Server :: Request From Unauthorized Host - Boot From Network Using PXE And NFS
Apr 25, 2011
In the sys-log from server there a lot of message like this: Code: Apr 25 10:38:45 server portmap[2569]: connect from 192.168.1.3 to getport(nfs): request from unauthorized host Apr 25 10:38:46 server portmap[2570]: connect from 192.168.1.3 to getport(nfs): request from unauthorized host 192.168.1.3 is a client that want to boot from netwrok using PXE and NFS. However it doesn't boot and enters (initramfs) prompt. Seems that the server deny the connection from client.
View 5 Replies
ADVERTISEMENT
May 8, 2010
I have been thinking lately about the number of computers connected to the internet that become "zombies" for sending out span (or worse) when they are attacked with ssh over the internet using some kind of script. Today, I read an article in a magazine about internet detective work when you find that there has been an unauthorized attempt to connect to your machine. According to this article, almost any computer connected to the internet is attacked very frequently and the log files of that computer will show this. I have seen these in my own log files in the past.
I have learned a number of ways to track down the attacker (to a very limited degree). But what I would like to know is a relatively easy application to run and understand to monitor my network traffic and find these attempts quicker. I know I have probably almost nothing to be concerned about, but I would like to be able to head this kind of problem off. I have a number of machines connected to the net and each other and my wife does a lot of business on the internet. So, besides becoming a bot for some criminal, I don't want any credit card details stolen.I have read about Wireshard, snort, etc. Is there an application (with gui preferrably, but not mandatory), that is novice compatible that will let me monitor this?
View 11 Replies
View Related
Aug 2, 2010
we have a problem with dhcpcd at boot time on any openSUSE version from 11.0 to 11.3. It seems that a number of workstations never send out DHCPDISCOVER or DHCPREQUEST at boot time, we have verified this with packet dumps. The dhcp client progress bar is displayed on the console but eventually times out, goes into background and the system continues booting.This is a problem because the timeout takes a long time and users have to wait. Sometimes the display manager is even started but users cannot using LDAP authentication. Eventually these systems just continue to use their old lease and networking works.Curiously, when we do a network restart after boot, the clients send DHCPDISCOVER/-REQUEST normally, we only have this problem at boot time.
On the server side we're using ISC dhcpcd-1.3.22pl4-223.13 on SLES 10 SP2. I have read about others who had the same problem, they switched from dhcpcd to dhclient. I have also tried this, but for us dhclient is not an option for a number of other reasons. Another thing I have tried is setting DHCLIENT_SLEEP ("Some interfaces need time to initialize. Add the latency time in seconds")o two minutes to give the interface time to initialize.nfortunately this didn't change anything.
View 6 Replies
View Related
Jun 25, 2010
how to redirect all client http request to https request in squid
View 1 Replies
View Related
May 18, 2009
I am running a 2 NIC system with the routing table for eth0 allows user access to the internet,etc. and eth1 routes to another private network (192.168.x.x). eth1 is configured to handle DHCP requests.When a device connected via eth1 boots, it requests an IP from the DHCP server. Using tcpdump, eth1 is receiving the request but is not offering a lease.dhcp.conf seems to be configuring the DHCP service correctly. and dhcpd is running.The host is running Red Hat Enterprise Linux (Server Edition) 5.1. Perhaps I need to modify fire-wall rules (or disable them on eth1 altogether)?
View 2 Replies
View Related
Jan 22, 2011
I'm having some basic doubt! Consider 5 virtual domains has configured under a same server. I mean 5 different domains under same IP. Eg. mydomain1.com and mydomain2.com have IP 208.27.1.89. So when web browser request for mydomain1.com name server return IP address 208.27.1.89. Then browser contact IP 208.27.1.89 on port 80. Here comes my question how does apache know that the browser is looking for mydomain1.com not mydomain2.com. How apache differentiate the request for it's virtual hosts? By the way, what is a virtualhost ?
View 1 Replies
View Related
May 11, 2009
I am new in linux,I installed apache-tomcat on fedora.I can view all web pages on localhost:8080 but when I try to view them by server's url address from another computer, I don't get respond.Can it be a firewall problem or something else?
