IPTables blocking NetBIOS

I have had this problem for a while now and I have finally decided to fix it once and for all.
I am unable to connect to the shared folders of other computers on the local network. Running smbclient with results in NT_STATUS_UNSUCCESSFUL but if I connect via the IP it succeeds (well almost).
[yaseen@luthien ~]$ smbclient -L //gamingpc
Enter yaseen's password:
Connection to gamingcomp failed (Error NT_STATUS_UNSUCCESSFUL)
[yaseen@luthien ~]$ smbclient -L 192.168.1.101
Enter yaseen's password:
Domain=[GAMINGPC] OS=[Windows 8 Single Language 9200] Server=[Windows 8 Single Language 6.2]
Sharename Type Comment
ADMIN$ Disk Remote Admin
C$ Disk Default share
Canon Printer Canon iP4600 series
Canon iP4600 series (Copy 1) Printer Canon iP4600 series (Copy 1)
IPC$ IPC Remote IPC
print$ Disk Printer Drivers
Users Disk
Connection to 192.168.1.101 failed (Error NT_STATUS_RESOURCE_NAME_NOT_FOUND)
NetBIOS over TCP disabled -- no workgroup available
However, after disabling iptables I am able to connect via the NetBIOS name.
[yaseen@luthien ~]$ sudo systemctl stop iptables
[yaseen@luthien ~]$ smbclient -L //gamingpc
Enter yaseen's password:
Domain=[GAMINGPC] OS=[Windows 8 Single Language 9200] Server=[Windows 8 Single Language 6.2]
Sharename Type Comment
ADMIN$ Disk Remote Admin
C$ Disk Default share
Canon Printer Canon iP4600 series
Canon iP4600 series (Copy 1) Printer Canon iP4600 series (Copy 1)
IPC$ IPC Remote IPC
print$ Disk Printer Drivers
Users Disk
Domain=[GAMINGPC] OS=[Windows 8 Single Language 9200] Server=[Windows 8 Single Language 6.2]
But even with IPtables off I am unable to connect to the shared folders with Thunar. I think I have opened the NetBIOS ports, so why is IPtables preventing the NetBIOS resolution?
[yaseen@luthien ~]$ sudo iptables -L
[sudo] password for yaseen:
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere
DROP all -- anywhere anywhere ctstate INVALID
ACCEPT ipv6 -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere icmp echo-request ctstate NEW
UDP udp -- anywhere anywhere ctstate NEW
TCP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN ctstate NEW
REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable
REJECT tcp -- anywhere anywhere reject-with tcp-reset
REJECT all -- anywhere anywhere reject-with icmp-proto-unreachable
Chain FORWARD (policy DROP)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain TCP (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpt:http
ACCEPT tcp -- anywhere anywhere tcp dpt:sent-lm
ACCEPT tcp -- anywhere anywhere multiport dports netbios-ns,netbios-dgm,netbios-ssn,microsoft-ds,bootps,bootpc
Chain UDP (1 references)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp dpt:domain
ACCEPT udp -- anywhere anywhere multiport dports netbios-ns,netbios-dgm,netbios-ssn,microsoft-ds,bootps,bootpc
My smb.conf:
[global]
workgroup = WORKGROUP
server string = Samba Server
netbios name = SERVER
printcap name = /etc/printcap
load printers = yes
log file = /var/log/samba/%m.log
max log size = 50
security = user
wins server = 192.168.1.1
dns proxy = no
#============================ Share Definitions ==============================
[homes]
comment = Home Directories
browseable = no
writable = yes
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
# Set public = yes to allow user 'guest account' to print
guest ok = no
writable = no
printable = yes

# Generated by iptables-save v1.4.19.1 on Tue Sep 24 08:40:41 2013
*raw
:PREROUTING ACCEPT [1351:530820]
:OUTPUT ACCEPT [1311:145341]
COMMIT
# Completed on Tue Sep 24 08:40:41 2013
# Generated by iptables-save v1.4.19.1 on Tue Sep 24 08:40:41 2013
*nat
:PREROUTING ACCEPT [125:53285]
:INPUT ACCEPT [6:858]
:OUTPUT ACCEPT [298:19457]
:POSTROUTING ACCEPT [298:19457]
COMMIT
# Completed on Tue Sep 24 08:40:41 2013
# Generated by iptables-save v1.4.19.1 on Tue Sep 24 08:40:41 2013
*mangle
:PREROUTING ACCEPT [1351:530820]
:INPUT ACCEPT [1232:478393]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1311:145341]
:POSTROUTING ACCEPT [1341:148367]
COMMIT
# Completed on Tue Sep 24 08:40:41 2013
# Generated by iptables-save v1.4.19.1 on Tue Sep 24 08:40:41 2013
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [1311:145341]
:TCP - [0:0]
:UDP - [0:0]
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m conntrack --ctstate INVALID -j DROP
-A INPUT -p ipv6 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -m conntrack --ctstate NEW -j ACCEPT
-A INPUT -p udp -m conntrack --ctstate NEW -j UDP
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m conntrack --ctstate NEW -j TCP
-A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -j REJECT --reject-with tcp-reset
-A INPUT -j REJECT --reject-with icmp-proto-unreachable
-A TCP -p tcp -m tcp --dport 80 -j ACCEPT
-A TCP -p tcp -m tcp --dport 2316 -j ACCEPT
-A TCP -p tcp -m multiport --dports 137,138,139,445,67,68 -j ACCEPT
-A UDP -p udp -m udp --dport 53 -j ACCEPT
-A UDP -p udp -m multiport --dports 137,138,139,445,67,68 -j ACCEPT
COMMIT
# Completed on Tue Sep 24 08:40:41 2013

Similar Messages

  • SCOM agent install fails Error 80070035 - the network path was not found

    I have deployed SCOM 2012 agents to most servers (2008, 2008 R2, 2012, 2012R2) in our estate but some either fail to install or are not monitored. I assume the two problems are related, but for now I am concentrating on the servers that fail completely.
    Installation is from the Discovery Wizard and I have about 20 servers that fail of various server versions.
    So looking at one specific server that is failing to install the agent - a 2008 standard service pack 2
    The firewall in on and file and printer sharing is enabled for domain, remote administration is enabled for domain
    I added a specific rule to allow TCP 5723 and 5724
    DCOM is enabled
    I can Ping the target server from the SCOM server by both name and FQDN - both return the same IP and our DNS server has only one entry for this server
    I can browse to the admin share \\server\C$ from the SCOM Server, using the same account that I specify for the agent install that is a domain admin with rights on this server (and on the other servers the agent
    did install to) and the server has plenty of disk space available
    I am not sure what else to look at so would welcome any ideas
    Thanks

