ACL configuration to block messenger

Similar Questions

• Good way to configure "never block addresses?

  ID 4210 2.0000 S47

  PIX 515 v6.2 (2)

  What is the proper way to 'never block' a whole network in IDM?

  The network behind the firewall with a private IP address range (10.10.10.1 - 254, for example) it's NAT would have on the external interface of the PIX.

  When an of these IPs gets shunned, I can't make a 'no shun' using the address private IP and the shun is deleted. Then... I guess I can enter the private IP address to 'never block '.

  But... I did this and the IP get sometimes shunned.

  Do I need to use the global public address pool these get NAT'd to?

  Can I enter the following in the IDM to 'never block' across the network? :

  10.10.10.0

  255.255.255.0

  Tony

  The addresses that you use in the never order block on the sensor must correspond to the location where the sensor is deployed.

  If the sensor is monitoring on your private network and generates alarms with private IP addresses then use IP addresses private when you configure never block.

  If the sensor is followed on the external network and generates alarms with the global ips then use the global ips when configuring never block.

  Then look at your alarms and see what address is reported in the alarm (private or global). This is the address or network you want to configure as never to block.

  The sensor doesn't know what private ip addresses are mapped to addresses what global ip. If a block on a private address never has no effect on whether or not the sensor will block a global address.

  The Pix knows the mapping, it's why the shun no order on the Pix will remove it. The Pix knows the mapping is not the case of the probe.

  Beware that if the sensor is turned off and reboot of the sensor re - runs the command to shun for all addresses that it deems should be avoided (even those that you have run the command 'not shun' for the pix). Is not a good idea to manually run the command 'not shun' on the Pix when the IDS sensor actively manages the list of shun.

  Instead, go to IDM on the sensor and delete (delete) the shun:

  Step 11 in these instructions: http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids10/idmiev/swchap5.htm#987105

  The probe won't do then the "no shun" automatically for you.

  To configure the networks never block:

  http://www.Cisco.com/univercd/CC/TD/doc/product/iaabu/csids/csids10/idmiev/swchap3.htm#32488

  (Remember to use the network that corresponds to the period of investigation (private or global) don't appear in the alarm)

  Or use these CLI commands:

  Configure the terminal

  NetworkAccess service

  General

  never shun networks ip address 1.0.0.0 netmask 255.0.0.0

  Replace 1.0.0.0 and 255.0.0.0 with either private or global network according to what is reported in the alarm.

• IOS - XE 4500: Crash on the ACL configuration

  Hi all

  We have recently migrated from stand-alone to VSS on our switches C4500 with Sup 7 - E.

  but the switch hangs at every time we edit or modify the ACL with the below error message:

  % SYS-3-BADBLOCK: bad block pointer

  % SYS-6-MTRACE: mallocfree: addr, pc

  % SYS-6-BLKINFO: corrupted next pointer blk

  % SYS-6-MEMDUMP: 0X7E043FF8

  We have noticed that there is a new bug for this issue is to say

  CSCun33897 Symptom: 
  A series switch Catalyst 4500 running IOS - XE may restart unexpectedly when the configuration of the ACL is applied to an interface.

  but there is no solution available yet.

  Please let me know if anyone had this kind of issue. Appreciate your suggestion and comments thereon.

  Used current Image: cat4500e-universalk9. Spa.03.05.00.E.152 - 1.E.bin.

  Thanks in advance.

  its seems to be closely related to the bug you mentioned

  If you download crashinfo I can look at it and try to confirm.

  Concerning

  Naveen

  rate if it's useful. *

• configuration of Windows messenger fail side is incorrect

  Whenever I start windows live messener I get the Application has failed to start because its side by side configuration is incorrect. Can you help me solve this problem, pluse my live mail window keeps wanting to reboot whenever I turn it off. Ray

  Hello

  here below is a possible solution to your problem of side-by-side configuration of Messenger

  It has been marked as a correct answer

  http://answers.Microsoft.com/en-us/Windows/Forum/windows_vista-windows_programs/the-application-has-failed-to-start-because-its/7b4be68a-AFFC-4EF2-9729-5b9e89c05da7

  and for your windows live mail problem here is the correct Mail portal to use

  http://windowslivehelp.com/product.aspx?ProductID=15

• Local security configuration DCOM blocked me as an administrator. Many functions of Windows do not work

  Dell Optiplex 745, XP Pro, SP3. The computer is 3 years, 3 G of Ram. Fully secure and clean.

