What is the most efficient way to block access to 8-10k IP addresses?
My server runs EngineX on Debian.
If possible, I would like to show all of the addresses an Internal Server Error (500).
In my AWS Route 53 control panel I simply have 2 A records currently set up for the 'www' and the 'non www' names. Both point to the Elastic IP address associated with my EC2 Instance. This works well and my website is available at both variations but I really want all 'www' to route to the 'non www'.
What is the reccomened method, using AWS Route 53, for routing all traffic that comes to...
www.example.com
to
example.com
When resolving FQDNs or machine names to IP addresses on my local network (mycompany.internal) I can use dig on the command line (linux/mac) or nslookup (windows) to query the configured server and get a response. But trying to enter the FQDN or even just the machine name in a ping command or in a web browser results in 'Unknown Host' or DNS errors. Here's a sample, this one from the Mac:
mac:~ atroon$ dig server.mycompany.internal
; <<>> DiG 9.6.0-APPLE-P2 <<>>
server.mycompany.internal ;; global
options: +cmd ;; Got answer: ;;
->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5219 ;; flags: qr aa rd
ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0,
ADDITIONAL: 0
;; QUESTION SECTION:
;server.mycompany.internal. IN A
;; ANSWER SECTION:
server.mycompany.internal. 1200 IN A 172.16.254.36
;; Query time: 0 msec ;; SERVER:
172.16.254.8#53(172.16.254.8) ;; WHEN: Wed Dec 16 11:39:15 2009 ;; MSG SIZE
rcvd: 55
mac:~ atroon$ ping server.mycompany.internal<br>
ping: cannot resolve server.mycompany.internal: Unknown host
I cannot for the life of me figure this one out. The DNS server is a SBS 2003 box which handles AD, some file/print, etc for a small company network. This issue happens to me about three times a week, and when I'm connected to the local network directly, the same switch as the server even. I can make any connection I want with IP addresses, I just can't make DNS work. Additionally, at the same time I'm experiencing this, other users are fine, which makes me think it's a problem on my Mac. But what sort of problem? How can dig send a query and get a reply, and ping say 'unknown host'?
I'm posting here vs. serverfault because I think this is a local problem not a server problem...but if anyone can point me at the server, I guess we'll head down the street a domain or two.
Here's my setup:
I have a local server running on my machine (Mac OS, Snow Leopard). I can access it via my browser by doing
localhost:3000
I have a virtual machine using Virtual Box running a windows XP. If I try to access using localhost:3000, it fails. Same thing if I use the ip of the Mac machine.
The virtual machine has access to the internet.
How can I access my local server in my virtual machine?
I've configured xampp and firewall so I can access desktop pc's localhost over my local network through desktop pc's IP.
But I'm not able to access auctual projects:
I can access:
http://192.168.x.x/xampp or http://192.168.x.x/phpMyAdmin
But I cannot access:
http://192.168.x.x/myWebsite/
I get an error:
Server error
We're sorry! The server encountered an internal error and was unable to complete your request. Please try again later.
error 500
i hope someone can help me out with somewhat simple task. I'm trying to redirect a client in my router through my desktop PC, so i can dump the traffic and analyze it (its potential source of poisoning the network with malicious packets). However i don't have a second NIC on my hands and i was hoping i can redirect all the traffic from that IP through my PC. In essence to become MITM for the client. Does anyone have any idea where to start:
Current state:
(localip)-(router)-(internet)
And what i want to do:
(localip)-(pc)-(router)-(internet)
I have an Ubuntu 9.10 machine with three ethernet interfaces, eth0, eth1 and eth2. eth2 is connected to a private network. eth0 and eth2 are connected to two different LANs. Either one will provide access to the internet. All three networks have DHCP servers.
Using Ubuntu's the default settings (And Gnome), when I boot up all the interfaces are active and my system gets three IP addresses. However any attempt to access the internet results in connection timeouts and other weirdness. I suspect that traffic is going out on one NIC (like eth0) and coming back in on another (like eth1). I'm not sure what's going on. The only way I can access the internet at the moment is to bring two of the devices down with ifdown.
