Microsoft Azure lockedout after addikng iptables rules.

Hi,
I have a Microsoft Azure Linux cloud server. Recently I have added some iptable rule to enable some ports, and also enables the port forwarding with ENDPOINTS. After restarting the iptables, I have locked out from the cloud server, and I am not able to login
to my server anymore. Is there any way to flush the iptables from the Azure frontend ?? As i am new to Azure, am not sure about any frontend control panel for the firewalls.
Please suggest me some possible solutions
Thanks in Advance !!!
Sharath Murali

Hi Sharath;
With regards to flushing of iptables from the front end, currently we do not have an option to do that.
To resolve the issue i suggest you to delete the VM but retain the disc and then create a new VM, attach the disk to the new VM and disable the firewall and then rebuild
the VM using the old disk.
Regards;
Prasant

Similar Messages

Microsoft Azure Backups not reducing available recovery points or destination usage after retention period has been reduced.

Microsoft Azure Backups not reducing available recovery points or destination usage after retention period has been reduced.
I had the retention period set to 30 day with around 6.8TB of backups. Over a week ago I changed the retention period down to 7 days, and it took a couple of days for the total recovery points to go down to 7. The destination usage was still going up.
I have come in today (monday) and the total backups is now 10 and the destination usage is now 7.57TB.
I only have the one server backing up to Azure Backups Services.
My questions are;
1. how long does it take for azure to delete backups from outside the retention period*
2. why are there move recovery points that the retention period?
3. Is there a way to purge just the backups outside the retention period?
*It does say the backup agent, "space allocation data is updated on a daily basis".
It would be a great help if anyone had some information on this as the storage costs are getting very high.
Thanks for the help in advance
Z

Hi,
Any update for this issue?
If issue still exists, please open a case from http://azure.microsoft.com/en-us/support/options/, pick Recovery Services & problem type as “Backup”.
Also please let me know the case ID so I can forward it to related support team for monitoring. Thank you for your time.
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

[SOLVED] how to use diffrent iptables rules for different ppp account?

x86 plantform run arch linux system , have two network interface etn1 eth0 .eth1 connect to internet. eth0 connect to other terminals through switch. want use different iptables rules for different pppoe account .also want to know how to forbidden more than one terminals established pppoe link use same account at the same time .
Last edited by linuxsir (2013-09-26 06:48:01)

(You establish PPPoE sessions over the local network to the Arch machine? Which then routes the traffic?)
first question ,yes that is exactly what i am done. second question i also have a small scripts on windows pc to solve routes traffic problem
route -p delete 0.0.0.0
route -p add 192.168.9.0 mask 255.255.255.0 192.168.9.1
route -p add 0.0.0.0 mask 0.0.0.0 192.168.22.0
but after a while i found scripts is not necessary because windows always attempt to use PPPoE sessions as default internet connection local connection is also ok
and use -i pppX in my iptables rules dose not solve my problem , because same account start PPPoE session could be marked as ppp0 or ppp1. it is hard to identified which account start session.

VM in Running (Installing Extensions) state - it seems it's failing to enable the Microsoft.Azure.Diagnostics.IaasDiagnostics plugin

My VM is in the follow state "Running (installing extensions) state. In the dashboard it appears that the IaasDiagnostics extension is not enabled. The message displayed in the dashboard is:
Enable failed for plugin (name: Microsoft.Azure.Diagnostics.IaaSDiagnostics, version 1.2.0.0) with exception Command C:\Packages\Plugins\Microsoft.Azure.Diagnostics.IaaSDiagnostics\1.2.0.0\DiagnosticsPluginLauncher12.exe of Microsoft.Azure.Diagnostics.IaaSDiagnostics has exited with Exit code: -3
How can I get this working?

