I am running sage evolution 200 on a cloud server. Until recently the program was running fine. Then the cloud host decided to block UDP port 1434 on their router as they claim it was being attacked. When I use port query, it return TCP port 1433 is listening but port 1434 is filtered. I contacted my cloud server provider and was advised to change port 1434 to another port number. I am not a computer expert by any means and need assistance is changing this port even though it's the official port for SQL Server.
123145
I realize that you can change the default instance from the default port of 1433, and equally you can make named instances use static ports as opposed to dynamic ports, but in general are named instances more secure than the default instance against external intruders?  Here's why I would think that's the case:   Named instances are (again, by default I realize) utilizing dynamic ports.  If you move the SQL Browser service to listen on a different port than 1434 then that would be even better, I imagine. A default instance is pretty easy to figure out as the data source.  It's just the server's name.  But the named instance is an extra step to retrieving the data source with the serverName\instanceName schema.   What are some thoughts on this?  Am I way out in left field and it makes no difference?
114378
Is there a way to block all normal ftp traffic, and only allow the sftp protocol in sftp?  edit:  sorry my bad!  for secure ftp i must use the ftpes protocol...
59360
Lately, we've become aware of a TCP connection issue that is mostly limited to mac and Linux users who browse our websites.  From the user perspective, it presents itself as a really long connection time to our websites (>11 seconds).  We've managed to track down the technical signature of this problem, but can't figure out why it is happening or how to fix it.  Basically, what is happening is that the client's machine is sending the SYN packet to establish the TCP connection and the web server receives it, but does not respond with the SYN/ACK packet.  After the client has sent many SYN packets, the server finally responds with a SYN/ACK packet and everything is fine for the remainder of the connection.  And, of course, the kicker to the problem: it is intermittent and does not happen all the time (though it does happen between 10-30% of the time)  We are using Fedora 12 Linux as the OS and Nginx as the web server.  Screenshot of wireshark analysis    Update:  Turning off window scaling on the client stopped the issue from happening.  Now I just need a server side resolution (we can't make all the clients do this) :)  Final Update:  The solution was to turn off both TCP window scaling and TCP timestamps on our servers that are accessible to the public.
15994
This is a  about DNS/Hostnames resolution to IPs/Ports   Example 1  I'm running a web server on port 80 and another on port 87. I would like to use DNS so that www.example.com goes to port 87. How can I accomplish this using DNS only?  Example 2  I'm running a service on my server on a non-standard port. How can I get clients to connect to this non-standard port automatically? Can I use DNS? Is there some application specific support where DNS could indicate the IP and Port?   Example 3  Do some application protocols specifically support hostname awareness, and allow special actions to be taken based on this information? Are there other questions on Server Fault that cover some of these?  Commandeering: This question was originally asking about running IIS and Apache on the same server, but the same concepts can be applied to any server software receiving connections from clients. The Answers below describe the technical problems and solutions of using DNS and application protocol support to assign a port number for a client to connect.
79244
How can I block all ports except:  ssh (port 22) httpd (port 80)  using iptables and ipchains?
59766
I'm trying to verify that a couple of our servers can communicate via certain ports before migrating some of our services to them, and that they're not blocked by our organizations firewall ACLs.  Makes Sense  [mrduki@mybox1~]$ nc -ul 40000 --- [mrduki@mybox2~]$ nc -zvuw2 mybox1.com 40000 Connection to mybox1.com 40000 port [udp/*] succeeded!   Doesn't Make Sense  [mrduki@mybox1~]$ nc -ul 40000 [mrduki@mybox1~]$ ^C --- [mrduki@mybox2~]$ nc -zvuw2 mybox1.com 40000 Connection to mybox1.com 40000 port [udp/*] succeeded!   In fact, if I do a port scan from 40000-40100, every single port succeeds.   If I do the same tests without -u (so that it tests TCP instead of UDP), I get 40000 (tcp) timed out: Operation now in progress errors, as I would expect (since I have no such TCP service listening on 40000).  Doing a sudo netstat -alnp | grep LISTEN on mybox1 though shows no such services listening on these ports. So what am I missing?