    Hi Petro,
    I have a Agent installation failure cheat sheet, For your error 80070035 it is said to perform a manual installation.
    So i would like to understand which version of SCOM is this ? 2007 R2 or 2012 or 2012 r2 ?
    Also check if your agents have the WMI service started and enabled ?
    Also if yours is a SCOM 2007 R2 do you have a RMS & MS in your management group ? If yes then Pushing the agent installation from MS may cause such issue. So would suggest you push the installation from RMS.
    Also check if your Network connectivity meets the minimum requirement as recommended by SCOM. Below is applicable for Both SCOM 2007 R2 & SCOM 2012 & 2012 R2.
    Component A
    Component B
    Minimum Requirement
    Root management server or management server
    Agent
    64 Kbps
    Root management server or management server
    Agentless
    1024 Kbps
    Root management server or management server
    Database
    256 Kbps
    Also check if you have any Anti virus / Firewall which is blocking the install / communication. If yes disabe or add the "Monitoringhost.exe to the safe list or what your feature is.
    Check if you have another IP assigned to the NIC card and remove it tempraurly andchecl.
    Also post the event logs of the Agents which are in not monitored state for analysis.
    SCOM Agent installation failure error codes
    Error
    Error Code(s)
    Remediation Steps
    The MOM Server could not execute WMI Query "Select * from Win32_Environment where
    NAME='PROCESSOR_ARCHITECTURE'" on computer server.domain.com
    Operation: Agent Install
    Install account: domain\account
    Error Code: 80004005
    Error Description: Unspecified error
    80004005
    1.  Check the PATH environment variable.  If the PATH statement is very long, due to lots of installed third party software - this can
    fail.  Reduce the path by converting any long filename destinations to 8.3, and remove any path statements that are not necessary.
    2.  The cause
    could be corrupted Performance Counters on the target Agent.
    To rebuild all Performance counters including extensible and third party counters in Windows Server 2003, type the following commands at a command
    prompt. Press ENTER after each command.
    cd
    \windows\system32
    lodctr /R
    Note /R is uppercase.
    Windows Server 2003 rebuilds all the counters because it reads all the .ini files in the C:\Windows\inf\009 folder for the English operating system.
    How to manually rebuild Performance Counter Library values
    http://support.microsoft.com/kb/300956
    3.  Manual agent install. 
    The MOM Server could not execute WMI Query "Select * from Win32_OperatingSystem" on
    computer “servername.domain.com”
    Operation: Agent Install
    Install account: DOMAIN\account
    Error Code: 800706BA
    Error Description: The RPC server is unavailable.
    8004100A
    800706BA
    1.  Ensure agent push account has local admin rights
    2.  Firewall is blocking NetBIOS access
    3.  Inspect WMI health and rebuild repository if necessary
    4.  Firewall is blocking ICMP  (Live OneCare)
    5.  DNS incorrect
    The MOM Server failed to open service control manager on computer "servername.domain.com". Access is Denied
    Operation: Agent Install
    Install account: DomainName\User Account
    Error Code: 80070005
    Error Description: Access is denied.
    80070005
    80041002
    1.  Verify SCOM agent push account is in Local Administrators group on target computer.
    2.  On Domain controllers will have to work with AD team to install agent manually if agent push account is not a domain admin.
    Disable McAfee antivirus during push
    The MOM Server failed to open service control manager on computer "servername.domain.com".
    Therefore, the MOM Server cannot complete configuration of agent on the computer.
    Operation: Agent Install
    Install account: DOMAIN\account
    Error Code: 800706BA
    Error Description: The RPC server is unavailable.
    800706BA
    1.  Firewall blocking NetBIOS ports
    2.  DNS resolution issue.  Make sure the agent can ping the MS by NetBIOS and FQDN.  Make sure the MS can ping the agent by NetBIOS
    and FQDN
    3.  Firewall blocking ICMP
    4.  RPC services stopped.
    The MOM Server failed to acquire lock to remote computer servername.domain.com. This means there is already an agent management operation proceeding
    on this computer, please retry the Push Agent operation after some time.
    Operation: Agent Install
    Install account: DOMAIN\account
    Error Code: 80072971
    Error description: Unknown error 0x80072971
    80072971
    This problem occurs if the LockFileTime.txt file is located in the following folder on the remote computer:
    %windir%\422C3AB1-32E0-4411-BF66-A84FEEFCC8E2
    When you install or remove a management agent, the Operations Manager 2007 management server copies temporary files to the remote computer. One
    of these files is named LockFileTime.txt. This lock file is intended to prevent another management server from performing a management agent installation at the same time as the current installation. If the management agent installation is unsuccessful and
    if the management server loses connectivity with the remote computer, the temporary files may not be removed. Therefore, the LockFileTime.txt may remain in the folder on the remote computer. When the management server next tries to perform an agent installation,
    the management server detects the lock file. Therefore, the management agent installation is unsuccessful.
    http://support.microsoft.com/kb/934760/en-us
    The MOM Server detected that the following services on computer "(null);NetLogon" are not running. These services are required for push
    agent installation. To complete this operation, either start the required services on the computer or install the MOM agent manually by using MOMAgent.msi located on the product CD.
    Operation: Agent Install
    Remote Computer Name: servername.domain.com Install account: DOMAIN\account
    Error Code: C000296E
    Error Description: Unknown error 0xC000296E
    C000296E
    1.  Netlogon service is not running.  It must be set to auto/started
    The MOM Server detected that the following services on computer
    "winmgmt;(null)" are not running
    C000296E
    1.  WMI services not running or WMI corrupt
    The MOM Server detected that the Windows Installer service (MSIServer) is disabled on computer "servername.domain.com". This service is
    required for push agent installation. To complete this operation on the computer, either set the MSIServer startup type to "Manual" or "Automatic", or install the MOM agent manually by using MOMAgent.msi located on the product CD.
    Operation: Agent Install
    Install account: DOMAIN\account
    Error Code: C0002976
    Error Description: Unknown error 0xC0002976
    C0002976
    1.  Windows Installer service is not running or set to disabled – set this to manual or auto and start it.
    The Agent Management Operation Agent Install failed for remote computer servername.domain.com.
    Install account: DOMAIN\account
    Error Code: 80070643
    Error Description: Fatal error during installation.
    Microsoft Installer Error Description:
    For more information, see Windows Installer log file "C:\Program Files\System Center Operations Manager 2007\AgentManagement\AgentLogs\servernameAgentInstall.LOG
    C:\Program Files\System Center Operations Manager 2007\AgentManagement\AgentLogs\servernameMOMAgentMgmt.log" on the Management Server.
    80070643
    1.  Enable the automatic Updates service…. Install the agent – then disable the auto-updates service if desired.
    Call was canceled by the message filter
    80010002
    Install latest SP and retry. One server that failed did not have Service pack installed
    The MOM Server could not find directory \\I.P.\C$\WINDOWS\. Agent will not be installed on computer "name". Please verify the required
    share exists.
    80070006
    1.  Manual agent install
    Possible locking on registry?
    http://www.sysadmintales.com/category/operations-manager/
    Try manual install.
    Verified share does not exist.
    The network path was not found.
    80070035
    1.  Manual agent install
    The Agent Management Operation Agent Install failed for remote computer "name". There is not enough space on the disk.
    80070070
    1.  Free space on install disk
    The MOM Server failed to perform specified operation on computer "name". The semaphore timeout period has expired.
    80070079
    NSlookup failed on server. Possible DNS resolution issue.
    Try adding dnsname to dnssuffix search list.
    The MOM Server could not start the MOMAgentInstaller service on computer "name" in the time.
    8007041D
    80070102
    NSlookup failed on server. Possible DNS resolution issue.
    Verify domain is in suffix search list on management servers.
    The Agent Management Operation Agent Install failed for remote computer "name"
    80070643
    1.  Ensure automatic updates service is started
    2.  Rebuild WMI repository
    3.  DNS resolution issue
    The Agent Management Operation Agent Install failed for remote computer "name". Another installation is already in progress.
    80070652
    Verify not in pending management. If yes, remove and then attempt installation again.
    The MOM Server detected that computer "name" has an unsupported operating system or service pack version
    80072977
    Install latest SP and verify you are installing to Windows system.
    Not discovered
    Agent machine is not a member of domain
    Ping fails
    1.  Server is down
    2.  Server is blocked by firewall
    3.  DNS resolving to wrong IP.
    Fail to resolve machine
    1.  DNS issue
    The MOM Server failed to perform specified operation on computer "name". Not enough server storage…
    8007046A
    1.  This is typically a memory error caused by the remote OS that the agent is being installed on.
    There are currently no logon servers available to service the logon request.
    8007051F
    1.  Possible DNS issue
    This installation package cannot be installed by the Windows Installer service. You must install a Windows service pack that contains a newer version
    of the Windows Installer service.
    8007064D
    1.  Install Windows Installer 3.1
    The network address is invalid
    800706AB
    Possible DNS name resolution issue.
    Tried nslookup on server name and did not get response.
    Verify domain is in suffix search list on management servers.
    The MOM Server failed to perform specified operation on computer servername.domain.com
    80070040
    1.  Ensure agent push account has local admin rights
    The MOM Server detected that the actual NetBIOS name SERVERNAME is not same as the given NetBIOS name provide for remote computer SERVERNAME.domain.com.
    80072979
    1.  Correct DNS/WINS issue.
    2.  Try pushing to NetBIOS name
    Gautam.75801