Hi,
Thanks for your feedback.
Can you RDP into the VM? If yes, you can check the log in the path below to see if you can find any root reason for this issue:
C:\WindowsAzure\Logs\WaAppAgent.log
I also tried to use the Remove-AzureVMDiagnosticsExtension cmdlets to do that and got the same results as yours:
I am sorry to say that I haven't found any ways to remove the DiagnosticsExtension in Azure PowerShell at present. I recommend you to feeback this on the Azure feedback
link below:
http://feedback.azure.com/forums/216843-virtual-machines
By the way, you can access the
preview portal by going to Browse Virtual Machines, select the VM, select
Extensions, select the extension to remove and click Delete. After it has been deleted, go back and select
Add and add it back.
In addition, if you restart the VM and still encounter this issue, please contact Azure support by requesting a support ticket in the link below:
http://azure.microsoft.com/en-us/support/options/
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Closed port for torrent with no iptables.rules

I have a home system with internet connection over a router. Firewall in the router seems to be disabled. I had installed guarddog and selected all the protocols that I need. There is no iptables in deamons line of rc.conf nor there is any iptables.rules files. There are 2 files in /etc/iptables, empty.rules and simple_firewall.rules. So, I wonder if any firewall is working at all in my system since guarddog is a frontend to iptables (i guess) and also is there any need for firewall since almost all the ports are closed.
Secondly, the main issue. I was using ktorrent and it was working fine until a few days ago. Now, bittorrent is not working. its not connecting at all. I tried deluge from community repo and tested the ports with http://www.deluge-torrent.org/test-port.php?port=6881 and it gave me this result:
TCP port 6881 closed on 121.247.200.189
UDP port 6881 open on 121.247.200.189
121.247.200.189 seems to be the ip of my isp as I got a dynamic one.
I am able to reach surf net but not able to download using bitorrent, however, both is possible in windows.
Taking clue from forum, i did nmap.
nmap on my router
[shantanu@bluehead ~]$ nmap 192.168.1.1
Starting Nmap 4.20 ( http://insecure.org ) at 2007-06-25 20:49 IST
Interesting ports on 192.168.1.1:
Not shown: 1679 filtered ports
PORT STATE SERVICE
21/tcp open ftp
23/tcp open telnet
53/tcp closed domain
80/tcp open http
443/tcp closed https
554/tcp closed rtsp
1755/tcp closed wms
2401/tcp closed cvspserver
5000/tcp closed UPnP
5001/tcp closed commplex-link
5050/tcp closed mmcc
6881/tcp closed bittorent-tracker
6969/tcp closed acmsoda
7070/tcp closed realserver
8000/tcp closed http-alt
8080/tcp closed http-proxy
8888/tcp closed sun-answerbook
11371/tcp closed pksd
Nmap finished: 1 IP address (1 host up) scanned in 27.653 seconds
nmap on my ip
[shantanu@bluehead ~]$ nmap 192.168.1.5
Starting Nmap 4.20 ( http://insecure.org ) at 2007-06-25 20:48 IST
Interesting ports on 192.168.1.5:
Not shown: 1696 closed ports
PORT STATE SERVICE
6000/tcp open X11
Nmap finished: 1 IP address (1 host up) scanned in 0.519 seconds
nmap on isp's ip displayed above.
[shantanu@bluehead ~]$ nmap 121.247.200.189
Starting Nmap 4.20 ( http://insecure.org ) at 2007-06-25 20:50 IST
Interesting ports on 121.247.200.189.bang-dynamic-bb.vsnl.net.in (121.247.200.189):
Not shown: 1679 filtered ports
PORT STATE SERVICE
21/tcp open ftp
23/tcp open telnet
53/tcp closed domain
80/tcp open http
443/tcp closed https
554/tcp closed rtsp
1755/tcp closed wms
2401/tcp closed cvspserver
5000/tcp closed UPnP
5001/tcp closed commplex-link
5050/tcp closed mmcc
6881/tcp closed bittorent-tracker
6969/tcp closed acmsoda
7070/tcp closed realserver
8000/tcp closed http-alt
8080/tcp closed http-proxy
8888/tcp closed sun-answerbook
11371/tcp closed pksd
Nmap finished: 1 IP address (1 host up) scanned in 30.573 seconds
Everywhere the bittorrent port seems to be closed. [b]How do I open this port?.[b/]
Last edited by ravisghosh (2007-06-25 21:09:55)