How can I configure eth0 as my primary interface so all trafic goes out by default on that interface, while keeping the other two active? Also, I want to make sure Avahi broadcasts properly on all three IPs so that the computers on the LAN of eth1 can still connect to myHostname.local...
EDIT: Here's my routing table:
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
172.16.151.0 0.0.0.0 255.255.255.0 U 0 0 0 eth2
172.16.30.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
10.1.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1
0.0.0.0 172.16.30.2 0.0.0.0 UG 0 0 0 eth0
0.0.0.0 10.1.0.1 0.0.0.0 UG 0 0 0 eth1
I want the 172.16.30.2 network to be the primary one and the 10.1.0.0 network to be the secondary one.
EDIT2: My nameservers are also incorrect. It seems like Ubuntu is bringing the networks up in order, eth0, then 1, then 2, and the DHCP information from eth1 is overriding eth0, and eth2 is overriding eth1. How can I reverse this so the DHCP information from eth0 is the "master"?
EDIT3: This seems to be an issue with Gnome's NetworkManager.
It seems that there used to be a config option to disable multipath ip route caching in linux, but has since been removed?
Is there any workaround for this, or method of disabling this behavior?
I have installed vsftpd on ubuntu 10.04
When i login using ip , username and passowrd then i straight go to home directory of user.
is there any way that i can
1)Make separate user for only ftp
2)WHen they login via ftp, they should see the mounted drive i,e /media/shared_drive only not their home directory
3)They have all read and write access
4)Thanks
I am using snmpd on CentOS 6.3 and was giving a network range to the source for mapping community to security group.
com2sec mynetwork 192.168.0.0/23 centreon
Anyhow it is not working and I always get a timeout from the polling server.
When I enter the exact ip of the polling server it works (192.168.3.180)
It even works if I enter the whole netmask (255.255.252.0)
Anyhow it should work according to documentation. Did I do anything wrong?
I have OS X Server installed. I am using Window Vista on a PC.
But on my network I can't see the OS X server. But I can see other Mac computers in shared but not OS X server.
I am able to ping the IP.
What should I do?
I just installed bind on RHEL 6 and point a domain to that server. but actually when i ping domain it returns error 1214:
Here is my named.conf:
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; };
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
zone "mydomain.com"{
type master;
file "/var/named/data/named.mydomain.com";
allow-update { none; };
};
AND The content of "/var/named/data/named.mydomain.com":
1 $TTL 38400
2
3 mydomain.com. IN SOA ns1.mydomain.com. milad.yahoo.com. (
4 2012101201 ; serial number YYMMDDNN
5 28800 ; Refresh
6 7200 ; Retry
7 864000 ; Expire
8 38400 ; Min TTL
9 )
10
11 mydomain.com. IN A 1.2.3.4
12 www IN A 1.2.3.4
13 ns1.mydomain.com. IN A 1.2.3.4
14 ns2.mydomain.com. IN A 1.2.3.4
15 mydomain.com. IN NS ns1.mydomain.com.
16 mydomain.com. IN NS ns2.mydomain.com.
AND i'm sure the named service is running:
[root@server ~]# service named status
version: 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.3
CPUs found: 8
worker threads: 8
number of zones: 20
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is OFF
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running
named (pid 26299) is running...
Hello, I would like to set my CURL to use SSH tunneling for certain domains. How can I accomplish that? I can also set up VPN or SOCKS or whatever, but I need to use CURL on local machine, but use the IP of remote machine for those connections.
I would like to know how to load balance two Business DLS links which have fixed IPs. I believe it would look something like this:
ip route add default scope global \
nexthop via gatewayDLS1 dev interface1 weight 1 \
nexthop via gatewayDLS2 dev interface2 weight 1
Is this be all I need in order to get multipath routing? Please, give me a more detailed answer if possible, thanks you.
