Ubuntu Networking :: Network Provider Blocking PC's From Accessing Web?
Feb 21, 2011
Today I have tested the networks at several schools in the area,and at the town hall. It is not possible to surf on www on any of these networks using a PC running Linux. My conclusion is that there has to be some kind of filtering of traffic that exclude PC's running Linux. From the same PC I can send and receive email, I can ping and trace (mtr) addresses on www, and I can view webpages that are on servers on the inside of the filtering-gateway. The filter used is InterScan Web Security Virtual Appliance from TrendMicro
I have also demonstrated for the admins at the town hall that using Linux-PC on a "clean" network, surfing is no problem. By doing these small tests I have demonstrated that Linux is not the problem.
Tomorrow I'm going to visit the network providers admins, so that they could see what happens when a PC running Linux tries to access www. What kind of things should I test to document, or find the problems? So far I have just used MTR to document slow respons, wget --no-proxy to document that www hangs and ends time out, ifconfig to show NiC settings, and route.. Could this be a problem with /etc/resolve.conf?
The network provider is the same company that refused to turn on IMAP on the exchange servers, resulting in 3 week without mail at our school. All the other schools had to upgrade Outlook in order to connect to the new exchange-server with MS MAPI settings. MS Gold partners are so nice...
View 2 Replies
ADVERTISEMENT
Feb 21, 2011
I have tested the networks at several schools in the area,and at the town hall. It is not possible to surf on www on any of these networks using a PC running Linux. My conclusion is that there has to be some kind of filtering of traffic that exclude PC's running Linux.
From the same PC I can send and receive email,I can ping and trace (mtr) addresses on www, and I can view webpages that are on servers on the inside of the filtering-gateway. The filter used is InterScan Web Security Virtual Appliance from TrendMicro I have also demonstrated for the admins at the town hall that using Linux-PC on a "clean" network, surfing is no problem. By doing these small tests I have demonstrated that Linux is not the problem.
Tomorrow I'm going to visit the network providers admins, so that they could see what happens when a PC running Linux tries to access www. What kind of things should I test to document, or find the problems? So far I have just used MTR to document slow respons, wget --no-proxy to document that www hangs and ends time out, ifconfig to show NiC settings, and route...
The network provider is the same company that refused to turn on IMAP on the exchange servers, resulting in 3 week without mail at our school. All the other schools had to upgrade Outlook in order to connect to the new exchange-server with MS MAPI settings.
View 6 Replies
View Related
Jun 3, 2010
How can I block certain countries from accessing my server in any capacity? Is this possible? What do I need to add to my /etc/hosts.deny for this?
View 4 Replies
View Related
Feb 2, 2010
I have an ubuntu 8.04 dedicated server running openssh which I am having problems with.
The server is based in England yet I am currently working from Thailand. Slow speeds and timeouts I am used to but it is now over 24hr since I have managed to SSH the server (from here).
I just tried remote desktop on my PC back in the UK and this connected straight away through both SSH and SCP.
Thinking that it may be the IP being blocked from my works network I switched off wifi on my phone and tried to connect over the data network a few times with no luck.
Another strange problem is that when we got the server it was locked into a chroot jail which SSH(22) always leads into. After accessing SSH on port 22 I have to run a break script to gain root access. The sshd_config file says that the server is listening on port 57 yet I have never been able to access this.
Code:
> netstat -a | grep ssh
tcp6 0 0 [::]:ssh [::]:* LISTEN
> iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
[Code].....
View 1 Replies
View Related
Feb 3, 2011
I am trying to keep linhost274.prod.mesa1.secureserver.net (IP 208.109.14.77) from accessing my machine. Several times per evening (as far as I see) it connects to my machine, each time on a different port, and pushes up data transfer. I can't find what it does, it just pushes a GB or more over the line and then stops. I try to keep it out with UFW:
[Code]...