@madeye, first of all I used utorrent in Then I tried as you [shantanu@bluehead Chain INPUT (policy DROP)
target prot opt source ACCEPT 0 -- anywhere ACCEPT udp -- anywhere ACCEPT 0 -- 192.168.1.5 logaborted tcp -- anywhere ACCEPT 0 -- anywhere ACCEPT icmp -- anywhere ACCEPT icmp -- anywhere ACCEPT icmp -- anywhere nicfilt 0 -- anywhere srcfilt 0 -- anywhere Chain FORWARD (policy DROP)
target prot opt source ACCEPT 0 -- anywhere ACCEPT icmp -- anywhere ACCEPT icmp -- anywhere ACCEPT icmp -- anywhere srcfilt 0 -- anywhere Chain OUTPUT (policy DROP)
target prot opt source ACCEPT 0 -- anywhere ACCEPT udp -- anywhere ACCEPT 0 -- anywhere ACCEPT icmp -- anywhere ACCEPT icmp -- anywhere ACCEPT icmp -- anywhere s1 0 -- anywhere Chain f0to1 (3 references)
target prot opt source ACCEPT udp -- anywhere ACCEPT icmp -- anywhere ACCEPT tcp -- anywhere logdrop 0 -- anywhere Chain f1to0 (1 references)
target prot opt source ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT udp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT udp -- anywhere ACCEPT tcp -- anywhere ACCEPT udp -- anywhere ACCEPT icmp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere ACCEPT tcp -- anywhere logdrop 0 -- anywhere Chain logaborted (1 references)
target prot opt source logaborted2 0 -- anywhere LOG 0 -- anywhere Chain logaborted2 (1 references)
target prot opt source LOG 0 -- anywhere ACCEPT 0 -- anywhere Chain logdrop (4 references)
target prot opt source logdrop2 0 -- anywhere LOG 0 -- anywhere DROP 0 -- anywhere Chain logdrop2 (1 references)
target prot opt source LOG 0 -- anywhere DROP 0 -- anywhere Chain logreject (0 references)
target prot opt source logreject2 0 -- anywhere LOG 0 -- anywhere REJECT tcp -- anywhere REJECT udp -- anywhere DROP 0 -- anywhere Chain logreject2 (1 references)
target prot opt source LOG 0 -- anywhere REJECT tcp -- anywhere REJECT udp -- anywhere DROP 0 -- anywhere Chain nicfilt (1 references)
target prot opt source RETURN 0 -- anywhere RETURN 0 -- anywhere RETURN 0 -- anywhere logdrop 0 -- anywhere Chain s0 (1 references)
target prot opt source f0to1 0 -- anywhere f0to1 0 -- anywhere f0to1 0 -- anywhere logdrop 0 -- anywhere Chain s1 (1 references)
target prot opt source f1to0 0 -- anywhere Chain srcfilt (2 references)
target prot opt source s0 0 -- anywhere That means iptables I removed guarding Removed iptables and Last edited by thanks a lot for such elaborate help.
windows and u r very much right that it uses UPnP. In deluge (bt client on arch), UPnP was there but disabled (shaded). Hence, I tried running utorrent using wine and it gave a error message "Unable to map UPnP port' and is not able to connect. So, UPnP is not working in my box.
suggested "iptables -L" and it gave me the following results.
~]$ sudo iptables -L
destination
anywhere
anywhere udp spt:bootps dpt:bootpc
192.168.1.255
anywhere state RELATED,ESTABLISHED tcp flags:RST/RST
anywhere state RELATED,ESTABLISHED
anywhere icmp destination-unreachable
anywhere icmp time-exceeded
anywhere icmp parameter-problem
anywhere
anywhere
destination
anywhere state RELATED,ESTABLISHED
anywhere icmp destination-unreachable
anywhere icmp time-exceeded
anywhere icmp parameter-problem
anywhere
destination
anywhere
anywhere udp spt:bootpc dpt:bootps
anywhere state RELATED,ESTABLISHED
anywhere icmp destination-unreachable
anywhere icmp time-exceeded
anywhere icmp parameter-problem
anywhere
destination
anywhere udp dpts:6970:7170
anywhere icmp echo-reply
anywhere tcp spts:1024:65535 dpts:6881:6889 state NEW
anywhere
destination
anywhere tcp spts:1024:5999 dpt:6969 state NEW
anywhere tcp spts:1024:5999 dpt:http state NEW
anywhere tcp spts:1024:5999 dpt:http-alt state NEW
anywhere tcp spts:1024:5999 dpt:8008 state NEW
anywhere tcp spts:1024:5999 dpt:8000 state NEW
anywhere tcp spts:1024:5999 dpt:8888 state NEW
anywhere tcp spts:1024:5999 dpt:ftp state NEW
anywhere tcp spts:1024:5999 dpt:https state NEW
anywhere tcp dpt:rtsp state NEW
anywhere tcp dpt:7070 state NEW
anywhere tcp spts:1024:5999 dpt:cvspserver state NEW
anywhere tcp dpt:1755 state NEW
anywhere udp dpt:1755
anywhere tcp spts:1024:5999 dpt:11371 state NEW
anywhere tcp spts:1024:5999 dpt:5050 state NEW
anywhere tcp spts:1024:5999 dpt:telnet state NEW
anywhere tcp spts:1024:5999 dpts:5000:5001 state NEW
anywhere udp spts:1024:5999 dpt:5000
anywhere tcp dpt:domain state NEW
anywhere udp dpt:domain
anywhere icmp echo-request
anywhere tcp spts:1024:5999 dpt:5222 state NEW
anywhere tcp spts:1024:5999 dpt:5223 state NEW
anywhere tcp spts:1024:5999 dpts:6881:6889 state NEW
anywhere
destination
anywhere limit: avg 1/sec burst 10
anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED '
destination
anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `ABORTED '
anywhere state RELATED,ESTABLISHED
destination
anywhere limit: avg 1/sec burst 10
anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED '
anywhere
destination
anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `DROPPED '
anywhere
destination
anywhere limit: avg 1/sec burst 10
anywhere limit: avg 2/min burst 1 LOG level warning prefix `LIMITED '
anywhere reject-with tcp-reset
anywhere reject-with icmp-port-unreachable
anywhere
destination
anywhere LOG level warning tcp-sequence tcp-options ip-options prefix `REJECTED '
anywhere reject-with tcp-reset
anywhere reject-with icmp-port-unreachable
anywhere
destination
anywhere
anywhere
anywhere
anywhere
destination
192.168.1.5
192.168.1.255
bluehead.localdomain
anywhere
destination
anywhere
destination
anywhere
is not disabled and that firewall rules are setup by guarddog.
using "pacman -Rns guarddog" and rebooted. Still get the same results with utorrent and "iptables -L" and also the port test shows tcp 6881 is still closed.
now bt clients seems to be able to connect and it works; however, port test still shows tcp 6881 closed.
ravisghosh (2007-06-27 16:51:12)