I am looking for a reliable personal VPN service so that I can access sites like Pandora or Hulu even when I am not physically in the US. I have been using StrongVPN but their service is not reliable. Here are some of my key requirements:
Fast
Reliable
I don't mind paying a reasonable fee
Unlimited traffic
I just need PPTP support
US IP addresses
No software installation needed
Supports Mac
Any recommendations? Thanks.
I added eth1 and eth2 to my Ubuntu Server, all 3 use DHCP and are on the same lan
eth0 10.0.0.41
eth1 10.0.0.42
eth3 10.0.0.43
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default router.net 0.0.0.0 UG 100 0 0 eth0
10.0.0.0 * 255.255.255.0 U 0 0 0 eth0
10.0.0.0 * 255.255.255.0 U 0 0 0 eth1
10.0.0.0 * 255.255.255.0 U 0 0 0 eth2
curl --interface eth1 www.google.com doesn't work
what else do i need to do for the above to work?
Is there good tool that can do same thing as windows 'mstsc' and also has some features, like
save different session info, so don't need to remember difference IP/ID/pwd. Thanks.
EDIT: Since I can't directly RDP to remote hosts, instead, I have to RDP to a terminal server and RDP from their to my destination. Is there client that can relay my connection from local and pass through the terminal to the real destination?
Is it possible to add wildcard serveralias (example: *.somesite.com) in an apache server without modifying httpd.conf manually? I use a DNS different from my hosting server and i have added asterisk A record to my DNS to point all request like (test.somesite.com,test2.somesite.com) to my hosting servers IP, but i don't see anyway of adding asterisk serveraliases to apache httpd.conf file in my cpanel. Pls is there a solution?
I want to ftp a large file from a Windows client to a Windows server, using their IP addresses. This is on an internet independent network. While the file is transferring, I would like to determine how many bytes have been received by the server. I then would like to use this information to determine in real-time the percentage of the file that has been transferred to the server.
Any recommendations as to the ftp command syntax and C# code to achieve this?
I got a single ethernet connection to a network but need multiple ips.
Because of this, I am using virtual network interfaces like this:
auto intern
iface intern inet static
address ...
netmask ...
gateway ...U
auto intern:1
iface intern:1 inet static
address ...
netmask ...
gateway ...
I need to specify which IP should be used by default for outgoing traffic.
How can I do that?
I have a VM Ware player, VMware-player-3.0.1-227600.exe
I downloaded a cent os image, it's version is
CentOS release 5.4 (Final)
I have apache installed and listening on port 8080. However when I visit my ip address, x.x.x.x.:8080/
I don't get the default apache page as I would by going to localhost:8080/
What do I have to do in my image or vmware to get it to serve?
All emails I send from my new server go to spam in Gmail (and sometimes yahoo).
I've never before sent out mass email or spam.
What I've already done:
Configured reverse DNS
Enabled DKIM
Verified my IP is not on spam lists
Verified I'm not an open relay
Here are the headers from the received message:
http://pastie.org/pastes/8450781/text?key=onxgrau1xinyqv7ridxrea
Really, can't seem to figure out why the mail just doesn't come through.
I'd really appreciate your help. Thank you!
I'm doing some research on old kernels and running the following on 2.6.7 or 2.6.8 gives a resource busy error. But on 2.6.28 the command works as expected. How would I determine which kernel allowed this command to change the mac address on the fly? ip link set dev addr
You can see some screenshots below. Thank you!
I'd like to take an IP address from my Terminal, right click, select Services Whois and get the results back somehow.
This doesn't exist so I'm wanting to create a simple Automator script to do that. But, I'm running into a few problems.
This is what I've done - Automator Actions:
Get Specified Text
xxx.xxx.xxx.xxx
Run Shell Script
for x in "$@";
do whois $x;
done
View Results
But all I get in View Results is this:
(
""
)
Any suggestions?