  • Manually Installed Agent is not showing up in the Operations Manager Console Under Pending Management.

    Hi Community,
    I submitted this question because I'm a bit stuck with SCOM 2012 R2, I'll try to explain briefly what is happening right now in my environment,  we have a DEV SCOM Deployment in which all the roles are installed in a single server, this servers is a
    VMware machine running Windows Server 2008R2.
    The Initial installation of the SCOM Operations Manager and all the other components was not performed by me but by a co-worker, unfortunately he doesn't remember much about the initial configuration. So i had to pickup where he left things about a year
    ago, neither of us are SCOM experts, and we have almost no previous experience with previous versions of this application.
    Now the problem that I'm facing is the following, all the DEV Servers are Domain Controllers and one of the indication within the "Guide for System Center Management Pack for Active Directory for Operations Manager 2012" states the following
    Configuration
    Supported?
    Agent-less monitoring
    No
    After my first review I notice that our servers were being monitor by agent-less mode and given the above statement from the Operations Guide the only way that we could ever get those domain controllers monitor by SCOM would be by installing the agent on
    each server, so I read somewhere (Can't remember where) that in order to install the agents in all the servers I should first remove them from the Agent-less node, which I did. Then I tried to use the discovery wizard to get the agent install in all of them
    but it didn't matter how many times I try the servers never show up.
    I read in a Tech Net Article that you had to modify the security settings so SCOM would let me decide if I wanted to approve it or not.
    --> http://technet.microsoft.com/en-us/library/hh212853.aspx
    I performed the suggested steps from the article but still the servers were not showing up, not even if I run the Discovery wizard, so I decided to go and perform the installation manually in a couple of servers I was able to install the agent in one of
    the Domain Controllers, I configured the agent to use a service account that has Domain Admin rights. An hour after I installed the agent I went back to the Operations Console Manager and I check under Pending Action but the Server was not showing up. So i
    went back to the Internet to try to find out if someone else had experience the same problem, and in one website some mentioned that if the servers were not showing up it was probably because they were still register in the SCOM Database, now I have no idea
    of how i can check that or How can i remove them from there to have them available again, but what troubles me the most is that even after i installed the agent manually the server were not being recognize.
    I went to the Event Viewer and I found one particular event that caught my attention, see below :
    Log Name:      Operations Manager
    Source:        Health Service Modules
    Date:          6/12/2014 12:48:19 PM
    Event ID:      11551
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      MyManagementServer
    Description:
    Computer verification failure for Machine Name: MyManagementServe is 0x800706BA. The RPC server is unavailable.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Health Service Modules" />
        <EventID Qualifiers="49152">11551</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-06-12T16:48:19.000000000Z" />
        <EventRecordID>1945680</EventRecordID>
        <Channel>Operations Manager</Channel>
        <Computer>MyManagementServer</Computer>
        <Security />
      </System>
      <EventData>
        <Data>MyManagementServe</Data>
        <Data>0x800706BA</Data>
        <Data>The RPC server is unavailable.</Data>
      </EventData>
    </Event>
    Not sure if this is related to the problem that I'm facing right now, but , I make sure that the RPC Services were running and also the related dependencies too. There's no Firewall enable in any of the servers and DNS seems to be working properly.
    Ports 135 / 5723 are open and listening so since I ran out of ideas, I would like to know if some of the experts in this field could perhaps give me some guidelines.
    There's one caveat that I haven't mention yet and that is related to SQL, I checked and my user just has read access to SQL i'm not sure if that could affect this but i think is worth mentioning.
    My main goal is to have all the servers showing up in the Operations Manager Console.
    So thanks all in advance !
    Oscar Loria