I use Windows Vista and Microsoft Outlook. After migrating to iCloud, the calendar of iCloud tranferred only part of my past Calendar items to the folder iCloud Calendar in my Outlook. How can I transfer all the entries?

I use Windows Vista and Microsoft Outlook. After migrating to iCloud, the calendar of iCloud tranferred only part of my past Calendar items to the folder iCloud Calendar in my Outlook. How can I transfer all the entries? In iCloud's site all are there.

If the calendar is on iCoud.com, all you would need to do to get it on your phone is go to Settings>iCloud on your phone, sign into your iCoud account and turn Calendars on. The iCloud calendars will then download to your phone.

Creation of Microsoft Azure Website failed. The application already exists

Trying to create a new website, I get this error:
Creating Microsoft Azure Website
Creation of Microsoft Azure Website failed. The application already exists. The remote server returned an unexpected response: (409) Conflict.
I succeeded to create this website earlier on and then I deleted it as I didn't need it anymore.
Now I want to create it again but I get this error even though I've deleted all websites, hosting plans, cloud service, etc from my Azure account.
Any idea on how to fix this?

At this point, I don't know how it happened, but we'll need to dig deeper. I believe there is a sequence that can cause problems if you create a site via Current portal and delete it via Preview, but I'm not sure.
BTW, it seems you have 2 other sites that may be in the same situation (deleted in a way that you couldn't recreated them). They're 'shortl...dev' and 't..d' (not giving full name to avoid squatters!). Do you think you'll want to recreate them later? If
so, we can do the same maneuver to get back to a good state.