36120
My ISP has started blocking port 25 so I can not send email through my dedicated server any more.   I have several options:   Send email through the SMTP server provided by my ISP. Any problems with this? Setup mu server so that it receives email on another port instead of port 25     No one else sends email through my server so it should be OK. How do I do this on a Linux server? Buy a static client IP - these are not being blocked so far.   Which one is preferable?
68618
I've been reading around but can't seem to find a way to create per-process firewall rules. I know about iptables --uid-owner but that only works for outgoing traffic. I've considered scripting netstat and iptables but this seems terribly inefficient since if a process is only active for a small time-frame the script might miss it. Basically I want to enforce specific restrictions regarding port and dst on a process while leaving other processes unaffected. Any ideas?    For reference selinux can do exactly this and it works fairly well. Setup is a bit of a pain though.
25427
If there is a limit on the number of ports one machine can have and a socket can only bind to an unused port number, how do servers experiencing extremely high amounts (more than the max port number) of requests handle this? Is it just done by making the system distributed, i.e., many servers on many machines?
34547
I have an Apache server running on a Raspberry P and it works just fine in the local network. And after forwarding port 80 and trying to connect using the public IP, Chrome says ERR_CONNECTION_REFUSED. But the strange thing is that I CAN reach the server when using VPN and using the same IP. What can I do?     -telnet 80.***.***.78 80      Trying 80.***.***.78...     telnet: connect to address 80.***.***.78: Connection refused     telnet: Unable to connect to remote host     -route -n      Destination     Gateway         Genmask         Flags Metric Ref    Use Iface     0.0.0.0         192.168.0.1     0.0.0.0         UG    0      0        0 eth0     192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0      -sudo netstat -lapute:              Active Internet connections (servers and established)     Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode       PID/Program name     tcp        0      0 *:http                  *:*                     LISTEN      root       6137        2051/apache2     tcp        0      0 *:ssh                   *:*                     LISTEN      root       6367        2249/sshd     tcp        0      0 pi.local:ssh            nmb.local:65535         ESTABLISHED root       8669        2565/sshd: pi [priv     udp        0      0 *:9949                  *:*                                 root       5918        1809/dhclient     udp        0      0 *:mdns                  *:*                                 avahi      6293        2184/avahi-daemon:     udp        0      0 *:54070                 *:*                                 avahi      6295        2184/avahi-daemon:     udp        0      0 *:bootpc                *:*                                 root       5946        1809/dhclient     udp        0      0 pi.local:ntp            *:*                                 root       6310        2200/ntpd     udp        0      0 localhost:ntp           *:*                                 root       6309        2200/ntpd     udp        0      0 *:ntp                   *:*                                 root       6304        2200/ntpd
80677
I have multiple web servers behind a single firewall (SVN, Exchange, etc.).  I want to be able to access all of the various servers remotely, but since they are All using the same port (the standard HTTPS), is this possible?  If I set it up so that each is listening on different ports, would it be possible to make it so that I could access each server using a different sub-domain (so svn.domain.com would point to svn, mail.domain.com would point to exchange server)?  Is there perhaps a way to set up my router to forward a port differently depending on which sub-domain the client requested?  How do people normally go about this issue?
92263
I want to redirect all traffic from port 443 to the internal port 8080. I'm using this config for iptables:  iptables -t nat -I PREROUTING --source 0/0 --destination 0/0 -p tcp \          --dport 443 -j REDIRECT --to-ports 8080   This works for all external clients. But if I'm trying to access the port 443 from the same maschine I'll get a connection refused error.  wget https://localhost   How can I extend the iptables rule to redirect local traffic too?
97902
I have an installation of SQL Server 2012 Std Ed on Windows 2012 R2 running in a default instance, and an app that wants to connect to it using a named instance (can't be changed)  E.g.   ServerName - mySQLServer Alias required by app - mySQLServer\CrazyApp   I've tried to create an alias as follows:     Alias Name - .\crazyapp Port No - 1433 Protocol - TCP/IP Server .   I've:   checked TCP/IP protocol is enabled have started SQL browser (not needed, I believe) restarted SQL (several times) tried with the machine name instead of "." tried with no port number instead of 1433. banged head against wall   ...all to no avail.  Is it possible to do this, if so, would some kind person tell me what I'm doing wrong.  Thanks!