    So you can ping and nslookup from your ms to these agents and vice versa right?  I wouldn't do a manual install, I would push the agent from the management server.  You can uninstall the agent manually, or use cleanmom to get rid of them.  Then
    do an install from the console.  When you initiate the install from the console (management server), should it run into any issues it will dump out an error which will give you an idea of where the problem may be.
    From Holmans post on this:
    e MOM Server could not execute WMI Query "Select * from Win32_OperatingSystem" on 
    computer “servername.domain.com” 
    Operation: Agent Install 
    Install account: DOMAIN\account 
    Error Code: 800706BA 
    Error Description: The RPC server is unavailable.
    The MOM Server could not execute WMI Query "(null)” on 
    computer “servername.domain.com” 
    Operation: Agent Install 
    Install account: DOMAIN\account 
    Error Code: 800706BA 
    Error Description: The RPC server is unavailable.
    8004100A 
    800706BA
    1.  Ensure agent push account has local admin rights 
    2.  Firewall is blocking NetBIOS access.  If Windows 2008 firewall is enabled, ensure “Remote Administration (RPC)” rule is enabled/allowed.  We need port 135 (RPC) and the DCOM port range opened for console push through a firewall.  
    3.  Inspect WMI service, health, and rebuild repository if necessary 
    4.  Firewall is blocking ICMP  (Live OneCare) 
    5.  DNS incorrect 
    http://blogs.technet.com/b/kevinholman/archive/2009/01/27/console-based-agent-deployment-troubleshooting-table.aspx
    Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/ If my response was helpful, please mark it as so, if it answered your question, then please also mark it accordingly. Thank you.

  • "Error [10151] The LCP Port on CCM Admin for Mobile Agent is not Configured or misconfigured"

    We are running into a problem which we have noticed on UCCE 8.5 and havent seen on earlier 7.5 release.
    If we setup a CTI port as agent device target and if we try to login the agent using Cisco Desktop (Not CAD, just CTI OS Client) then we get following error:
    "Error [10151] The LCP Port on CCM Admin for Mobile Agent is not Configured or misconfigured"
    But this wasnt the issue with 7.5 and we were able to do agent login with CTI Port as device target. We dont intend to use Mobile Agent feature but just login UCCE agent to CTI port as the device.
    Do we know if this is a known issue or if something has changed between 7.x and 8.x release which could be is causing this?

    So you can ping and nslookup from your ms to these agents and vice versa right?  I wouldn't do a manual install, I would push the agent from the management server.  You can uninstall the agent manually, or use cleanmom to get rid of them.  Then
    do an install from the console.  When you initiate the install from the console (management server), should it run into any issues it will dump out an error which will give you an idea of where the problem may be.
    From Holmans post on this:
    e MOM Server could not execute WMI Query "Select * from Win32_OperatingSystem" on 
    computer “servername.domain.com” 
    Operation: Agent Install 
    Install account: DOMAIN\account 
    Error Code: 800706BA 
    Error Description: The RPC server is unavailable.
    The MOM Server could not execute WMI Query "(null)” on 
    computer “servername.domain.com” 
    Operation: Agent Install 
    Install account: DOMAIN\account 
    Error Code: 800706BA 
    Error Description: The RPC server is unavailable.
    8004100A 
    800706BA
    1.  Ensure agent push account has local admin rights 
    2.  Firewall is blocking NetBIOS access.  If Windows 2008 firewall is enabled, ensure “Remote Administration (RPC)” rule is enabled/allowed.  We need port 135 (RPC) and the DCOM port range opened for console push through a firewall.  
    3.  Inspect WMI service, health, and rebuild repository if necessary 
    4.  Firewall is blocking ICMP  (Live OneCare) 
    5.  DNS incorrect 
    http://blogs.technet.com/b/kevinholman/archive/2009/01/27/console-based-agent-deployment-troubleshooting-table.aspx
    Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/ If my response was helpful, please mark it as so, if it answered your question, then please also mark it accordingly. Thank you.

  • ESB Services nor Default System not showing up in ESB console

    We are running SOA Suite 10.1.3.1 and the services within the ESB console are not showing up immediately after logging into the console. I have verified that the credentials
    within the esb_paramater table are correct. We have also increased the amount of max cursors on the DB. Is there something else
    that we can try to get those services up and running?
    Edited by: user5529739 on Jun 11, 2009 9:50 AM

    So you can ping and nslookup from your ms to these agents and vice versa right?  I wouldn't do a manual install, I would push the agent from the management server.  You can uninstall the agent manually, or use cleanmom to get rid of them.  Then
    do an install from the console.  When you initiate the install from the console (management server), should it run into any issues it will dump out an error which will give you an idea of where the problem may be.
    From Holmans post on this:
    e MOM Server could not execute WMI Query "Select * from Win32_OperatingSystem" on 
    computer “servername.domain.com” 
    Operation: Agent Install 
    Install account: DOMAIN\account 
    Error Code: 800706BA 
    Error Description: The RPC server is unavailable.
    The MOM Server could not execute WMI Query "(null)” on 
    computer “servername.domain.com” 
    Operation: Agent Install 
    Install account: DOMAIN\account 
    Error Code: 800706BA 
    Error Description: The RPC server is unavailable.
    8004100A 
    800706BA
    1.  Ensure agent push account has local admin rights 
    2.  Firewall is blocking NetBIOS access.  If Windows 2008 firewall is enabled, ensure “Remote Administration (RPC)” rule is enabled/allowed.  We need port 135 (RPC) and the DCOM port range opened for console push through a firewall.  
    3.  Inspect WMI service, health, and rebuild repository if necessary 
    4.  Firewall is blocking ICMP  (Live OneCare) 
    5.  DNS incorrect 
    http://blogs.technet.com/b/kevinholman/archive/2009/01/27/console-based-agent-deployment-troubleshooting-table.aspx
    Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/ If my response was helpful, please mark it as so, if it answered your question, then please also mark it accordingly. Thank you.

