Due to DMCA takedown notices, trying to block bitTorrent traffic for client on a Cisco ASA 5520.
ASA Software : 7.2 ASDM: 5.2
The device is really just used for for NAT and VPN's currently. Is there a simple way to block bitTorrent TCP ports 6881-6999 on this device?
I've inherited a LAN where there is really no name resolution being done for local resources... i.e. all users enter IP addresses manually to access printers and network shares. There are no LDAP servers or domains either....workstations simply connect to the network without authentication. DHCP is handled via a core switch... And DNS settings are also handed out by this same core switch. Currently, the DNS assignments are as such, and in this order:
10.1.1.50 / old Pentium III Windows 2003 box running DNS service- 128 MB RAM
169.200.x.x / ISP
4.2.2.2. / the well known public one
There a couple thousand clients on the LAN....and most of the activity is web browsing ( this is an educational setting ).
First of all, the server seems woefully underpowered for this task...yet there is virtually no slowness when web surfing by clients....
How much horsepower should a heavily used DNS server have ?
I have also heard using 4.2.2.2 is a bad idea .... since it has been so overused...
Finally, wouldn't it make sense to have a robust external DNS server listed first? ( Google's 8.8.8.8 would seem to be a logical candidate )
In order to update an application on a Windows 2003 Server box, the application calls for 2.0 GB of free space in the System's Temp directory. The OS is on C:\ , and there is only 1 GB of free space there.... The server has a RAID configuration for its data on the system's E:\ . There is over 100GB of free space on E:\ . When I did a
set tmp
I found that the system's TEMP directory is not surprisingly located on C:\ ....
TMP = C:\DOCUME~1\ADMINI~1.DES\LOCALS~1\Temp
I assume it is possible to change the System Temp directory to the be located on E:\ ? How is this done, where's a good place to stick it, and is it safe to do this ?
I used this guide to set up a Proftpd installation an Ubuntu 8.04 server... Works well, but the generic user ( userftp ) can run
ls
and is able to change to any Directory and browse freely on the server ..from the root
/
and upwards.. I added this line to etc/shells
/bin/false
in hopes that that would prevent this ... I really only want the userftp account to be able to upload to the generic
/home/FTP-Shared
directory, and be able to do nothing else on the server. How is this accomplished ... This is a headless Ubuntu box..and I am using CLI only .. no GUI admin tools
I've have had an Ubuntu 8.04 server running and on the Internet for a few days....I have Ports 21 and 22 open for FTP and SSH...All other ports are closed.
I ran
netstat
And found this
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp6 0 68 10.7.1.71%134645824:ssh 125.211.221.145%8:47777 ESTABLISHED
It appears as if 125.211.221.145 has established an SSH connection to the server...and is sending packets out... Is it possible for someone to establish an SSH connection without authenticating?
I did Reverse DNS lookups on the address...and it seems to oringnate from China according to this resource...
http://www.ipaddresser.com/
I assume most servers are fending off stuff like this all the time, but is it unusual to have someone sit on a port like this? And is there an way to block certain IP's at the server level?
The server is sitting behind a substantial Cisco firewall ..
I've got a python script running on some client machines that calls home to an Ubuntu 8.04 LTS server running ProFTP..
I created a user called userftp on the server and have hopefully denied it shell access with this:
sudo useradd userftp -p your_password -d /home/FTP-shared -s /bin/false
I had initially set permissons on the /home/FTP-shared directory with :
sudo chmod 755 FTP-shared
But when the script ran from a client, it could not write to that directory..
So I set permissions on /home/FTP-shared with :
sudo chmod 777 FTP-shared
So /home/FTP-shared now has its access set as :
drwxrwxrwx 4 root root 4096 2010-03-04 21:11 FTP-shared
I don't like the fact that the directory is now wide open... Is there a safer way to do this, or since the client has to write to it, is this the only way?
On a Windows 2003 server with a Dell PERC 6/i is it possible somewhere to tell what level of RAID the system is currently running from within Windows ( Without rebooting the server ) ..
Under Computer Management-->Device Manager the only info under Disk Drives reads:
DELL PERC 6/i SCSI Disk Drive
Disk Management just lists the 3 drives in the RAID as Disk 0
I have a 95% OS X server shop..and just a handful of Windows servers I occasionally have to mess with... I need to resize some disks on a Windows 2003 box, and am looking for the equivalent of OS X's Disk Utility, if there is such a thing built into Windows 2003 server...Disk Management is not a part of Windows 2003 I am assuming?
Is there a way to browse the filesystem on an Ubuntu server from Mac OS X with a GUI based app? I have a ton of logfiles on the server I would like to prune.. Currently I ssh into it, and rm from the command line, but would rather use a GUI ...