40111
I'm writing a small web server in Python, using BaseHTTPServer and a custom subclass of BaseHTTPServer.BaseHTTPRequestHandler. Is it possible to make this listen on more than one port?  What I'm doing now:  class MyRequestHandler(BaseHTTPServer.BaseHTTPRequestHandler):   def doGET   [...]  class ThreadingHTTPServer(ThreadingMixIn, HTTPServer):      pass  server = ThreadingHTTPServer(('localhost', 80), MyRequestHandler) server.serve_forever()
98980
I am running ddwrt v24-sp2 on three WRT54GL routers. These routers all send their syslog information to the same remote server using syslogd  The problem is that in the logs the hostname will change between the LAN IP and 127.0.0.1.  This makes it hard to tell which device is doing what when I have several events listed as localhost and makes it impossible to script events to happen when certain syslog messages are received.   Does anyone know of any way I can differentiate which message comes from which host? Is there some option I did not see to for a tag or extra information into the message. Can I force the host to send its hostname with each message?  Here is an example of the syslog output:     06-28-2010 11:43:57    User.Info   10.255.255.2    Jun 28 17:43:58 : >Connecting to *.*.*.*      06-28-2010 11:43:54    User.Info   127.0.0.1   Jun 28 17:43:54 : >Connecting to *.*.*.*       06-28-2010 11:43:52    Daemon.Info 10.255.255.1    Jun 28 17:43:53 >chillispot[428]: chilli.c: 1088: Rereading configuration file and doing DNS lookup      06-28-2010 11:43:51    Daemon.Info 127.0.0.1   Jun 28 17:43:52 >chillispot[623]: chilli.c: 1088: Rereading configuration file and doing DNS lookup      06-28-2010 11:43:51    Daemon.Info 10.255.255.3    Jun 28 17:43:51 >chillispot[4185]: chilli.c: 1088: Rereading configuration file and doing DNS lookup   thanks  Chris
37272
I'll try to explain this as best I can...  I'm on ubuntu 13.04, and I am running a local BIND instance at 127.0.0.1 for access to basic wild-card DNS for development (i.e. "*.dev == 127.0.0.1" - yes, I know, don't create fake tlds, etc. This is entirely local to my machine, though).  I also have clients who have their own DNS servers set up through a VPN (at 192.168.140.111 or something similar).  My problem is that if my resolv.conf has their DNS server listed first, I can't access my *.dev, and if I have my DNS server listed first, I can't access their *.vpn records.  Currently, this is my resolv.conf:  # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8) #     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN nameserver 192.168.140.111 search ns1.vpn nameserver 127.0.0.1 nameserver 127.0.1.1 search fritz.box   The first three lines of the config are in /etc/resolvconf/resolv.conf.d/head, so they'll survive through a resolvconf -u.  Essentially what I want to know is this: is there a way for me to set this up so *.dev goes to my dns server, and *.vpn goes to theirs, (and everything else goes off to my ISP).
64963
So, I installed (and configured) fail2ban on three Ubuntu VPS servers. I configured (imo) a maximum of 3 failed login attempts (via Putty as root) within 2 minutes. Then I restarted the fail2ban service (according to ).    But when I look at my auth.log files in /var/log/ I still see 4, 5 or more failed attempts from certain IP's. So obviously I did something wrong as the IP is not blocked after 3 failed attempts.   It might have to do something with iptables, but that's where it gets a bit "foggy" for me..   Not sure how to setup a max-three-failed-login-attempts rule..  Additional: I see that the login attempts mostly have different ports for every attempt. Does that influence the count to max-three?  Because I see a port being "poked" twice and then no more attempts. Then the IP tries a different port (again 2 times). (all bots of course)