  • Trouble importing iso

    I'm having trouble importing a ISO. I've created 3 others, I can ping both OVM and OVS from each other, I've verified ftp from a browser both on the OVM, and a 3rd machine, I've tried importing into 2 repositories, one that's empty. I've had troubles with iptables blocking ports, I've made sure that's turned off as well.
    Here's the error message
    Job Construction Phase
    Job ID: 1366974969957
    begin()
    Appended operation 'Import Virtual Cdrom' to object '0004fb000015000032e116311d0c4f76.iso (11g2030.iso)'.
    Appended operation 'Repository Element files refresh' to object '0004fb000015000032e116311d0c4f76.iso (11g2030.iso)'.
    commit()
    Completed Step: COMMIT
    Objects and Operations
    Object (CREATED): [VirtualCdrom] 0004fb000015000032e116311d0c4f76.iso (11g2030.iso)
    Operation: Import Virtual Cdrom
    Operation: Repository Element files refresh
    Job Running Phase at 2013-04-26 07:16:09,957
    Job Participants: [00:00:00:00:00:00:00:00:00:00:00:25:90:2d:b8:88 (maelstrom.us.oracle.com)]
    Actioner
    07:16:11,661: Starting operation 'Import Virtual Cdrom' on object '0004fb000015000032e116311d0c4f76.iso (11g2030.iso)'
    Job Internal Error (Operation)com.oracle.ovm.mgr.api.exception.JobFailureException: OVMAPI_5001E Job: 1,366,974,969,957/1366974969956/Import ISO ftp://ovm/pub/11g2030.iso, failed. The job has a Job Failure Event: 1,366,974,972,630/Job Error: Server Async Command Failed/(04/26/2013 07:16:12:764 AM)
    Async operation failed on server: maelstrom.us.oracle.com.
    Object: 11g2030.iso,
    PID: 7382,
    Server error message: [Errno 14] curl#19 - "RETR response: 550"
    , on server: 00:00:00:00:00:00:00:00:00:00:00:25:90:2d:b8:88, associated with object: 0004fb000015000032e116311d0c4f76.iso [Fri Apr 26 07:16:13 EDT 2013]
    at com.oracle.ovm.mgr.api.job.JobEngine.checkJobStatus(JobEngine.java:657)
    at com.oracle.ovm.mgr.api.job.JobEngine.objectAsyncStart(JobEngine.java:626)
    at com.oracle.ovm.mgr.op.virtual.VirtualCdromImport.action(VirtualCdromImport.java:52)
    at com.oracle.ovm.mgr.api.collectable.ManagedObjectDbImpl.executeCurrentJobOperationAction(ManagedObjectDbImpl.java:1156)
    at com.oracle.odof.core.AbstractVessel.invokeMethod(AbstractVessel.java:356)
    at com.oracle.odof.core.AbstractVessel.invokeMethod(AbstractVessel.java:333)
    at com.oracle.odof.core.storage.Transaction.invokeMethod(Transaction.java:865)
    at com.oracle.odof.core.Exchange.invokeMethod(Exchange.java:244)
    at com.oracle.ovm.mgr.api.virtual.VirtualCdromProxy.executeCurrentJobOperationAction(Unknown Source)
    at com.oracle.ovm.mgr.api.job.JobEngine.operationActioner(JobEngine.java:230)
    at com.oracle.ovm.mgr.api.job.JobEngine.objectActioner(JobEngine.java:322)
    at com.oracle.ovm.mgr.api.job.InternalJobDbImpl.objectCommitter(InternalJobDbImpl.java:1340)
    at com.oracle.odof.core.AbstractVessel.invokeMethod(AbstractVessel.java:356)
    at com.oracle.odof.core.AbstractVessel.invokeMethod(AbstractVessel.java:333)
    at com.oracle.odof.core.BasicWork.invokeMethod(BasicWork.java:106)
    at com.oracle.odof.command.InvokeMethodCommand.process(InvokeMethodCommand.java:92)
    at com.oracle.odof.core.BasicWork.processCommand(BasicWork.java:81)
    at com.oracle.odof.core.TransactionManager.processCommand(TransactionManager.java:752)
    at com.oracle.odof.core.WorkflowManager.processCommand(WorkflowManager.java:467)
    at com.oracle.odof.core.WorkflowManager.processWork(WorkflowManager.java:525)
    at com.oracle.odof.io.AbstractClient.run(AbstractClient.java:42)
    at java.lang.Thread.run(Thread.java:662)
    FailedOperationCleanup
    Starting failed operation 'Import Virtual Cdrom' cleanup on object '11g2030.iso'
    Complete rollback operation 'Import Virtual Cdrom' cleanup on object '11g2030.iso'
    Rollbacker
    07:16:13,754: Starting rollbacker...
    Executing rollback operation 'Import Virtual Cdrom' on object '0004fb000015000032e116311d0c4f76.iso (11g2030.iso)'
    Complete rollback operation 'Import Virtual Cdrom' completed with direction=DONE
    07:16:13,806: Rollbacker completed...
    Objects To Be Rolled Back
    Object (CREATED): [VirtualCdrom] 0004fb000015000032e116311d0c4f76.iso (11g2030.iso)
    Write Methods Invoked
    07:16:10,445 Class=InternalJobDbImpl vessel_id=3679 method=addTransactionIdentifier accessLevel=6 owningTx=1366974970444
    07:16:10,446 Class=RepositoryDbImpl vessel_id=3068 method=importVirtualCdrom accessLevel=5 owningTx=-1
    07:16:10,450 Class=VirtualCdromDbImpl vessel_id=3688 method=setName accessLevel=6 owningTx=1366974970444
    07:16:10,561 Class=VirtualCdromDbImpl vessel_id=3688 method=setFoundryContext accessLevel=6 owningTx=1366974970444
    07:16:10,561 Class=VirtualCdromDbImpl vessel_id=3688 method=onPersistableCreate accessLevel=6 owningTx=1366974970444
    07:16:10,562 Class=VirtualCdromDbImpl vessel_id=3688 method=setLifecycleState accessLevel=6 owningTx=1366974970444
    07:16:10,562 Class=VirtualCdromDbImpl vessel_id=3688 method=setRollbackLifecycleState accessLevel=6 owningTx=1366974970444
    07:16:10,736 Class=VirtualCdromDbImpl vessel_id=3688 method=setJobAsset accessLevel=6 owningTx=1366974970444
    07:16:10,736 Class=VirtualCdromDbImpl vessel_id=3688 method=setImportFilename accessLevel=6 owningTx=1366974970444
    07:16:10,742 Class=VirtualCdromDbImpl vessel_id=3688 method=setSimpleName accessLevel=6 owningTx=1366974970444
    07:16:10,742 Class=VirtualCdromDbImpl vessel_id=3688 method=setDescription accessLevel=6 owningTx=1366974970444
    07:16:10,743 Class=VirtualCdromDbImpl vessel_id=3688 method=importVirtualCdrom accessLevel=6 owningTx=1366974970444
    07:16:10,826 Class=InternalJobDbImpl vessel_id=3679 method=setCompletedStep accessLevel=6 owningTx=1366974970444
    07:16:10,858 Class=InternalJobDbImpl vessel_id=3679 method=setAssociatedHandles accessLevel=6 owningTx=1366974970444
    07:16:13,259 Class=VirtualCdromDbImpl vessel_id=3688 method=nextJobOperation accessLevel=6 owningTx=1366974970444
    07:16:13,260 Class=InternalJobDbImpl vessel_id=3679 method=setFailedOperation accessLevel=6 owningTx=1366974970444
    07:16:13,763 Class=VirtualCdromDbImpl vessel_id=3688 method=nextJobOperation accessLevel=6 owningTx=1366974970444
    07:16:13,805 Class=VirtualCdromDbImpl vessel_id=3688 method=nextJobOperation accessLevel=6 owningTx=1366974970444
    Completed Step: ROLLBACK
    Job Failed Commit due to OVMAPI_5001E Job: 1,366,974,969,957/1366974969956/Import ISO ftp://ovm/pub/11g2030.iso, failed. The job has a Job Failure Event: 1,366,974,972,630/Job Error: Server Async Command Failed/(04/26/2013 07:16:12:764 AM)
    Async operation failed on server: maelstrom.us.oracle.com.
    Object: 11g2030.iso,
    PID: 7382,
    Server error message: [Errno 14] curl#19 - "RETR response: 550"
    , on server: 00:00:00:00:00:00:00:00:00:00:00:25:90:2d:b8:88, associated with object: 0004fb000015000032e116311d0c4f76.iso [Fri Apr 26 07:16:13 EDT 2013]
    com.oracle.ovm.mgr.api.exception.JobFailureException: OVMAPI_5001E Job: 1,366,974,969,957/1366974969956/Import ISO ftp://ovm/pub/11g2030.iso, failed. The job has a Job Failure Event: 1,366,974,972,630/Job Error: Server Async Command Failed/(04/26/2013 07:16:12:764 AM)
    Async operation failed on server: maelstrom.us.oracle.com.
    Object: 11g2030.iso,
    PID: 7382,
    Server error message: [Errno 14] curl#19 - "RETR response: 550"
    , on server: 00:00:00:00:00:00:00:00:00:00:00:25:90:2d:b8:88, associated with object: 0004fb000015000032e116311d0c4f76.iso [Fri Apr 26 07:16:13 EDT 2013]
    at com.oracle.ovm.mgr.api.job.JobEngine.checkJobStatus(JobEngine.java:657)
    at com.oracle.ovm.mgr.api.job.JobEngine.objectAsyncStart(JobEngine.java:626)
    at com.oracle.ovm.mgr.op.virtual.VirtualCdromImport.action(VirtualCdromImport.java:52)
    at com.oracle.ovm.mgr.api.collectable.ManagedObjectDbImpl.executeCurrentJobOperationAction(ManagedObjectDbImpl.java:1156)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at com.oracle.odof.core.AbstractVessel.invokeMethod(AbstractVessel.java:356)
    at com.oracle.odof.core.AbstractVessel.invokeMethod(AbstractVessel.java:333)
    at com.oracle.odof.core.storage.Transaction.invokeMethod(Transaction.java:865)
    at com.oracle.odof.core.Exchange.invokeMethod(Exchange.java:244)
    at com.oracle.ovm.mgr.api.virtual.VirtualCdromProxy.executeCurrentJobOperationAction(Unknown Source)
    at com.oracle.ovm.mgr.api.job.JobEngine.operationActioner(JobEngine.java:230)
    at com.oracle.ovm.mgr.api.job.JobEngine.objectActioner(JobEngine.java:322)
    at com.oracle.ovm.mgr.api.job.InternalJobDbImpl.objectCommitter(InternalJobDbImpl.java:1340)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at com.oracle.odof.core.AbstractVessel.invokeMethod(AbstractVessel.java:356)
    at com.oracle.odof.core.AbstractVessel.invokeMethod(AbstractVessel.java:333)
    at com.oracle.odof.core.BasicWork.invokeMethod(BasicWork.java:106)
    at com.oracle.odof.command.InvokeMethodCommand.process(InvokeMethodCommand.java:92)
    at com.oracle.odof.core.BasicWork.processCommand(BasicWork.java:81)
    at com.oracle.odof.core.TransactionManager.processCommand(TransactionManager.java:752)
    at com.oracle.odof.core.WorkflowManager.processCommand(WorkflowManager.java:467)
    at com.oracle.odof.core.WorkflowManager.processWork(WorkflowManager.java:525)
    at com.oracle.odof.io.AbstractClient.run(AbstractClient.java:42)
    at java.lang.Thread.run(Thread.java:662)
    End of Job
    Anything else I can look at to troubleshoot?