  This is what appears in the local security settings, Security Options: DCOM: Machine Access: 0:BAG: BAD:

  I am an administrator and the main user of this computer. Most of Windows functions do not work IE, Office, Outlook, Security Essentials, copy & paste, all dead. Will not allow downloads (Dell has tried to put a remote meeting and the computer won't do anything. No system restore, I tried Safe Mode, can not access user accounts. I'm stuck on my computer. Dell says it's a problem of Ms.

  I can't open my documents. Word does not. Excel does not open. I use this computer for work and have important files that will not open.

  Goggling BAG: BAD brought me an article of the millisecond that changed the security system. I tried the directions and will not work. I hope someone understands what I'm trying to explain. Dell offers a complete reinstallation of XP, but I'm afraid that I lose my documents, pictures, music.

  I don't know what caused it, that happened this week, I don't know how to fix it. System Restore is a white screen. Can not open anything or run analyses "access denied" or the product is not registered. I get all sorts of errors.

  Please advise,

  Jane

  Hi Jane,

  Follow the steps below:

  Method 1: Scan files (SFC) system auditor

  Make the SFC scan on your computer and check to see if that solves the problems.

  See the Description of Windows XP and Windows Server 2003 System File Checker (Sfc.exe) for instructions.

   

  Method 2: Repair install

  Perform a repair of Windows XP installation to fix the problem.

  For instructions, see the following article:

  Perform a repair Installation

  http://www.Microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/doug92.mspx

  Note Perform the repair installation does not loss of data on your computer.

  Gokul - Microsoft Support

  [If this post was helpful, please click the button "Vote as helpful" (green triangle). If it can help solve your problem, click on the button 'Propose as answer' or 'mark as answer '. [By proposing / marking a post as answer or useful you help others find the answer more quickly.]

• Block a foreign network with ACL

  So my router has been present entered Syslog about ID escape tent.

  How can I write an ACL that blocks ALL traffic destined for this network:

  NetRange: 23.32.0.0 - 23.67.255.255
  CIDR: 23.64.0.0/14, 23.32.0.0/11

  I am new to ACL and still in school for Cisco. Bare with me. We do have much to covered ACL.

  Thanks a ton!

  Chris

  This could be the ACL to only block these two networks and leave the rest. You probably want to google the term 'generic-mask' which is a mask the other way around:

  ip access-list extended OUTSIDE-IN  deny ip 23.32.0.0 0.31.255.255 any  deny ip 23.64.0.0 0.3.255.255 any  permit ip any any

  The ACL must be applied to the external interface in the inbound direction:

  interface gig 0/0  description Your public interface  ip access-group OUTSIDE-IN in

• Switchport edge ACL, confused

  So my question is an ACL must define access to the gateway of the network.

  Example of ACLs configured on the port of edge on a network of 10.0.0.0/24.

  The network gateway is 10.0.0.1

  The network host is 10.0.0.200

  Host should only have access to tcp/80 on 192.168.1.200

  Would say edge switchport acl:

  Edge_ACL extended IP access list

  permit tcp host 10.0.0.200 host 192.168.1.200 eq www
  deny ip any any newspaper

  Question is what I have to look like this:

  Edge_ACL extended IP access list

  ip licensing 10.0.0.200 host 10.0.0.1

  permit tcp host 10.0.0.200 host 192.168.1.200 eq www
  deny ip any any newspaper

  Thank you

  Chris

  Chris

  You managed to confuse me as well and I just edited my previous answer, because I was wrong.

  You need not allow traffic to the gateway by default because it never is the IP address of the packet destination. If your first acl would work. He could still block all other traffic, including traffic to other hosts 10.0.0.x, but it would allow traffic to the web server.

  When the PC wants to talk about the web server it arps out for the mac of the gateway address (or use it if it's in the arp table), and then sends the packet with a destination IP address of the web server that is allowed in your acl. So no need to add the default gateway to the acl.

  My apologies for the misleading info, sometimes I even with stupid, I can be surprised

  Jon

• Firefox seems to block links to external applications, in this case Outlook. Can you help me?