View 4 Replies
View Related
Mar 5, 2011
Apart from the fact firef*x gets confused when my laptop is not connected to the internet... (Please click here grrr)Have you figured out a way to load a separate hosts file when booting in standalone? Presently I swap one host file for the other, usually after boot. Restart apache. Running LAMP on laptop now. It practically grinds to a halt when it isn't connected to my server
View 1 Replies
View Related
Sep 8, 2009
Many of mails sent from my mail server that are in Queue;The main reason is deffered by domains like yahoo,aol,etc.but there is one more error that i keep getting and that is Host Unknown,Below is an example from mail log,The catch is,test mail sent on the same email id sent from my personal mail from the same server i.e. url was deliveredHowever,another mail containing client information sent from customercare@mycompanysdomain ended up in queue.
There are more examples of the same,around 20 domain have the same problem.
Sep 7 14:33:46 server2 sendmail[24591]: n8793jiC024589: to=<abc@xyz.fi>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=163672, relay=xyz.fi., dsn=5.1.2, stat=Host unknown (Name server: xyz.fi.: host not found)
Sep 7 22:09:42 server2 sendmail[6407]: n87Gdffa006403: to=<abc@def-fgh.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=152474, relay=def-fgh.com., dsn=5.1.2, stat=Host unknown (Name server: def-fgh.com.: host not found)
View 2 Replies
View Related
Jul 29, 2011
My organization is running a VMware vSphere based platform. On top of that we have a Sun Gridengine cluster consists of a number of ubuntu VMs.At the moment, we deploy new cluster nodes from the VM template. Although it already saves us lots of time, we still need to configure the network, host name, register DNS record manually.In a near future, we will need to add 100+ more hosts to the cluster. So we are seeking a automated deployment so that a VM does the following during its first boot:
1)configure the network for the correct IP with DHCP or manual.
2)request a designate host name (maybe from a pre-defined datasource?) and configure host name.
3)register itself to our DNS servers.
We don't really have experiences for running big cluster. So welcome to share your opinions and experiences.Specially I'd very keen to find out if there is any well-proven solution right there or I will need to implement from the scratch.
View 7 Replies
View Related
Oct 30, 2010
I just installed (n this 11.2 system) vmware server (v 2.02), to have access to a few small systems. One of them is a 11.1 guest which I just upgraded to 11.3, successfully (almost).
I have a problem, though: from the host I can not ping/ssh the guest.
Guest to host works fine (including names).
Code:
The firewall is down on both sides. I don't see anything with iptraf in the guest. The IP addres of the guest is correct, unless I'm too tired to see.
Why?
Code:
View 9 Replies
View Related
Jan 11, 2011
I am trying to host a local website(an wiki application) within a network. Is it necessary that all the files I need to upload should be in the var/www?
View 8 Replies
View Related
Sep 29, 2009
1) My Internet connection is COMCAST with a router box and one public IP address.2) My web server is Apache using 10.1.10.200 as its address.3) Now I want to add another host name (www.myhealth.com) on my server. I did DNS forwardin (with Godaddy) to my COMCAST static IP address.4) I also added (in my httpd.conf) a block for virtual hosting
View 4 Replies
View Related
Jan 27, 2009
The internal network is behind nat done by the PC Router.The TP Link is recieving wireless signal from outdoors and it has switching and basic routing capabilities. I'm using the PC router for better routing options.PC Router (or R for short) is a triple-booting machine - Linux, FreeBSD and Windows. It has two lan cards - external (ext_if) - 100Mbps Realtek 8139 and internal (int_if) - 1Gbps integrated Realtek 8169.The problem is that all traffic from R to the network is slow - about 5-20K, while the traffic in the oppoiste direction is all right - about 10MB that is fine for 100Mbps cables, NICs and switches. The problem persist no matter the OS the pc R is running.I've tried some debugging on the situation as follows:
- put another PC at the place of R - everything is fine. That exclude the possibility of damaged cables, RJ-45s, switches and etc.
- connected both of the NICs to the Internet while the internal network is being disconnected and they both work fine (no delays)
- traffic shaping is not running
- there is nothing in firewalls except NATing the internal network (and it is working fine). Actually these firewall rules have been operational for more than months and everything was fine untill a week or two ago.
- changed the internal NIC with another
- connected the internal network directly to the TP and all of the PCs are getting good network performance. Then connected the R machine to the TP as well and there was good performance between the internal network PCs and R.
