随笔分类 -  Network

.NET默认一个客户端对同一个服务器地址同时只能建立2个TCP连接
摘要:做一个客户端的测试小程序测试web service的并发处理。开始用async task做,不管创建多少个task,用netstat看同时只有两个tcp连接。以为是async task的问题,改用BackgroundWorker和多线程都是同样的问题,经google得知原来是.NET默认一个客户端对 阅读全文
posted @ 2019-01-05 02:01 Amonw's Weblog 阅读(239) 评论(0) 推荐(0)
homekit2mqtt on DietPi
摘要:Followed official install instruction and got: dns_sd.DNSServiceRegister(self.serviceRef, flags, ifaceIdx, name,^ Error: dns service error: unknown Tu 阅读全文
posted @ 2017-09-10 12:49 Amonw's Weblog 阅读(328) 评论(0) 推荐(0)
Minimum setup for Apache+AD SSO
摘要:参照: http://www.grolmsnet.de/kerbtut/ https://docs.typo3.org/typo3cms/extensions/ig_ldap_sso_auth/2.1.1/AdministratorManual/ConfigureApacheKerberos.htm 阅读全文
posted @ 2017-03-24 03:21 Amonw's Weblog 阅读(233) 评论(0) 推荐(0)
Minimum configuration for openldap to proxy multiple AD into a single search base
摘要:[root@localhost ~]# cd /etc/openldap[root@localhost openldap]# cat slapd.confloglevel 0x900include /etc/openldap/schema/core.schemapidfile /var/run/op 阅读全文
posted @ 2016-10-04 23:18 Amonw's Weblog 阅读(238) 评论(0) 推荐(0)
ASDM through site to site VPN
摘要:网上大部分文档只提到两个地方需要设置:在6.2版本确实可以。但在7.2版本上只有用vpn client或anyconnect client连上的客户端可以用ASDM连上ASA,而通过site to site VPN的还不行。7.2上还有一个地方要设置: 阅读全文
posted @ 2015-06-25 02:12 Amonw's Weblog 阅读(35) 评论(0) 推荐(0)
PHP, LDAPS and Apache
摘要:要PHP可以连接到用self-signed certificate的ldaps服务器,需要在/etc/ldap.conf中添加一行:TLS_REQCERT never要PHP在Apache中连接到用self-signed certificate的ldaps服务器,需要在httpd.conf中添加... 阅读全文
posted @ 2015-05-29 00:12 Amonw's Weblog 阅读(276) 评论(0) 推荐(0)
DFS security warning and use group policy to set up internet security zones
摘要:Opening a file from a DFS domain share shows a security warning while openning from the server share directly doesn't.To solve this problem, add "*.do... 阅读全文
posted @ 2015-03-12 23:47 Amonw's Weblog 阅读(204) 评论(0) 推荐(0)
Fix network adapter not present problem in cloned CentOS
摘要:(You can find a lot of articles on this from the internet. I just put it here for my own record.)It's because the cloned system has the original mac a... 阅读全文
posted @ 2014-10-23 23:29 Amonw's Weblog 阅读(276) 评论(0) 推荐(0)
NX 8.5 License Server Firewall Setting
摘要:Reference:http://eng-tips.com/viewthread.cfm?qid=284511The FLEXNet Server(lmgrd) listens to 28000 by default and opens a dynamic port for vendor daemo... 阅读全文
posted @ 2014-07-16 01:29 Amonw's Weblog 阅读(267) 评论(0) 推荐(0)
Cisco ASA intra-interface routing
摘要:LAN1和LAN2的默认路由指向各自的ASA,各ASA中设置对方LAN的静态路由指向ROUTER,打开ASA的intra-interface traffic,关闭LAN1和LAN2地址互相访问的NAT,这时LAN1和LAN2互相可以ping,但TCP连接失败,原因请看:http://www.cisc... 阅读全文
posted @ 2014-06-18 05:25 Amonw's Weblog 阅读(324) 评论(0) 推荐(0)
How to configure windows machine to allow file sharing with dns alias (CNAME)
摘要:Source:http://serverfault.com/questions/23823/how-to-configure-windows-machine-to-allow-file-sharing-with-dns-aliasAllowing other machines to use file... 阅读全文
posted @ 2014-05-26 22:53 Amonw's Weblog 阅读(270) 评论(0) 推荐(0)
Install unifi controller on CentOS