View 6 Replies
View Related
Dec 1, 2009
I can not stablish PPTP VPN because SELinux blocking Network Manager.
I get the following:
Summary: SELinux is preventing NetworkManager (NetworkManager_t) "unlink" to ./reso
Code:
I'm attaching complete alert.
View 1 Replies
View Related
Oct 10, 2010
I have a network where several machines are connected through a switch. I'd like all machines to be able to read/write to/from the hard drives of the other machines. for example:
machine1 will read/write files that are on the hard drive of machine2
machine2 will read/write files that are on the hard drive of machine1
machine3 will read/write files that are on the hard drive of machine1
machine3 will read/write files that are on the hard drive of machine2
etc etc...
all of this reading/writing will be done through the terminal, and programatically. rather than SSHing into a machine to read/write files from it, I'd be happy to set up some 'conventions' on how to access hard drives of various machines. for example:
'hdd1' will refer to the hard drive of machine1 (that has the static IP of 192.168.0.1).
'hdd2' will refer to the hard drive of machine1 (that has the static IP of 192.168.0.2).
'hdd3' will refer to the hard drive of machine1 (that has the static IP of 192.168.0.3).
etc etc...
this way, when I want to read/write a file, its PATH will be something like ~/hdd1/myfile.txt; ~/hdd2/anotherfile.txt;
View 4 Replies
View Related
Jun 3, 2010
Currently, his mail is coming in on 2 addresses. He'd like to take the mails from one source and add it to the other.
The idea is to fetch the mails from the least used address - on the provider's POP server - and forward it to the other address. He can use the SMTP server from the same provider to send off the forwarded mails.
This operation would be cron'ed to run every few minutes.
View 1 Replies
View Related
Jul 7, 2010
I would like be able to access packets coming off the network with the hopes of coding a primitive packet sniffer for learning purposes. I would also like to be able to piece together my own packets and send them out on my network. Eventually, I would also like to write a simple firewall so I want the capability to drop packets as well as let them pass. I assume I will have to access the kernel with some system calls to do this, any one have any information or resources that could help me on this project?
View 1 Replies
View Related
Mar 30, 2010
I find it hard to explain but I will try. I have a small network using CentOS 5.4 with a static ip and I am running a web server which has an local ip of 10.1.10.100 and has the domain name of www.inwoon.net.My problem is I have other computers on the same network and can only access the web server using 10.1.10.100 instead of www.inwoon.net. am finding it to be impossible to test my web site work using external links that call back to my site
View 8 Replies
View Related
Feb 16, 2011
I'm using Ubuntu 10.10 since 2-3 weeks. First I tried live CD and the OS seems to be very good. So i installed it on my laptop.So far i had no problems until I tried to access the shared network folders of my Server running on MS Windows Vista and another trial PC running WindowsXP. I'm trying to solve this since 2-3 days, I haven't found a solution.1st of all my network works fine. All computers can ping each other and as the laptop had Windows XP installed the server was accessable.1st I installed the SMB4k tool with this program. I could see the computer names, but as soon as I select a Windows computer the tool searches and nothing happens.
I tried a lot of different variations of this command but in the end I receive this kind of error. I also tried to add -o user=username pass=password, nothing changed.After this I searched information about this error, some forum threads I googled are telling the SMB4K tool modifies the /etc/sudoers file and cause this error. So i tried to change it back with some kind of sudo chmod 0640 etc/sudoers but this won't work it seems I can not modify or edit thisw file using sudo.With the pyNeighbourhood tool I could only see my Laptop but not the Windows PCs.At the end I will install Linux systems on all of my PCs, but only if all my tests will pass .
View 1 Replies
View Related
May 5, 2011
Using my laptop, I'm trying to get onto the local library's wireless network, with zero results so far.Basically, I can see the network, but when NetworkManager tries to connect it just spins for a few minutes and then rejects the connection. (Or the connection is rejected by the router) My wireless connection works fine when connecting to my WPA home network.