    Microsoft Windows 8 x64 Home Premium Edition (Build 9200)
    Dell Inc. Inspiron One 2330
    iTunes 11.1.3.8
    QuickTime not available
    FairPlay 2.5.16
    Apple Application Support 2.3.6
    iPod Updater Library 11.1f5
    CD Driver 2.2.3.0
    CD Driver DLL 2.1.3.1
    Apple Mobile Device 7.0.0.117
    Apple Mobile Device Driver 1.64.0.0
    Bonjour 3.0.0.10 (333.10)
    Gracenote SDK 1.9.6.502
    Gracenote MusicID 1.9.6.115
    Gracenote Submit 1.9.6.143
    Gracenote DSP 1.9.6.45
    iTunes Serial Number 00B1B13010B0A0C0
    Current user is not an administrator.
    The current local date and time is 2014-04-05 19:45:17.
    iTunes is not running in safe mode.
    WebKit accelerated compositing is enabled.
    HDCP is supported.
    Core Media is supported.
    **** External Plug-ins Information ****
    No external plug-ins installed.
    iPodService 11.1.3.8 (x64) is currently running.
    iTunesHelper 11.1.3.8 is currently running.
    Apple Mobile Device service 3.3.0.0 is currently running.
    **** CD/DVD Drive Tests ****
    No drivers in LowerFilters.
    UpperFilters: GEARAspiWDM (2.2.3.0),
    D: TSSTcorp DVD+-RW SN-208BB, Rev D500
    Audio CD in drive.
    Found 19 songs on CD, playing time 62:12 on Audio CD.
    Track 1, start time 00:02:00
    Track 2, start time 02:42:01
    Track 3, start time 05:25:60
    Track 4, start time 08:09:57
    Track 5, start time 10:36:09
    Track 6, start time 13:13:56
    Track 7, start time 16:18:38
    Track 8, start time 19:28:07
    Track 9, start time 22:13:45
    Track 10, start time 25:29:61
    Track 11, start time 28:16:74
    Track 12, start time 30:43:59
    Track 13, start time 33:33:14
    Track 14, start time 36:26:40
    Track 15, start time 39:04:71
    Track 16, start time 41:55:37
    Track 17, start time 45:40:45
    Track 18, start time 54:50:21
    Track 19, start time 59:46:65
    Audio CD reading succeeded.
    Get drive speed succeeded.
    The drive CDR speeds are:   24.
    The drive CDRW speeds are:   24.
    The drive DVDR speeds are:   24.
    The drive DVDRW speeds are:   24.