  When I click on the link (for example, mailto;email@domain) in a Web site, nothing happens. If I use Chrome or Explorer link opens Outlook to send the e-mail.
  A friend told me "Must be something to do with how your browser is configured, perhaps blocking links to external applications (outlook, etc.)"
  is that correct, and how do I do it please?

  Perfect - thank you very much!

• Update the Configuration of the switch switch 2.1 Executive to 3.5

  Hello world

  I tried the switch 2.1 update Executive to 3.5 and have known, that my configurations have stoppped working. To me, it looks like 3.5 dislikes my IVI configuration for switching modules.

  The function check in MAX tells me that the PXI cards are not available. The first page of the configuration of the switch shows no configuration / terminal blocks.

  Because the configuration consists of nine matrix with lots of report cards, I would really appreciate a way to properly import the old configurations (xml files are available)

  Any ideas?

  See you soon

  Oli

  Hi Oli,

  Yes, there was a major change in the Switch Executive 3.5 - it now uses for switching NI DAQmx calls material. There is a KB document the upgrade process a simulated configuration from an earlier version, but of course, you can try the steps that make sense, too:

  Import of NI Switch Executive 3.0 and previous virtual devices in OR Switch Executive 3.5 and later versions

  http://digital.NI.com/public.nsf/allkb/1D1099A85B156FA68625778500787444

  However, I have noticed that the KB Editor uses a configuration file to .txt instead of the .xml you have. I see two options here: first of all, if you have even an operating system with Switch Executive 2.1, you could probably export settings in the form of text or you can try to modify the .xml file manually to resemble the layout of the text (probably a lot of work, you would have to learn the structure of the text by trial and error using newly created Switch E.g. 3.5 configurations...)

  Best regards

  Sebastian

• Can't open the website, blocker of the site blocks

  Original title: popup blockers

  I registered for an online course and a pop-up - blocker won't let me precede beyond the selection.  I named this site that allowed for the pop ups and even tried to turn pop up blocker off the coast. Help!

  Hello

  1. did you of recent changes on your system prior to this problem?
  2. do you receive any error messages?

  Method 1: I suggest you try the procedure described in the below mentioned link and check if it helps.

  How do I configure the blocker pop up on a computer that is running Windows XP Service Pack 2
  http://support.Microsoft.com/kb/843016

  Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base:
  322756 (http://support.microsoft.com/kb/322756/)
  How to back up and restore the registry in Windows

  Method 2: If the problem persists, you try the procedure described in the link mentioned below.

  Pop-up windows appear with pop-up Blocker is turned on in Windows XP Service Pack 2
  http://support.Microsoft.com/?kbid=843015

  Hope this information is useful.

• Invalid entry in the configuration of the system on vista

  The system configuration Windows blocks always Open Office to run at startup.  The only thing is, I don't have Open Office installed on this computer anymore.  I read somewhere that I could use checking the Windows registry to resolve this problem, but this isn't a part of Vista.  The system configuration tool points to a text file I can edit to remove the invalid entry, or is there something else I need to do?

  Look for entries from startup to Open Office:

  "How to use MSCONFIG in Windows Vista"

  http://www.netsquirrel.com/Msconfig/msconfig_vista.html

  You can also use this free program to do, too:

  "Autoruns for Windows V11.32"

  http://TechNet.Microsoft.com/en-us/sysinternals/bb963902.aspx

  See you soon.

  Autoruns has failed.  In fact I ended up doing a system restore to an earlier point in time.  I think it could work if I knew what I was doing.

  This thread can be marked as resolved; It's too much work to get it right.  Just a nuisance that I have to endure, not a real problem.  If I knew how to close a message, I'd do it myself.

• WRT330N, redirection when site blocked at another page

  Here's what I do.  I have an access policy to my WRT330N, configured to block access to certain web sites.  Currently, trying to back up one of these sites showed the "forbidden" page Wrds.  I would like to have something a little more explanatory or redirect to a web site hosted on a computer on the local network.  Is this possible and if so, how?

  Replacing the WRT is not an option.

  Thank you

  Jason has.

  If I'm not wrrong, you want to say is that you have already blocked certain Web site through your router, and when some try to access this site it should then order to your site, which you host it on your computer.