View 4 Replies
View Related
Oct 27, 2010
I've searched the forums (250 thread limit) for a fix on this, but all the questions seem unanswered or unrelated. My situation is this: I'm running Ubuntu x64 10.10 'Maverick'. I have a cablemodem connection for my Internet access. I have home network running on DD-WRT with the dreadful Linksys WRT54G series router.
My DD-WRT router is 192.168.1.1, subnet 255.255.255.0.
My Linux box is 192.168.1.61, subnet 255.255.255.0.
I have a VyprVPN connection set up successfully on Linux. Mostly everything works great, speed's fine, latency is what I expect it to be. Except... I also run an SSH server to remotely admin the box at port 22, an Apache server running over SSL at port 7001, and a Transmission web client at port 7002 (only secured by basic HTTP realms auth). All of these things worked before I got the VPN working, I'm of course using NAT at the DD-WRT router.
The endresult I am looking for, is to have the security and protection of the VPN (even if it's only perceived) for everything I do on this machine -- EXCEPT on Apache, the Transmission web panel, and the SSH server, which I want to access from the outside world. I have no firewalls running or configured, not even iptables, not even the SPI firewall on DD-WRT. All connections to the aforementioned services from the outside world timeout coming in to the Linux box. They all work from inside my home network (182.168.1.0/24). In case it's needed, he's my routing:
[Code]....
View 2 Replies
View Related
Nov 28, 2010
I live in Sweden and Denmark, and have a Swedish 3G internet provider called 3. They have a special roaming agreement with the Danish company named the same, so that I can surf for free both within the 3 net in Sweden and in Denmark. This has worked very smoothly until recently, when my modem connected to another company here in Denmark, and I was charged for the surfing per MB (a lot of money per MB, luckily I got a warning message in my browser and stopped).The company now says that they cannot block my modem from using all foreign networks except theirs, so they've blocked it from all surfing outside Sweden - which means I cannot surf in Denmark. If I was using Windows, their application however could block the unwanted networks...
But then I saw this field "Network" under "Advanced" in the Network Connections->Mobile Broadband box. What is that for? Can I tell it to connect only to e.g. networks called "3"? I've searched the net for any information about this textbox without success.I'm using Ubuntu 10.04 and the modem is a Huawei E122, which I've got to work with some usbmodeswitch fiddling.
View 5 Replies
View Related
Sep 14, 2011
As too my question, at this time I dont control the router/firewall an I would like to block a port thats used for guild wars on my workstation for a while. The reason for blocking is children have abused it an lost it.In this case I am trying to block outgoing traffic on port 6112. I have tried setting up a proxy server on the workstation, but the game seems to ignore it an jump on. Due to the environment, I enabled the workstation SuSEFirewall2 firewall an tried setting up "lo" as a internal an configure the firewall as a router, then disable 0/0 an configured for 0/0,tcp,443 an re route port 80 traffic to proxy.
When I had my own internet, I had a transparent proxy enforcing rules for access times. So setting up a proxy on each machine would not be a bad thing, even if it took some creative thinking. I am trying, but seem to be missing something.Ideally, I would like to setup a transparent proxy, as my kids have learned alot about system administration an know to check the proxy module. If all they have to do is un check "Use Proxy" an by pass a local proxy server, then I am kinda defeated. An applications such as firefox have a proxy setting they could set to none instead of system
View 9 Replies
View Related
Feb 4, 2011
I configured my pppoe connection using
Quote:
I am well able to connect to the internet using this method.
But once disconnected, when I try
Quote:
To connct again
It gives an error:
Quote:
Error: only members of the 'dip' group can use this command.
View 4 Replies
View Related
Oct 21, 2010
Why is pppoeconf not creating dsl-provider file in /etc/ppp/peers/ directory.I just re-installed Lucid and now facing above prob. I cannot even copy an dummy file to the above path (even using sudo)It does not give any error,but then file is also not copied. I observed after re-installing,old kernels are also visble and i can login in low graphics mode I expected that after fesh install,there would be only kernel..default one..