  • I need to share an USB disk with a Vista machine

    I currently have two MBP's accessing a usb drive plugged into a USB hub off an AEBS wirelessly. I need at add a Vista machine to the mix. I have Bonjour for WIndows installed on the machine and all it does it allow me to connect the the printer that is attached to the AEBS. I have Googled and found nothing that gets me a solution. This seems like it should be fairly easy or is it?
    Ideally, I would like to be able to access this drive remotely from my home office. Pardon the pun, but is that even remotely possible?

    That looks right.
    Remote Access: Open Finder and select Go > Connect Server and type in your IP address or FQDN.
    Note: Most ISP's would have blocked NetBIOS ports required for Windows File Sharing to work. And Vista will unlike to gain access to your AEBS's AirDisk.
    Local Access From Windows PC: Open the AirDisk Utility and select the name of AEBS and click connect.

  • Employee given invite, he installed, but after installing CC app   Audition under his account email, it still says 'trial', on admin side, it says 'pending user' and not 'active.

    I am the admin in my company, and out of all the licenses, he is having a problem with this. And this is the second try. We tried with the company email for him, and it didn't work. We are now trying with his Gmail, and there is still a problem.

    So you can ping and nslookup from your ms to these agents and vice versa right?  I wouldn't do a manual install, I would push the agent from the management server.  You can uninstall the agent manually, or use cleanmom to get rid of them.  Then
    do an install from the console.  When you initiate the install from the console (management server), should it run into any issues it will dump out an error which will give you an idea of where the problem may be.
    From Holmans post on this:
    e MOM Server could not execute WMI Query "Select * from Win32_OperatingSystem" on 
    computer “servername.domain.com” 
    Operation: Agent Install 
    Install account: DOMAIN\account 
    Error Code: 800706BA 
    Error Description: The RPC server is unavailable.
    The MOM Server could not execute WMI Query "(null)” on 
    computer “servername.domain.com” 
    Operation: Agent Install 
    Install account: DOMAIN\account 
    Error Code: 800706BA 
    Error Description: The RPC server is unavailable.
    8004100A 
    800706BA
    1.  Ensure agent push account has local admin rights 
    2.  Firewall is blocking NetBIOS access.  If Windows 2008 firewall is enabled, ensure “Remote Administration (RPC)” rule is enabled/allowed.  We need port 135 (RPC) and the DCOM port range opened for console push through a firewall.  
    3.  Inspect WMI service, health, and rebuild repository if necessary 
    4.  Firewall is blocking ICMP  (Live OneCare) 
    5.  DNS incorrect 
    http://blogs.technet.com/b/kevinholman/archive/2009/01/27/console-based-agent-deployment-troubleshooting-table.aspx
    Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/ If my response was helpful, please mark it as so, if it answered your question, then please also mark it accordingly. Thank you.

  • TGW 3.5 on Linux

    Thought I would start a new thread...
    I have installed TGW on linux and can access the web gui via the same box but cannot access it beyond itself. Is there something I am missing.
    Address of collector is 192.168.10.10 listening on ports 80 and 443
    tcp        0      0 ::ffff:192.168.10.10:80      :::*                        LISTEN     
    tcp        0      0 ::ffff:192.168.10.10:443     :::*                        LISTEN  
    I can see its doing IPV6 to 4 feature in the netstat table, see below.
    tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN     
    tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN     
    tcp        0      0 0.0.0.0:56598               0.0.0.0:*                   LISTEN     
    tcp        0      0 127.0.0.1:631               0.0.0.0:*                   LISTEN     
    tcp        0      0 127.0.0.1:25                0.0.0.0:*                   LISTEN     
    tcp        0      0 127.0.0.1:32000             0.0.0.0:*                   LISTEN     
    tcp        0     52 192.168.10.10:22             10.10.10.10:55506         ESTABLISHED
    tcp        0      0 127.0.0.1:32000             127.0.0.1:31000             ESTABLISHED
    tcp        0      0 :::111                      :::*                        LISTEN     
    tcp        0      0 ::ffff:192.168.10.10:80      :::*                        LISTEN     
    tcp        0      0 :::22                       :::*                        LISTEN     
    tcp        0      0 ::1:631                     :::*                        LISTEN     
    tcp        0      0 ::ffff:192.168.10.10:443     :::*                        LISTEN     
    tcp        0      0 :::60381                    :::*                        LISTEN     
    tcp        0      0 :::5001                     :::*                        LISTEN     
    tcp        0      0 ::ffff:127.0.0.1:31000      ::ffff:127.0.0.1:32000      ESTABLISHED
    Wayne

    Hi Bryan
    I couldn't start the service without setting the /etc/hosts file, but found the fault. It was not IPv6 related as disabling this did not resolve the issue. It was iptables blocking the port 80 connection.
    Modifying /etc/sysconfig/iptables to allow 80 and 443 now works remotely.
    Next issue...
    I cannot test the connection or register tgw, I get the following error in the logs
    AxisFault
    faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
    faultSubcode:
    faultString: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found
    Wayne

  • HT4174 Not sure what I did but projects are not showing up in the video window as i skim... Event footage does but project footage has sound but the video screen is gray... Hwo do I get the vido to show in the viewer?

    Not sure what I did but projects are not showing up in the video window as i skim... Event footage does but project footage has sound but the video screen is gray... How do I get the vido to show in the viewer?

    So you can ping and nslookup from your ms to these agents and vice versa right?  I wouldn't do a manual install, I would push the agent from the management server.  You can uninstall the agent manually, or use cleanmom to get rid of them.  Then
    do an install from the console.  When you initiate the install from the console (management server), should it run into any issues it will dump out an error which will give you an idea of where the problem may be.
    From Holmans post on this:
    e MOM Server could not execute WMI Query "Select * from Win32_OperatingSystem" on 
    computer “servername.domain.com” 
    Operation: Agent Install 
    Install account: DOMAIN\account 
    Error Code: 800706BA 
    Error Description: The RPC server is unavailable.
    The MOM Server could not execute WMI Query "(null)” on 
    computer “servername.domain.com” 
    Operation: Agent Install 
    Install account: DOMAIN\account 
    Error Code: 800706BA 
    Error Description: The RPC server is unavailable.
    8004100A 
    800706BA
    1.  Ensure agent push account has local admin rights 
    2.  Firewall is blocking NetBIOS access.  If Windows 2008 firewall is enabled, ensure “Remote Administration (RPC)” rule is enabled/allowed.  We need port 135 (RPC) and the DCOM port range opened for console push through a firewall.  
    3.  Inspect WMI service, health, and rebuild repository if necessary 
    4.  Firewall is blocking ICMP  (Live OneCare) 
    5.  DNS incorrect 
    http://blogs.technet.com/b/kevinholman/archive/2009/01/27/console-based-agent-deployment-troubleshooting-table.aspx
    Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/ If my response was helpful, please mark it as so, if it answered your question, then please also mark it accordingly. Thank you.