Creation of Microsoft Azure Website failed. Cannot move or create server. Subscription ' id ' will exceed server quota.

I'm trying to create a new MVC website with azure cloud server. However, when creating my project/solution in visual studio I get the following error.
Creation of Microsoft Azure Website failed. Cannot move or create server. Subscription '<id>' will exceed server quota.
During the day I created several MVC projects, as a learning exercise, and it worked fine. Now it's failing every time I create a new MVC website with Azure.
Every time I created a website, I have always deleted any generated Azure sites and databases via the management portal. Currently I have no websites in Azure. Thus I don't see how I've reached a quota,
Any ideas what might be going wrong?
My subscription is pay as you go.
Thanks for your time,
Rob

Hi,
It might be due to various other resources (sql DB, application insight, etc) that you may have created while deploying earlier websites, and filled up your Quota. Due to which, creating new resources would exceed the quota limit.
Check for the unused resources and clear them. It may clear the error and allow you to create new websites.
Otherwise, It should be an Account related issue than Technical issue. I suggest you contact Azure support, it is a best choice for you, Please contact support team by creating a support ticket at
http://www.windowsazure.com/en-us/support/contact/
Regards,
Manu Rekhar

Are there any 3rd party tools which provide Microsoft Azure IaaS diagnostics?

Are there any 3rd party tools currently, which can be used for giving detailed diagnostics Information about the IaaS environment (like on VM's, Virtual Network etc.) in a detailed report format periodically? Please note that I am looking for any such tools
around IaaS environment diagnostics here, and not about Application diagnostics.

Hi Bahree,
Microsoft does not suggest a specific third-party product. However, we do use them, and see lots of other customers use them.
Paraleap: Monitoring tool - http://www.paraleap.com/AzureWatch , You may browse to these site and few others to learn more, and chat with their folks directly on how they support Windows Azure.
I see that Microsoft has published a self-help diagnostic package for running Windows-based virtual machines (VMs) in Azure IaaS and this this diagnostic package does not require opening a Support Request with
Microsoft
This package helps to diagnose and resolve common issues on running Windows-based VMs in Azure IaaS
We may download the diagnostic package from Microsoft's Support Diagnostics Self-Help Portal:
https://home.diagnostics.support.microsoft.com/SelfHelp?knowledgebaseArticleFilter=2976864
You might want to see
Microsoft Azure Virtual Machine Monitoring with Azure Diagnostics Extension
Regards,
Shirisha Paderu

[SOLVED] Help needed with iptables rule with unusual setup

Hi I recently setup hostapd on my netbook so I could share a wireless network with my phone and I'm having trouble because my netbook is also hosting a Jetty sever (Subsonic media streamer).
My setup is as follows
[CABLE MODEM]===[WIRED ROUTER]=====[NETBOOK] ))))) [PHONE]
The wired router provides the DHCP server.
On my netbook I created a (br0) bridge between eth0 and wlan0 and started hostapd. That all works fine when I'm not trying to host my Jetty server on my netbook.
The netbook has the IP 192.168.0.8
The phone has the IP 192.168.0.6
I do not want to give the Jetty server root permissions just so it can run on port 80. So instead I start it instead on port 4040 and then use a iptables rule to redirect connections to port 80 to port 4040.
Before I setup hostapd on machine I used to use the following.
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 4040
However when I'm using hostapd and try to access websites on my phone its web browser is ALWAYS REDIRECTED to my jetty server. I'm not really surprised at this as the rule I mentioned above is for any destination or any source.
I tried this rule:
iptables -t nat -A PREROUTING -d localhost -p tcp --dport 80 -j REDIRECT --to-ports 4040
This didn't work. On my phone I could access websites as expected but nobody (tried external from network and internally) could access the jetty server on port 80. Does anyone know why this rule doesn't work?
I tried this rule:
iptables -t nat -A PREROUTING \! -s 192.168.0.6 -p tcp --dport 80 -j REDIRECT --to-ports 4040
This rule worked (Redirect port 4040 connections to port 80 if the connection isn't from my phone). But this is NOT very good at all as it means I would need a separate rule for every wireless device that connected to my netbook (via hostapd). Also if the IP address of my phone ever changes this rule becomes useless too!
Does anyone have any ideas?
Any help would be greatly appreciated.
Thanks.
Last edited by delcypher (2010-07-24 20:17:35)

