Where is traffic destined for a specific TCP port being blocked?
I have a server that is set up to listen to a specific port (1433), and normally there is no problem accessing that port from anywhere. From one of the locations I work, however, I can’t connect to that port specifically. No problems with other ports like 80, 443 or 22, just that one. I suspect the ISP or the local router (to which I have no easy access), but in order to troubleshoot I’d [...]
Continue Reading »block websites in our network
We would like to block users from accessing sites like facebook and all from our network. All the connections are through our router(linux machine). What would be the best way to block the sites on the linux router ? I’ve been using Squid as a transparent proxy and using the proxy to filter access to website and as a local cache. The big advantage of it is that you can rules based on regular expression [...]
Continue Reading »What’s the best way to monitor SQL Server Concurrency issues?
What’s the best way to monitor SQL Server Conccurency issues? Specifically my goal is to reduce or prevent deadlocks and blocking and to catch potential concerns before they become a problem. For example if I were to monitor windows performance counters for memory usage, I would be able to predict when memory issues would become a problem. I’m looking for a similar approach that monitors concurrency problems. As long as you keep in mind that [...]
Continue Reading »Why is php-firewall blocking these ip ranges, isp’s and host’s? where can I found the blacklist?
The php firewall is blocking thees ip ranges for spam. Thats ok, but where is the source for this information? $ip_array = array(’24′, ’186′, ’189′, ’190′, ’200′, ’201′, ’202′, ’209′, ’212′, ’213′, ’217′, ’222′ ); And why is this ip ranges blocked: $ip_array = array(’0′, ’1′, ’2′, ’5′, ’10′, ’14′, ’23′, ’27′, ’31′, ’36′, ’37′, ’39′, ’42′, ’46′, ’49′, ’50′, ’100′, ’101′, ’102′, ’103′, ’104′, ’105′, ’106′, ’107′, ’114′, ’172′, ’176′, ’177′, ’179′, ’181′, ’185′, [...]
Continue Reading »Stop slowing down fast and verbose operations when using ssh over slow connections
I often copy many files between 2 servers connected via 1GBit ethernet while I am connected via VPN and SSH over DSL. The problem is, that the verbose output (1 line per copied file) which needs to be sent over the slow connection to my ssh client and slows down the copy operation (it feels for me this way) I tested this with a testfile created via dd if=/dev/urandom | base64 | dd of=testfile count=10M [...]
Continue Reading »How do I block host name instead of just IP?
I was wanting to block a list of specific hosts, specifically so my server has no access to them at all. I tried using host2ip and entering the result into IP tables , but the IPs don’t seem to lead to the site and I can still access the domains clearly. How can I block say, ‘bad.example.com’ like I can on Windows with the HOSTS file? I assume you’re on some kind of *nix since [...]
Continue Reading »Firewall blocking files using Reg_Ex needs to be adjusted
We have security in our firewall to prevent SQL-Injection from destroying any of our content: Name Type Context Severity Pattern ConfigureCS:select_into signature http-url critical .*[select].*[into].* Edit RemoveCS:select_from signature http-url critical .*[select].*[from].* Edit RemoveCS:insert_into signature http-url critical .*[insert].*[into].* Edit RemoveCS:drop_database signature http-url critical .*[drop].*[database].* Edit RemoveCS:drop_table signature http-url critical .*[drop].*[table].* Edit RemoveCS:delete_from signature http-url critical .*[delete].*[from].* Edit RemoveCS:drop_view signature http-url critical .*[drop].*[view].* Edit RemoveCS:exec signature http-url critical .*[exec].*(%28|().*(%29|)).* Edit RemoveCS:update_set signature http-url critical .*[update](%20|+)(%20|+|.)*[set].* Edit Remove [...]
Continue Reading »Disk IO causing high load on Xen/CentOS guest
Background I’m having serious issues with a xen based server, this is on the guest partition. It’s a paravirtualized CentOS 5.5. I’m not sure if it’s hardware or software related, or in between (drivers). Basic information Updated controller firmware (this was done as the last step) Smart Array 6i in Slot 0 Hardware Revision: Rev B Firmware Version: 2.84 Updated kernel Linux domU 2.6.18-194.32.1.el5xen #1 SMP Wed Jan 5 19:32:33 EST 2011 i686 i686 i386 [...]
Continue Reading »Blocking a specific URL by IP (a URL create by mod-rewrite)
We need to block a specific URL for anyone not on a local IP (anyone without a 192.168.. address) We however cannot use apache’s <Directory /var/www/foo/bar> Order allow,deny Allow from 192.168 </Directory><Files /var/www/foo/bar> Order allow,deny Allow from 192.168 <Files> Because these would block specific files or directories, we need to block a specific URL which is created by mod-rewrite and the page is dynamically created using PHP. Any ideas would be greatly appreciated Probably you [...]
Continue Reading »Forefront TMG Proxy blocking internal HTTP requests for FQDN
I have Forefront TMG installed as a proxy server. However, whenever I make HTTP requests to servers on the Internal network with a fully qualified DNS name, the proxy denies the connection. Denied Connection FRW-02 18/03/2011 20:06:37 Log type: Web Proxy (Forward) Status: 12202 Forefront TMG denied the specified Uniform Resource Locator (URL). Rule: Default rule Source: Internal (10.50.75.21:21492) Destination: Internal (10.50.75.10:8080) Request: GET http://app-01.mydomain.com.br:9871/internalwebserver_deploy/MyServiceService.svc?wsdl Filter information: Req ID: 0a157279; Compression: client=No, server=No, compress rate=0% [...]
Continue Reading »Recent Posts
- Windows File Permissions and Attributes
- What is the easiest way to upgrade my existing Perl 5.14 to Perl 5.16 on FreeBSD 9 using the ports system?
- Know if mysql has done its job
- Redirect https .com to https .co.uk without a valid SSL cert on .com without DNS change
- Why is it a bad idea to use customer email as from address