- R has good performance to the TP. In fact everything has good performance directly to the TP (when not connecting trough R).
- the problem persist only between R and machines from the internal network.
View 2 Replies
View Related
Apr 22, 2011
Ok so I just installed Ubuntu 10.10 Server Edition. On the very first boot, everything seems to run perfectly. I can SSH into it from any remote computer with no problems. However, the installation of certain things calls for a system reboot, which 2 days ago never would have been a problem. But now for some reason, the SSH server only wants to work on the very first boot of a clean install. After I reboot it, I get the ssh: connect to host 192.168.0.180 port 22: No route to host error. The absurd part is sshd is running! I've even tried restarting sshd, restarting the server, and using both 64 and 32 bit installs. The only way I can get anything to connect to it is by using ssh localhost. It won't even let me connect using the IP on the local machine!
View 1 Replies
View Related
Oct 30, 2009
Bit of an odd one, this. I've migrated a website from my old server to a new machine. Both servers run Ubuntu + Apache2. Both only serve a single site, apart from the default site.I've flipped the domain name to the new IP address.The trouble is that after moving the virtual host config over into sites-available, with the necessary link in sites-enabled, Apache attempts to serve from the default web root (/var/www) rather than the actual site content (in /var/www/technology). So for example, an attempt to browse.
View 1 Replies
View Related
Jan 12, 2010
Tomorrow I decided to dedicate 100% of my disk to opensuse! So I backed up the files from the remaining windows partition, deleted them and expanded the /home partition. Well, I ran into some problems during first boot. I referred to an article at the wiki and fixed it. Although I did some small fixing manually at the fstab file. The system booted! But I can't browse anywhere outside the local network! At this forum I found some info regarding the dmesg |tail command. Here is my output:
biduzido@biduNote:~> dmesg |tail
[ 1256.061852] sr 1:0:0:0: [sr0] Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE
[ 1256.061865] sr 1:0:0:0: [sr0] Sense Key : Illegal Request [current]
[ 1256.061873] sr 1:0:0:0: [sr0] Add. Sense: Logical block address out of range
[ 1256.061882] end_request: I/O error, dev sr0, sector 0
[ 1256.061890] Buffer I/O error on device sr0, logical block 0
[ 1256.062662] sr 1:0:0:0: [sr0] Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE
[ 1256.062672] sr 1:0:0:0: [sr0] Sense Key : Illegal Request [current]
[ 1256.062682] sr 1:0:0:0: [sr0] Add. Sense: Logical block address out of range
[ 1256.062690] end_request: I/O error, dev sr0, sector 0
[ 1256.062697] Buffer I/O error on device sr0, logical block 0
View 6 Replies
View Related
Apr 19, 2010
I am experiencing real buggyness in firefox 3.6.3. Sometimes when I click on any button e.g. this form (submit new thread), I get no response whatsoever. It lacks that responsive feel. Might I mention that it happened some of the time. Its probably not because of the ISP because I didn't have any problem before when I was using Vista. Maybe it was because I meddled with things like this and tweaking some stuff in the about:config. I'm out of ideas.
Box: openSUSE 11.2 | GNOME 2.28.2 | Acer RS740DVF | AMD64 X2 5600+ | Radeon HD4670 | 3GB RAM
View 3 Replies
View Related
May 12, 2011
I have an opensuse 11.3 install which I want to set up as a network boot server to install Solaris 10 on a Sun Ultra 10 client. According to what I've read, this requires rarpd and tftpd which I've set up on opensuse, but also bootparamd which I can't find for 11.3. It seems it was last included with opensuse 9.2. Does anyone know if it's available, if I could use the suse 9.2 version, or any alternative?
View 3 Replies
View Related
Feb 1, 2010
I recently installed two PC with debian lenny (kernel 2.6.26). One is called serveur-debian1 and the second one serveur-debian2. I have installed gnome,samba, mysql5, apache2, php5, and Virtualbox,bridge-tools on them. On serveur-debian2, i installed an other virtual debian lenny with apache2,mysql5,php5,nagios and centreon on it to view my network. I remember having installed a soft to access nntp on serveur-debian2 in order to test nagios.
Since a few days, i have problem to access to my servers. rom my windows 7 client, i try to ping serveur-debian1. Response is OK but not for all resquets Always from the same computer, i try to ping serveur-debian2. Response is OK but not for all again.