Well looks like I fixed my own problem.
I added a LOG target in the PREROUTING chain like so
iptables -t nat -A PREROUTING -p tcp --dport 80 -j LOG --log-prefix 'cheesy-redirect'
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 80
When I looked at /var/logs/everything I noticed this.
dan-netbook kernel: cheesy-redirectIN=br0 OUT= PHYSIN=eth0 MAC=00:26:18:73:ea:28:00:09:5b:5d:0a:33:08:00 SRC=178.102.41.92 DST=192.168.0.3 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=51411 DF PROTO=TCP SPT=48219 DPT=80 WINDOW=49640 RES=0x00 SYN URGP=0
The destination is 192.168.0.3 ! Which is very very weird. This the IP address I had told my router to give my eth0 card in the past when I wasn't using a network bridge (br0). I was connected to the network using 192.168.0.8 on br0. The eth0 interface wasn't assigned an IP address.
192.168.0.3 was also the IP address I setup for static port forwarding (which I forgot about) so when I accessed my jetty server from outside my network all packets would of been forwarded to 192.168.0.3
I should never of received those packets as I was 192.168.0.8 not 192.168.0.3 at the time of logging so how I even received these packets is a mystery to me. Maybe the router software is buggy
Fixing was pretty straight forward I changed the port forward to go to 192.168.0.8 and then tried connecting to the jetty server externally and noted in the log
cheesy-redirectIN=br0 OUT= PHYSIN=eth0 MAC=00:25:d3:46:4d:0d:00:09:5b:5d:0a:33:08:00 SRC=178.102.41.92 DST=192.168.0.8 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=65326 DF PROTO=TCP SPT=33597 DPT=80 WINDOW=49640 RES=0x00 SYN URGP=0
So the correct redirect rule is
iptables -t nat -A PREROUTING -p tcp --dport 80 -d 192.168.0.8 -j REDIRECT --to-ports 80
which works nicely
One last question though. Does anyone know how I can use a hostname rather than 192.168.0.8 which points to whatever the IP address of br0 is set to? localhost points to 127.0.0.1 so that doesn't work.

How to change the permission of a folder of a website hosted on Microsoft Azure. I would like to know how to enable read write permission for this folder

How to change the permission of a folder of a website hosted on Microsoft Azure. I would like to know how to enable read write permission for this folder
Regards,
John

Hi,
Please try to setting Folder Permissions on Web Publish, and then deploy it with Web Deploy, as far as I know, if we do that, Web Deploy will use the SetAcl operation to change permissions. Please have a look at the article below.
#http://sedodream.com/2011/11/08/settingfolderpermissionsonwebpublish.aspx
Best Regards,
Jambor
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How to i get back microsoft Windows xp after trashing it on my mac

Help! How do I get back Microsoft Windows XP after trashing it on my Mac?

XP is 'dead' without support from Microsoft or Apple and with Mavericks you want Windows 7 64-bit OEM or 8.1.

[soleved]Can't figure out why iptables rules aren't enforced

My iptables rules are not enforced. I recently reinstalled, and I'm re-using the same /etc/iptables/iptables.rules. They used to work, I tested them, but they don't seem to work anymore.
Here are the contents of my /etc/iptables/iptables.rules:
# Generated by iptables-save v1.4.2 on Fri Oct 24 01:00:22 2008
*filter
:INPUT ACCEPT [576:46438]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [354:62221]
:SSH - [0:0]
:SSH_ABL - [0:0]
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j SSH
-A SSH -m recent --update --seconds 3600 --name SSH_ABL --rsource -j REJECT --reject-with icmp-port-unreachable
-A SSH -m recent --rcheck --seconds 60 --hitcount 5 --name SSH --rsource -j SSH_ABL
-A SSH -m recent --rcheck --seconds 2 --name SSH --rsource -j LOG --log-prefix "RATE: "
-A SSH -m recent --update --seconds 2 --name SSH --rsource -j REJECT --reject-with icmp-port-unreachable
-A SSH -m recent --remove --name SSH_ABL --rsource -j LOG --log-prefix "ABL: -SSH: "
-A SSH -m recent --set --name SSH --rsource -j ACCEPT
-A SSH_ABL -m recent --set --name SSH_ABL --rsource -j LOG --log-prefix "ABL: +SSH: "
-A SSH_ABL -j REJECT --reject-with icmp-port-unreachable
COMMIT
# Completed on Fri Oct 24 01:00:22 2008
All it's supposed to do is limit SSH login attempts to 5 per hour (my router handles all the other ports). Like I said, it worked great before.
P.S. I found these rules here: http://www.itwire.com/content/view/13841/53/1/1/
Last edited by Convergence (2008-10-26 15:16:29)

# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
SSH tcp -- anywhere anywhere state NEW tcp dpt:ssh
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain SSH (1 references)
target prot opt source destination
REJECT all -- anywhere anywhere recent: UPDATE seconds: 3600 name: SSH_ABL side: source reject-with icmp-port-unreachable
SSH_ABL all -- anywhere anywhere recent: CHECK seconds: 60 hit_count: 5 name: SSH side: source
LOG all -- anywhere anywhere recent: CHECK seconds: 2 name: SSH side: source LOG level warning prefix `RATE: '
REJECT all -- anywhere anywhere recent: UPDATE seconds: 2 name: SSH side: source reject-with icmp-port-unreachable
LOG all -- anywhere anywhere recent: REMOVE name: SSH_ABL side: source LOG level warning prefix `ABL: -SSH: '
ACCEPT all -- anywhere anywhere recent: SET name: SSH side: source
Chain SSH_ABL (1 references)
target prot opt source destination
LOG all -- anywhere anywhere recent: SET name: SSH_ABL side: source LOG level warning prefix `ABL: +SSH: '
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
DAEMONS=(syslog-ng iptables network netfs crond alsa kdm sshd ddclient)

Error: 'The File exists 0x80070050' when updating a MVC5 app to Microsoft Azure Tools 2.5

I've a MVC5 app that uses Microsoft Azure Tools v2.4. I want to update the Azure Tools to 2.5. I'm using Visual Studio Community 2013.
When I go to the properties of the Azure project, select the Application tab and then click upgrade I get the error message:
Microsoft Azure Tools for Microsoft Visual Studio
The file exists. (Exception from HRESULT: 0x80070050)
How can I upgrade my project to Azure Tools 2.5?

Hi,
Thanks for Posting.
Refer to the following article on how to upgrade your VS project to SDK 2.5, and let us know if this helps
http://blogs.msdn.com/b/kwill/archive/2014/12/02/windows-azure-diagnostics-upgrading-from-azure-sdk-2-4-to-azure-sdk-2-5.aspx
Also check if you have installed the latest update form VS, you can download it from here :
http://download.microsoft.com/download/A/0/2/A02C37E0-77F7-448A-BD5C-F66AB1F78DBC/VS11-KB3002339.exe
Regards,
Nithin.Rathnakar

Error : -2145124329 Installing Microsoft Azure Recovery Services Agent on SBS Standard 2011

When installing the Microsoft Azure Recovery Services Agent on Windows SBS 2011 Standard I receive error code - Error : -2145124329. When looking at the file OBManagedlog.LOGCurr.errlog located here: C:\Windows\Temp extract below it appears to be failing on
the Windows Powershell 3.0 prerequisite which is apart of the .NET 3 Framework. I have tried to install this manually but it does not appear to be compatible with SBS 2011 standard. Anyone have any ideas? MS Azure cannot help until we have a paid subscription,
I have only a trial at the moment as I wanted to test the product first but have been unable to do so as i can't install the agent.

Hi,
I searched and it seems that Windows SBS 2011 is not in the support list. Only Windows Server 2012 Essentials (and later versions) are available.
Windows Server Essentials Integration Module for Windows Azure Backup is Now Available
http://blogs.technet.com/b/sbs/archive/2013/04/19/windows-server-essentials-integration-module-for-windows-azure-backup-is-now-available.aspx
Edit on May.2: I've heard that it was supported in trial version so I'm now trying to contact related team about whether or not it is supported. Will update when getting any response.

Microsoft Azure lockedout after addikng iptables rules.

Similar Messages

Maybe you are looking for