * 255.255.255.0 U 0 0 0 eth0
link-local * 255.255.0.0 U 0 0 0 eth0
loopback * 255.0.0.0 U 0 0 0 lo
default 172.16.107.254 0.0.0.0 UG 0 0 0 eth0
root@poe5e:~/ > ping 172.16.107.254
PING 172.16.107.254 (172.16.107.254) 56(84) bytes of data.
64 bytes from 172.16.107.254: icmp_seq=1 ttl=255 time=0.515 ms
64 bytes from 172.16.107.254: icmp_seq=2 ttl=255 time=0.484 ms
64 bytes from 172.16.107.254: icmp_seq=3 ttl=255 time=0.496 ms
64 bytes from 172.16.107.254: icmp_seq=4 ttl=255 time=0.473 ms
^C
--- 172.16.107.254 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 2997ms
rtt min/avg/max/mdev = 0.473/0.492/0.515/0.015 ms
root@poe5e:~/ > traceroute orl3akm1n
traceroute to orl3akm1n (10.111.19.19), 30 hops max, 40 byte packets using UDP
1 172.16.107.250 (172.16.107.250) 0.405 ms 0.398 ms 0.357 ms
2 * * *
When my sessions suddenly die and I have to coax it into routing correctly again.
I am trying to write a simple client that opens a secure connection. My intent is to use the OpenSSL library.
I am following this tutorial: [URL]... The tutorial mentions that I need a trust certificate store called TrustStore.pem. However, I can't find that on my machine. Is there a way to generate it? I separately downloaded the source from the OpenSSL website. The source distribution doesn't have it either. There is a whole bunch of .pem files. Can I use any one of them?
I currently run Win 7 and want to upgrade my computer to a server to accomplish the following... I have a VPN Service. I want the server machine to connect to a VPN providing a secure connection. Then, I want all the machines in the house (windows based) to connect through the server onto the VPN connection. Hopefully this makes sense. Would it be better to stick to Windows Server 2008 or switch to Ubuntu?
View 5 Replies View RelatedI'm an Oracle DBA and started working for my current employer about 4 months ago. This past weekend an alert re: FS space brought my attention to /var/spool/clientmqueue (full of mail re: cron jobs) and the fact that sendmail is not running on our Linux servers.I'm told that the IT security team deemed sendmail too vulnerable so we don't run it.Aside from FS filling up and missing notification of issues with crontab entries, I'm concerned that we may be missing notification of potential issues. In other Unix/Linux environments I've seen emails from the print daemon when it experienced problems with specific jobs.
Are there other Linux facilities aside from cron and lpd that use email to advise the users of possible issues? Are there ways to secure sendmail or secure alternatives to sendmail? My primary need/desire is to make sure that emails regarding issues on the server get to the appropriate users. Secondary goal would be to have the ability to use mailx to send mail out. There is No need/desire to receive mail from outside.
I am trying to get a Linux (Slackware 13.37) working in a Windows networking environment. The IT support for this organisation does not extend to Linux support, so I'm limited in what help I can get for this.
I'm trying to get to the point where I can get to the internet to download what I need on this Linux machine.
The situation is this (*fictitious addresses used) -My Linux machine uses a fixed IP address (10.100.150.21)
My Windows machine uses a DHCP assigned IP address (10.100.150.213)Both Linux and Windows machine are configured to access the gateway server (10.100.150.1)So, I can ping the Linux machine from the Windows machine and vice-versa.I can ping the gateway machine from the Windows machine.I can browse Windows Shares on the network via SMB from the Linux machine.I CANNOT ping the gateway machine from the Linux machine with the Destination Host Unreachable message being the error message.
For actual internet access I need to access a proxy server but since the Linux machine can't even ping the gateway server, it fails to ping the proxy.Now, I have been told the gateway is a HW based router and for Windows machine they use some software for authentication to connect to the network. This software isn't available for Linux, so that's why I've been told to use a fixed IP address.My experience of networking is pretty basic and most of the Linux setup is done via running Slackware's setup program.
I have a server with 192.1.9.10 ip address and I want to define two gateways with ip: 192.1.9.4 and 192.1.9.254 on it but I don't know how I can do it. I don't have professional information in linux.
View 1 Replies View RelatedI've rent a server from a Germany data center,They use a single IP as their gateway that is not in range of my servers IP,Strangly server is working well and when I use 'route -n' command the gateway which is in other subnet appears properly./etc/sysconfig/network contains no gateway IP and I don't know how they set the default gateway while after reboot the gateway is the same, also the IP is static and there's now DHCP.I need to know how they did it so I can do the same on my VPSes.
View 1 Replies View RelatedI have 2 lancard eth0 connected to local lan eth1 connected to bsnl broadband connection, I have centos 5.3 here I configure broadband in dial up mode. I am unable to ping outside world and unable to access some site but able to access internet like google etc, configure file is as:
eth0 Link encap:Ethernet HWaddr 00:14:85:96:1C:A7
inet addr:182.x.x.24 Bcast:1182.16.255.255 Mask:255.255.0.0
inet6 addr: fe80::214:85ff:fe96:1ca7/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:736487 errors:0 dropped:0 overruns:0 frame:0
TX packets:859918 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:122617961 (116.9 MiB) TX bytes:772581200 (736.7 MiB)
Interrupt:185 Base address:0x6000
eth1 Link encap:Ethernet HWaddr 00:08:A1:7B:A0:F9
inet addr:192.168.1.2 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::208:a1ff:fe7b:a0f9/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:658246 errors:0 dropped:0 overruns:0 frame:0
TX packets:620456 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:728744445 (694.9 MiB) TX bytes:100768525 (96.1 MiB)
Interrupt:193 Base address:0x4000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:21198 errors:0 dropped:0 overruns:0 frame:0
TX packets:21198 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:5867015 (5.5 MiB) TX bytes:5867015 (5.5 MiB)
ppp0 Link encap:Point-to-Point Protocol
inet addr:59.xx.xx.xx P-t-P:59.xx.xx.1 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1460 Metric:1
RX packets:793 errors:0 dropped:0 overruns:0 frame:0
TX packets:968 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:528818 (516.4 KiB) TX bytes:148274 (144.7 KiB)
[root@venus ~]# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
59.xx.xx.1 * 255.255.255.255 UH 0 0 0 ppp0
192.168.1.0 * 255.255.255.0 U 0 0 0 eth1
169.254.0.0 * 255.255.0.0 U 0 0 0 eth1
182.xx.0.0 * 255.255.0.0 U 0 0 0 eth0
default * 0.0.0.0 U 0 0 0 ppp0
I am unable to ping gateway of ISP IP i.e gateway of static IP.
I'm trying to set up a secure web tunnel at home I have an Ubuntu box (desktop), a Mac, and a Windows 7 box. I use all of them for different reasons. I want to be able to route traffic from my browser through my Ubuntu box. I have done this before with proxy servers abroad, but I want to do it using ssh and my box at home so I don't have to pay for a service i.e (Secure Tunnel)etc.
I followed the instructions at http://bit.ly/hAnp6u. However, using my Win7 box, after I set the browser part per the instructions, I get no connection from the browser.
I have one scenerio ,I want to use my Linux PC as residential gateway .I have only one NIC connected to my PC(I cannot connect more) to handle this problem I am using switch . All the devices including my PC are connected using switch (Please refer attached file). I am not sure how can I achieve this ? I am familiar with NAT and DHCP but do not know is this possible in this case?
View 11 Replies View Related