When i launch a ping on serveur-debian1 and serveur debian2 at the same time i have:
ping 1 to 10: serveur-debian1: response OK
serveur-debian2: no response
ping 11to 14: serveur-debian1: no response
serveur-debian2: response OK
ping 15 to 25: serveur-debian1: respone OK
serveur-debian2: @ip serveur-debian1 network unreachable (there's no error, it shows me the ip of serveur-debian1)
If i switch on the debian virtual server on the serveur-debian2, and i ping it at the same time, the response is OK for all resquests. The problem is very strange. I can't have a correct connection and when i launch a request from a software which access the mysql server, the requests failed ...
View 4 Replies
View Related
May 4, 2010
Anyone know what this signifies in the Apache logs files:
Code:
[Tue May 04 20:56:06 2010] [error] [client *******] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
[Tue May 04 20:56:06 2010] [error] [client *********] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
[Tue May 04 21:05:18 2010] [error] [client ********] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
[Tue May 04 21:05:18 2010] [error] [client ********] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
View 2 Replies
View Related
Jul 25, 2010
I'm running SUSE 11.3 on a Dell Inspiron 1501. I'm trying to network it with my Windows 7 and XP boxes. I've installed Samba, activated the services Samba needs and add myself as a Samba user. My problem is that I can see and access files on the laptop from both of my desktops running Windows, but when I try to access them from the laptop I get a message saying the server timed out whenever I try to access my workgroup.
View 8 Replies
View Related
Nov 2, 2010
when I boot my PC I get two password request, one is for it to be able to log in the wifi catcher and the other is just a pain in the ***, how can I set it to get just one again,
View 1 Replies
View Related
Feb 1, 2011
I have this annoying problem, when I boot my PC I get two password request, one is for it to be able to log in the wifi catcher and the other is just a pain in the ***, how can I set it to get just one again, or what could have happened? because I before I just got one.
View 2 Replies
View Related
Mar 11, 2011
has my Ubuntu machine been cracked?
machine on home lan
192.168.0.102
it is the DMZ from router
ufw on (ports open for aMule)
sshd installed
[Code].....
View 2 Replies
View Related
Apr 6, 2011
A colleague of mine was studying at the University of Vienna and saw an application which was based on linux whereby other pc's booted from it and if on the server they had set it to force a clean install on that PC it would download and install a windows image. Does anyone know of the app or could point me in the direction of a similar app.
View 5 Replies
View Related
Jul 28, 2010
When I try to add a printer using this web interface.I get stopped at authentication required.I put the root login and pass but
401 Unauthorized.Enter your username and password or the root username and password to access this page. If you are using Kerberos authentication, make sure you have a valid Kerberos ticket.
View 11 Replies
View Related
Feb 23, 2010
I'm using NuFW but I don't know how could I have a redirection if the user try to go on a unauthorized website... On this moment, my web browers continue to try to join the website, even if nufw has already send a negative response. I would like that my browers redirect me on a other page, how could I do?
View 1 Replies
View Related
Aug 30, 2010
today I tried to configure a network route to a host for testing my network interface. Code: route add 192.168.1.15 eth0 As I have to eth interfaces and both interface got their IP from DHCP (192.168.1.11 and 192.168.1.12) and are in the same subnet, I shut the other interface down:
Code: ifconfig eth1 down Then I tried to test the interface by doing a ping to 192.168.1.15.
Problem: When I unplug the cable from eth0 (and eth1 is still plugged) the ping still works. Somehow my linux (it's debian) powers up again eth0 and pings over this port.
How can I stop my linux doing this. I just want to have the route added only on the one interface - not the other. Is it maybe some case of a default-gateway?
View 5 Replies
View Related
Mar 19, 2009
I'm doing a research to protect my pc from physical access. What I'm facing here is that my company created a program for fedora 8 and plans to sell the unit away. We created a function where you can configure the program using any web browser from a network so we do not want anybody to have access to the fedora except for out personnel.
Based on my research, I've found [URL] this guide to protect people from accessing grub and single user. I am currently researching on preventing others to clone the harddisk. I would like to know if there are any other methods to prevent people from unauthorized access to fedora.
View 14 Replies
View Related