  If you think about it, then it is not possible through the Linksys router. If you have blocked some website of the Linksys router, and if someone tried to access to this Web site, it will always display them "forbidden".

• When I am on messenger I continues to disconnect and I can't video chat. I can see the person, but the person cannot see me.

  as I have said, I continue to disconnect from windows Messenger and video chat does not work. I can see the person and they can't see me.

  Hello

  ·         You get the error message?

  ·         What version of windows messenger do you use?

  ·         Have you updated the drivers for your sound card, video card or Web camera?

  ·         Have you tried to add your webcam to the conversation, adding audio?

  ·         What kind of camera do you have to Web?

  ·         This problem occurs with just a touch or all contacts? »

  Step 1: Check the video configuration in windows messenger.

  (a) start Windows Live Messenger and sign in.

  (b) prior to connect to anyone, open the menu "Tools" then click on "Configuration video / Audio.

  (c) perform the tests and click on 'next' and confirm the webcam is the video display and then click "Finish."

  (d) prior to connect to anyone, open the menu 'Tools' and then click 'Options '.

  (e) select "Personal" and put a check mark next to "Webcam - enable others to see that I have a webcam".

  (f) click on 'Apply' and then click 'Ok '.

  (g) sign out and completely EXIT Windows Live Messenger to save the new settings.

  Step 2: temporarily disable the security software and check if it works.

  Note: Antivirus software can help protect your computer against viruses and other security threats. In most cases, you should not disable your antivirus software. If you need to disable temporarily to install other software, you must reactivate as soon as you are finished. If you are connected to the Internet or a network, while your antivirus software is disabled, your computer is vulnerable to attacks.

  If this does not work, I suggest you to visit the following site to get help.

  http://windowslivehelp.com/forums.aspx?ForumID=568c1adc-41d2-47E0-BB2C-cdfedd9642ef

  Diana

  Microsoft Answers Support Engineer

  Visit our Microsoft answers feedback Forum and let us know what you think.

  If this post can help solve your problem, please click the 'Mark as answer' or 'Useful' at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

• Remove group policy that blocks USB

  I have a group policy that is configured to block access to removable devices for all users. There is a group in Active Directory (2008 R2) that users can be put to block access to the policy and a policy that allows the removable devices. When users are in the group, the registry is changed so that they should have access, but when they try to access a CD or USB drive, they get "access denied".

  The policy to block (and allow) access is by using Configuration of user - political - administrative templates - system - removable storage access. I "CD and DVD: deny read access", "CD and DVD: deny write access", "floppy drives: deny read access", "Floppy Drives: deny write access", "removable disks: deny read access ', ' removable disks: deny write access", "all removable storage classes: refuse access to all the", "Ribbon devices: deny Read access", "Ribbon devices: deny Write access", "WPD devices." ": deny Read access ' and ' WPD Devices: deny Write access.

  On the strategy of blocking, all who are set to enabled and the policy to allow it, all are set to disabled. If the user is allowed access after that be denied that they are always refused on their main computer. If they log on another computer, it works.

  Why the police work as it should?

  Hello Kevin,

  Thank you for visiting Microsoft Community and we provide a detailed description of the issue.

  According to the description, I understand that the problem with Group Policy delete that blocks USB into the computer.

  Certainly, I understand your concern and will try my best to help you.

  To get more information about it, we have a dedicated forum where these issues are dealt with and would be better suited to the TechNet community.

  Please visit the link below to find a community that will provide the best support.

  https://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

  I hope this information is useful.

  Please let us know if you need more help, we will be happy to help you.

  Thank you.

• Blocker and TLS

  Hello @all,

  I have configured the blocker for TLS and accepts incoming TLS connections. But delivery to the local mail server is not encrypted TLS. What should I set to activate TLS encryption for execution on the local mail server?

  The local mail server accepts TLS connections. So I guess I missed something on the blocker.

  Hello

  In response to your question, you would log in to the blocker. Under (Network tab), you must click on the SMTP authentication. Go ahead and give it a name and select a profile type and click Next, then fill in the fields and click on finish, submit the changes and then commit the changes. This should create a TLS connetion to your mail server. I hope this helps.

  Jason