Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Recent content by haykatyck
-
ubuntu 10.04 hard drive out of room no what?
There are quite a few methods for expanding you file system depending on the type. Generally, you have to boot from a live CD (Knoppix, Ubuntu Desktop), then delete the journal, which turns it into an ext2 file system. Then rebuild the partition. You won't lose data. Here is a good model for...- haykatyck
- Post #3
- Forum: Linux (server)
-
Anyone using the SSL/VPN features?
One thing I noticed with our setup: If you have persistent routes set on the client machine, you may get an error that says "Could not write to IP table". Remove the persistent routs and it starts working again. John <lots of meaningless certifications here>- haykatyck
- Post #8
- Forum: Security, hacker detection & forensics
-
Blocking HTTP Download
you could use an access-list, but that would block a lot of needed communication. Remember, downloading from a site uses HTTP or FTP. So, if you block those on an inside interface, all traffic for thos protocols would be blocked. If you try to block it on the outside interface, you would have...- haykatyck
- Post #4
- Forum: Security, hacker detection & forensics
-
VPN into UAE?
Very understandable. Interesting that it would be translated to a port in the reserved range, but it should still work. Chances are good that the management port is only open to the internal network and not available externally. Just in case they haven't given you the correct informaion...- haykatyck
- Post #8
- Forum: Remote access
-
Really need your opinion for this cisco pix 515e
Sounds like a good deal to me too. It's not an absolute MUST, but see if you can get a 3DES license for it too, that's important for VPNs. If there is support for the serial number, it's usually free, check here: https://tools.cisco.com/SWIFT/Licensing/jsp/formGenerator/Pix3DesMsgDisplay.jsp...- haykatyck
- Post #5
- Forum: Security, hacker detection & forensics
-
VPN into UAE?
Just so I get the events straight in my brain, you are doing things in this order? VPN to the site Open a web browser usnig an IP address (http://192.168.1.1) Get the DNS error Can you post the error? If you are trying to connect using the IP address, and not a name, DNS shouldn't be...- haykatyck
- Post #6
- Forum: Remote access
-
Allow traceroute
Thanks, Brent, I had forgotten that. John <lots of meaningless certifications here>- haykatyck
- Post #6
- Forum: Security, hacker detection & forensics
-
VPN into UAE?
They will have to give you the particulars like: Method, username, password, etc. Once you get used to it, it's fairly easy. The hard part will probably be in getting that information if you are not a member of their organization. John <lots of meaningless certifications here>- haykatyck
- Post #4
- Forum: Remote access
-
My Linux Web Server keeps crashing, Can someone help me solve this?
You can use tcpdump, Ethereal, Wireshark to see what traffic is hitting your server. I agree that since it is internal, this probably isn't it. Does debian have "top"? If so, it will show you the processes you are running and how much CPU, RAM, what the load on teh system is, etc. Open a...- haykatyck
- Post #5
- Forum: Linux (server)
-
Allow traceroute
You could do something like this: object-group icmp-type TRACEROUTE icmp-object echo icmp-object time-exceeded access-list <ACL_name> permit icmp any <server_IP> 255.255.255.255 object-group TRACEROUTE- haykatyck
- Post #4
- Forum: Security, hacker detection & forensics
-
VPN into UAE?
If the address is translated to the Internet and port 80 is opend on the UAE firewall, all would be well. It's not likely, though. If the IP address you were given is in the range below, it is accessable only on the internal network, and you would have to VPN and connect to the site to see it...- haykatyck
- Post #2
- Forum: Remote access
-
transfering files via cisco vpn
Gaaa! Too much *NIX. That's my excuse and I'm sticking to it.- haykatyck
- Post #8
- Forum: Virtual Private Networks (VPN)
-
Accessing network shares through a webpage via VPN
Your setup is extremely similar to the way I'm set up here. Since it is on an internal network, I would test this in a couple of ways. One would be to lower the security to allow anonymous connections. This should get rid of the 403 errors. Then you can monkey with the settings to make it...- haykatyck
- Post #2
- Forum: Virtual Private Networks (VPN)
-
transfering files via cisco vpn
It sounds like you don't have permissions on their domain to access that share. Remember, when you VPN, you may be using domain credentials, but that does not log you into a domain. Try accessing the admin share and see if you get a login prompt: //ip_address/ipc$ It should prompt you for...- haykatyck
- Post #6
- Forum: Virtual Private Networks (VPN)
-
Outbound VPN
For the most part, Cisco doesn't block outbound traffic. However, like most things, there are exceptions. You will have to add an access list to allow GRE through the firewall for PPTP/L2TP to work: access-list <listname> permit gre any any if you are going to use Cisco VPN client, you might...- haykatyck
- Post #4
- Forum: Virtual Private Networks (VPN)
