While trying to add a new firewall rule file I accidentally copied my new XML over the top of the primary /etc/vmware/firewall/service.xml config file. I'm booting our free ESXI 5.5 server from a USB flash drive. I'm not sure whether the modified service.xml file will persist through a reboot but if it does the firewall settings will be missing all the default entries. Is there a way to retrieve that file from a config backup, the USB flash drive or perhaps an online repository? I've looked at our state.tgz backup files and they do not appear to contain the service.xml file.
Andrew S's questions
Our organization's primary DNS server is a Windows Server 2008 which two Forwarders set. I happened to notice on our firewall that this server is sending out regular TCP requests to the Forwarders in addition to the standard UDP queries. I ran Wireshark on the server and noticed the rate varies but is around 2 packets per second. All the packets are nearly the same:
<server> <forwarder> TCP 62 55148 > domain [SYN] Seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1
Occasionally the forwarder responds with a reset:
<forwarder> <server> TCP 60 domain > 55148 [RST, ACK] Seq=1 Ack=0 Win=0 Len=0
Is this normal, expected behavior or should I be concerned? I don't see our other DNS servers exhibiting this same behavior. This is our only Windows server that is sending some DNS packets via TCP.
I've been doing some sniffing on my company's network to try to clean up some of traffic and have noticed that one of our Server 2008 Domain Controllers is sending out ARP's every second or two to about 15 different addresses in the 169.254.0.0/16 subnet. The domain controller is in the 10.10.0.0/23 subnet. Anyone have any idea what could be causing these ARP's? As far as I can tell there aren't any clients on the network with 169.254.x.x addresses so I have no idea why the DC is trying to locate them.
The server does have two NICs but only one of them is connected. I disabled the unused NIC yesterday when I noticed the ARPing to see if that would change anything but from looking again today it has not.
The ipconfig /all output is:
Windows IP Configuration
Host Name . . . . . . . . . . . . : server-snip
Primary Dns Suffix . . . . . . . : snip.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : snip.com
Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 GT Desktop Adapter
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::885:cbff:b468:f229%13(Preferred)
IPv4 Address. . . . . . . . . . . : 10.10.0.63(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 10.10.0.6
DNS Servers . . . . . . . . . . . : 10.10.0.63
10.10.0.64
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter Local Area Connection* 9:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{CD1C279E-711E-4426-84F6-FD1FF423B
521}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
I have a Windows Server 2003 domain. One of the Group Policy Objects appears as a linked item in an OU but all I can see if the Unique ID and that the Link Status is Enabled. There is a red minus icon next to it and its name reads "Inaccessible." The message says "This Group Policy object (GPO) is inaccessible because you do not have the read-level permission on it."
There is a folder in SYSVOL that contains the Unique ID and I can browse into it without any trouble. If I view the complete list of Group Policy Objects I can't find anything that resembles this inaccessible GPO.
If I run Group Policy Results wizard against a user that the Inaccessible policy applies to then I'm able to see the real name of the GPO and see all the settings that are being applied to the user from the GPO.
What may have happened which would cause an administrator to lose almost all access to a GPO and can the access be restored?
I'm trying to find a utility that will allow me to generate a constant flow of random network traffic at a specified rate between 2 hosts. The utility needs to run on Windows and OSX. I've tried iperf but it seems to be more oriented toward short-term testing/statistics and it really taxes the CPU even at slower rates. I want something that will generate traffic for a few weeks at say 10Mbps while I use other tools to monitor the impact of that level of traffic on the network.
One of our remote desktop client users likes to have the title bar always displayed. She used to be able to click the "tack" and pin the title bar down. However, the system is no longer remembering that setting. She has to pin the title bar each time she launches an RDP session. Is there a way to save that setting or alter the default behavior?