View 2 Replies
View Related
Mar 15, 2011
I am using Ubuntu 10.04 LTS the Lucid Lynx and gnome interface.
I have just installed a broadband USB device that was detected and all properties were shown.
I don't know to get it dialling to the service provider or what dialler shall I use
View 4 Replies
View Related
Apr 18, 2010
I have the Huawei E160 UMTS Stick with a German SIM from O2. Actually it is a prepaid tariff where I can buy a daily data flat rate. And I am running Ubuntu 10.04 UNR. I use SMS to order and confirm a daily data flat rate and I made this working with gammu. Not the most comfortable but a very reliable solution (see In order to charge the my account or to check my account balance I can either use the Original Huawei Software under Windows or I can put the SIM in my mobile and dial a number code. By entering the code '4444' my UMTS account gets recharged with 10 EUR (debited form my bank account). With the code '*101#' I can check the account balance.
What I want to do: I want to be able to recharge my account and check my account balance with Ubuntu, so without taking the SIM out and putting it into a mobile phone (and obviously without using the original Windows software).Using gammu in order to send the necessary codes did not work so far. When entering gammu --getussd *101# I get the following result:
Press Ctrl+C to break...
USSD received
Status : No action needed
[code]....
View 4 Replies
View Related
Apr 5, 2009
Does anybody use successfully a broadband internet service on Fedora 10? I'm seriously thinking of buying a wireless card but don't know if it will be compatible.
View 7 Replies
View Related
Dec 5, 2009
I am facing some problem while running my tools (electronics tools).Actually my company has changed the internet connection (internet provider). Everything is working fine but it changed my IP address (which is ok) but it also changed my HOSTNAME (which is really starnge for me).And the problem with my tools is that with old connection it's working fine but with new connection GUI mode is not working, only batch mode is working.
View 14 Replies
View Related
Aug 13, 2010
i have a usb modem 3g huawei k3520 that is installed on FC13 minimal only shellli have see that my modem is config with dmesg ....
now i want to create a conection to my provider on boot ... can anyone help me find the files where i create my conection and how can i make my modem to conect autom on boot...????
i m newbie and i don t no very well the shell....
View 3 Replies
View Related
Mar 23, 2010
For system calls, is blocking or non-blocking default in C? Simple question, just am not seeing the answer super quickly.
View 4 Replies
View Related
Aug 19, 2010
Ok here's my setup :
SuSE 10.0 X86 32 acting as my internet gateway and firewall.
eth0 is my internal interface network 192.168.0.0/24 IP 192.168.0.254 dsl0 is my internet connection and is a single ip PtP connection to my ISP.
My internal network is masquaraded onto the external network.
I run an smtp server on my gateway box that I need to be accessable to both the internal and external networks.
However I want to prevent machines on the internal network from establishing connections to external smtp servers, but still alow them to connect to the smtp server on the gateway to send email.
NOTE I do not want to force attempts to connect to [URL] 25 to be re-directed to my internal server I just want to drop or reject the connection.
The firewall up until now has just been configured through YaST, but am not afraid to edit script files if needed
The reason for doing this it to prevent spambots from being able to send through my isp, I keep my own machines clean but sometimes get asked to disinfect machines for other people (family members etc), where I need to connect to the outside world to get updates/virus defs etc, but don't want them spamming from my network.
View 2 Replies
View Related
Sep 8, 2010
I've setup vnc over ssh tunnelling however the Suse firewall seems to be blocking it. On the local host I have this in ~/.ssh/config:LocalForward localhost:5900 remotehost.com:5900 The problem is that this only works when I either disable the firewall or add an exception for VNC. Both of these actions defeat the whole purpose of ssh tunnelling since they leave my VNC port open to the outside world (very insecure).