  • Unfiltered port 137 packet through WRT310N firewall

    I'm running a WRT310N wireless router (latest firmware 1.00.4) with NAT and SPI enabled.
    Today, while messing around with a software firewall on my laptop, I noticed the following log entry:
    9/19/2008 9:43:11 AM Communication denied by rule
    dest->192.168.1.103:137 src->77.67.91.83:137 pctl->UDP Rule->Block NETBIOS Name Service requests
    This makes me nervous.  How is it even possible for a packet to be forwarded onto a private network like this?
    1)  Port forwarding?  Nope, or at least I don't have a specific port forwarding rule enabled on the router.
    2)  NAT'd port?  I hope not.  The router should not be NAT'ing the NETBIOS ports outside the private network.
    Is it possible that the router NAT algorithm is too simplistic/transparent enough for someone on the untrusted side to spoof a packet onto the private network?
    Any help or ideas would be appreciated.  The tech support view was to re-flash the router and run/monitor software firewalls?!

    The most likely answer is your computer sent something to 77.67.91.83:137 and this is the response. If you have not configured port forwarding for it the router only forwards UDP packets into your LAN if there is some other outgoing traffic before. Of course UDP port 137 gets natted like any other port. It would be very problematic if they did because then people would not be able to access shares through a NAT router in a simple two router setup.
    NAT is always quite simplistic and it is know to have various issues. NAT is no security feature. It is a connectivity feature allowing you to use a single public IP address with multiple private IP addresses. This mapping per definition is prone to problems. Various NAT helper which allow you to use services like FTP in the internet have side effects for security.
    But one thing is sure to say: the router cannot let something in without you initiating something from the inside before. If it does not know where to deliver the packet it drops it (unlike years ago when the LAN was flooded with it).

  • WRT54GL constant UDP activity on Port 138

    I'm using the WRT54GL as an access point behind a firewall. Netbios ports, including 138, are blocked to isolate clients.
    On the WRT I've disabled uPnP and set wireless to isolate users. (Assuming this blocks NetBIOS also)
    My firewall log shows activity originating with the WRT54GL at 192.168.10.2 every thirty seconds or so directed to 192.168.10.255
    The WRT is connected via LAN port, DHCP server is off and connection is via DHCP on the firewall. Not that it should make a difference, but I'm using Monowall.
    Any solution would be appreciated. The redundant log is useless.
    Thanks

    try upgrading / reflashing the router's firmware .. after the upgrade , reset and reconfigure it ..

  • Linux Error: 113: No route to host

    After completeing 3.1 in the installation guide I jump down to chapter 4, but I can't get the web interface to work.
    It doesn't matter how I access the URL, I've tried both http://localhost:8080/htmldb and http://realhostname:8080/htmldb/ with same result, no data at all, the connection is closed directly.
    I've checked listener.log and found this:
    02-NOV-2005 01:01:02 * http * (ADDRESS=(PROTOCOL=tcp)(HOST=10.8.0.22)(PORT=2556)) * handoff * http * 12518
    TNS-12518: TNS:listener could not hand off client connection
    TNS-12571: TNS:packet writer failure
    TNS-12560: TNS:protocol adapter error
    TNS-00530: Protocol adapter error
    Linux Error: 113: No route to host
    02-NOV-2005 01:01:23 * http * (ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=33183)) * handoff * http * 12518
    TNS-12518: TNS:listener could not hand off client connection
    TNS-12571: TNS:packet writer failure
    TNS-12560: TNS:protocol adapter error
    TNS-00530: Protocol adapter error
    Linux Error: 113: No route to host
    02-NOV-2005 01:02:54 * service_update * XE * 0
    02-NOV-2005 01:03:01 * http * (ADDRESS=(PROTOCOL=tcp)(HOST=X.Y.Z.W)(PORT=33509)) * handoff * http * 12518
    TNS-12518: TNS:listener could not hand off client connection
    TNS-12571: TNS:packet writer failure
    TNS-12560: TNS:protocol adapter error
    TNS-00530: Protocol adapter error
    Linux Error: 113: No route to host

    Problem located (as usual after the 3 hours it took me to find the forum and post about it).
    Using netstat and lsof I found that XE not only binds to 1521 and 8080, but also to port 33172 and since iptables blocks everything it got "No route to host".
    The question is if 33172 is static or just a randomly chosen port number.

  • {wlan} BCM4313 4727 changes ? (solved)

    02:00.0 Network controller: Broadcom Corporation BCM4313 802.11b/g/n Wireless LAN Controller (rev 01)
    broadcom-wl (known as boadcom-sta) but not recommanded or brcm80211 that seem pretty new ??? b43 don't support it anymore ???
    My wlan is shown on vanilla Archlinux with Openbox and network-manager, but it don't connect to my ad-hoc wifi connection (tried blacklist bcma), does iptables block it ???
    Before I was using broadcom-wl on Archlinux with no troubles ...
    Note : the problem is my ad-hoc connection, not sure why and how to solve that ...
    Last edited by spiky25 (2011-11-28 23:00:57)

    I'm not sure what you mean. Ad-hoc is two devices communicating directly. It's a different mode of operation, and the driver needs to support this mode. brcmsmac doesn't. b43 does, but b43 doesn't yet support this card. So you're left with broadcom-wl.
    Last edited by Gusar (2011-11-20 01:22:59)

  • Block incoming connections to ix2-dl by internal firewall/iptables

    Hi.
    How do I block incoming connection to ix2? I opened rsync and forwarded the port but I need to block all IP except one. How do I do that?
    I tried iptables, but they seem not to be working ("libkmod: ERROR ../libkmod/libkmod.c:505 kmod_lookup_alias_from_builtin_file: could not open builtin file '/lib/modules/2.6.31.8/modules.builtin.bin'").

    The ix2-dl NAS is behind Windows NAT (RASS) and so I cannot apply firewall rules from there.
    I think you should add firewall (e.g. iptables based) in next update.

Maybe you are looking for