摘要:http://loeric9.blogspot.ca/2013/11/unifi-controller-on-centos.html 阅读全文
posted @ 2014-02-28 02:26 Amonw's Weblog 阅读(366) 评论(0) 推荐(0)
Windows 7 防火墙对Virtualbox guest的影响
摘要:今天测试ASA的public servers配置,在自己的Win7手提用Virtualbox装了个Linux作为测试服务器,网络设置为bridged。从外网可以ping通测试服务器,也可以连80端口,但别的端口如ssh、pop3等都连不上。搞了半天,才发现这些端口只能从我的手提电脑(也就是Virtualbox的host)连上,内部网别的机器都连不上,把host的防火墙关掉就好了。以前一直以为host的网络跟guest的网络是互相独立的,vmware从没出现过这种问题,以前用Virtualbox也没有发现这个问题。进一步搜索发现还有别人遇到类似的情况:https://forums.virtual 阅读全文
posted @ 2014-01-30 06:02 Amonw's Weblog 阅读(746) 评论(0) 推荐(0)
windows7 自带l2tp/ipsec VPN客户端连接Cisco ASA
摘要:搞了半天,最后发现其实很简单,在ASA默认配置的基础上,把所有crypto ipsec ikev1 transform-set 加上mode transport,然后把tunnel-group DefaultRAGroup的pre-shared-key输入到Windows L2TP/IPSec VPN设置的Advanced Settings里就行了。不过会影响Cisco VPN Client的连接,因为它不能用mode transport。如果都要用,就要保留原来的tranform-set,新建tranform-set,设置mode transport,然后加入到dynamic-map里。详情 阅读全文
posted @ 2014-01-25 06:03 Amonw's Weblog 阅读(178) 评论(0) 推荐(0)
立即更新Global Address List and Offline Address Book
摘要:进入Exchange Management Shell,运行:Get-GlobalAddressList | Update-GlobalAddressListGet-OfflineAddressBook | Update-OfflineAddressBookGet-ClientAccessServer | Update-FileDistributionService然后在outlook重新下载Offline Address Book。原文:http://jeffwouters.nl/index.php/2012/09/powershell-howto-update-the-gal-and-oa 阅读全文
posted @ 2013-03-19 03:31 Amonw's Weblog 阅读(1116) 评论(0) 推荐(0)
SELinux and authorized_keys
摘要:经常出现一个问题,很多linux默认安装是激活selinux的,这时root的~/.ssh/authorized_keys可能不起作用。运行一下:restorecon -R -v /root/.ssh就好了。原文:http://www.pyrosoft.co.uk/blog/2013/01/12/setting-up-ssh-authorized_keys-with-selinux-enabled/ 阅读全文
posted @ 2013-03-07 23:17 Amonw's Weblog 阅读(303) 评论(0) 推荐(0)
在dhcpd.conf中配置静态路由
摘要:option ms-classless-static-routes code 249 = array of unsigned integer 8;option rfc3442-classless-static-routes code 121 = array of unsigned integer 8;subnet 192.168.1.0 netmask 255.255.255.0 { option routers 192.168.1.1; option ms-classless-static-routes 24,192,168,2,192,168... 阅读全文
posted @ 2012-02-16 22:58 Amonw's Weblog 阅读(1195) 评论(0) 推荐(0)
IPhone4与Exchange 2010同步失败
摘要:今天拿到IPhone4,设置与Exchange 2010同步,帐号建立成功,同步时出错:“cannot get mail the connection to the server failed”。別的同事的帐号都没问题。google之,原来是因为我的帐号是管理员。解决办法是在帐号的属性->Security->Advanced中选中"Include inheritable permissions from this object's parent",然后马上同步Exchange。一小时内这个选项会被自动还原。具体原因参照:http://retrohack. 阅读全文
posted @ 2011-04-09 04:11 Amonw's Weblog 阅读(373) 评论(0) 推荐(0)
trixbox中对某一条电话线选择特殊铃声
摘要:新增一个inbound route,在zaptel channel中填入中继编号,如“1” ,在Alert info中输入“<http://>;info=alert-group”。其中“alert-group”可换成“alert-internal”或“alert-external... 阅读全文
posted @ 2010-05-06 23:27 Amonw's Weblog 阅读(212) 评论(0) 推荐(0)
让Sendmail和Dovecot使用AD进行用户认证
摘要:如果AD认证不通过则使用linux系统认证。/etc/ldap.conf:host 192.168.1.1base dc=mycompany,dc=localbinddn ldap@mycompany.localbindpw Thisisaveryhardpasswordldap_version 3port 389pam_filter objectclass=Userpam_login_attri... 阅读全文
posted @ 2010-02-12 00:59 Amonw's Weblog 阅读(480) 评论(0) 推荐(0)