View 2 Replies
View Related
Sep 14, 2010
My home computer has 11.3 and SuSEfirewall enabled. It connects to the net over the wireless and SuSEfirewall has this connection in the external zone.
I can successfully ssh into this computer from remote (the work computer) but none of the ssh port-forwarded connections work. I'm trying to tunnel VNC over ssh. I also tried setting http on the home computer to serve pages on a high-numbered port (8090) and tunnelling that but it also didn't work - proving that it's not a VNC problem.
Here are the relevant messages from the firewall logs on the home machine:
Code:
I don't understand why this isn't working now, I had the same setup on 11.2 and it worked fine.
The 95.91.92.92 is the public IP address of my home router, I don't understand why a connection would appear to be coming from there when I use ssh-tunnelling?
View 5 Replies
View Related
Dec 25, 2010
I have a device that is working on modbus protocol andI have written a small program(with block TCP read method ) to read its registers via modbus protocol.my program is working very well but except those times that I unplug the Ethernet cable or turning off the modbus gateway during programs work.at this time my program stops on recv system call (if it reach this system call exacly when I unplug Ethernet cable or turning off the modbus gateway during programs work).I changed my source to work in nonblock TCP method, at this time with the same situation my program does not stop/block on recv system call but after pluging back the Ethernet cable or resuming the connectivity situation back it reads data incorrectly .this is my code:Quote:
#define DEBUG
#include <fcntl.h>
#include <string.h>
[code]...
View 5 Replies
View Related
Jan 10, 2010
Printer is connected via USB to server PC running OpenSUSE 11.1 Client PCs are running 11.1, XP, Vista No problem printing from the Windoze machines
Printing is trouble free with the 11.1 client's firewall disabled, but no printer is available with firewall running.
In hopes of diagnosing the problem I figured I'd open everything I could think of until the printer remained available with the firewall running. Then I planned to start removing exceptions one at a time 'til removing one caused the printer to disappear.
I've gone to Yast>Security and Users>Firewall>Allowed Services>External Zone and tried addingSamba Server
NetBIOS server
Samba Client
Samba Server
VNC
[Code]....
View 5 Replies
View Related
Feb 18, 2010
We are switching from an uncapped 512kb line to a 4MB line at the office... One catch though. The 4MB line will only be linked to a 30GB account, without the option to top up. I therefore have been asked to put something in place to regulate what the staff download at work. Basically block movie, music and torrent downloads should be sufficient, but they would also like to have a list of where staff have been in case of abuse. I have tried OpenDNS in the past, but the guys took great delight in getting around this, and did it within minutes... I can't enter a proxy setting into their browsers, because they all have local admin rights on their Windows boxes and will just disable that. How do I do this on a server level, so that they can't get around this?
View 3 Replies
View Related
Nov 17, 2010
I have a remote network that I manage consisting of a DLink DFL-210 firewall/router, and behind that a Dell server running openSUSE 11.2 and a collection of Windows XP/Vista/7 computers.
The Linux box is running OpenVPN as a server (that is how I connect to this network) and a client (it connects to a second server - running XP - at a different location).
The DLink router is the DHCP server and provides addresses on the 192.168.51.0/24 network. The OpenVPN server provides the 10.8.51.0/24 address range.
The remote network that the Linux box connects to is 192.168.54.0/24 via the OpenVPN network 10.8.54.0/24.
I have added routes to the DLink router to route all traffic to the 10.8.51.0/24 and 192.168.54.0/24 networks to the Linux box.
With SUSEFirewall turned off, after I have connected via OpenVPN from my remote computer I can ping all active 192.168.51.0/24 addresses. Other computers on the 192.168.51.0/24 network can ping computers on the 192.168.54.0/24 network. But if I turn on SUSEFirewall, neither of these work. However, I can ping 10.8.54.1 from any computer on the 192.168.51.0/24 network.
How can I set up SUSEFirewall to allow these networks to communicate with eachother?
View 5 Replies
View Related
