- Define some groups
- object-group network sysadmin
- network-object host <IP>
- exit
- object-group network webhost
- network-object host <IP>
- Build access-list
- access-list inside-out permit tcp object-group sysadmin object-group webhost eq ssh
- access-list inside-out deny tcp any object-group webhost eq ssh
- access-list inside-out extended permit ip any any
- Apply to interface
- access-group inside-out out int inside
Archive for October, 2009
Cisco ASA 5505 Transparent Firewall only allow specific IP access SSH
Tuesday, October 27th, 2009Outlook express does not remember the windows size
Monday, October 26th, 2009This is just a reminder, if you maximized the message window, the Outlook express would not remember it, please see:
NTLDR Missing
Friday, October 23rd, 2009There are a lot of reasons can cause NTLDR Missing, here is just one simple example:
HP Pavilion a1357c with Windows XP Media Center 2005, when starting, it shows “NTLDR Missing”
With first repair, I found there is nothing in driver C but the only folder Windows.
F10 to recover, failed because files could not be copied after 90% of the recovery processing.
Then use CD to fresh install…
Cisco ASA 5505 Transparent Firewall blocks IP access
Tuesday, October 20th, 2009Block it
- access-list outside-in extended deny ip host <IP address> any
Unblock
- no access-list outside-in extended deny ip host <IP address> any
And don’t forget this:
- access-group outside-in in interface outside
Windows XP keeps rebooting
Monday, October 19th, 2009There are many reasons of Windows XP keeps rebooting.
Usually, when windows keeps rebooting, there are some options you can choose:
- Safe Mode
- Safe Mode with Networking
- Safe Mode with Command Prompt
- Last known Good Configuration(Your most recent settings that worked)
Unfortunately, most of time none of them works, it looks like you can’t do anything with them. While windows is rebooting, you may press F8 to get more options, they are:
- Enable Boot loggin
- Enable VGA mode
- Directory Service Restore Mode(Windows domain controllers only)
- Debugging mode
- Disable automatic restart on system failure
- Reboot
- Return to OS choices menu
What can you do? Try “Disable automatic restart on system failure”, you will get some detail information.
Here is an one example:
Blue screen
UNMOUNTABLE_BOOT_VOLUME
STOP:0×000000ED(0×8A2CA9E),0xC0000006,0×00000000,0×00000000)
Microsoft has given an answer:
Let’s try chkdsk /r
After one and half hours, computer showed message:
CHKDSK found and fixed one or more errors on the volume.
then type exit, the computer restarted.
It worked!!! So, this one can be a case of why Windows XP keeps rebooting.
TODO: Will wirte more different cases for Windows XP keeps rebooting.
Cisco ASA 5505 remote access via SSH
Saturday, October 17th, 2009- Firewall(config)# ip address ip_address subnet_mask
- Firewall(config)# route if_name foreign_network foreign_mask gateway[metric]
The line 2 above is the key, without it, you can not access the firewall from outside.
Outlook express frozen
Tuesday, October 13th, 2009Symptom: Open Outlook express, it is frozen (mouse become hour glass shape when hovering on it).
Work around:
- Second repair windows, does not work
- Uninstall/Reinstall Outlook express through “Add/Remove Windows Components”, does not work
- Looking for the file location, there is no “Identities” folder under ” Documents and settings/{User}/Local Settings/Application Data”, I guess, it is the culprit.
Because the outlook express is frozen, I could not check the configuration through it. So, I opened the Registry to find out the file location.
- Start->run->regedit
- To “\HKEY_CURRENT_USER\Identities\{some numbers}\Software\Microsoft\Outlook Express\5.0″
- On the right hand side, look at “Store Root” I found the file location is not default.
Now,here is the solution:
- Move all the files under the folder which from “Store Root” above to one backup folder.
- Open Outlook Express, no more frozen, great!
- Check the folder, 6 new files are generated, they are:
- folder.dbx
- inbox.dbx
- offline.dbx
- outbox.dbx
- pop3
- pop3uidl.dbx
because the computer is connected to Internet, new emails are coming …
Last but not least, in Outlook Express, File -> Import ->Messages…
next, select “Microsoft Outlook Express 6″
next, select “Import mail from an OE6 store directory”, don’t forget check the box besides “Only import mail that was downloaded or created in OE6 … ”
next, brows to the backup folder mentioned above
next, select “All folders”
next, bingo!
Windows XP can't start
Tuesday, October 13th, 2009When start the computer, it says:
Windows XP could not start because the following file is missing or corrupt: \WINDOWS\SYSTEM32\CONFIG\SYSTEM
I found this article from Microsoft Knowledge Base is useful to solve this problem.
http://support.microsoft.com/kb/307545
I just followed the instruction and solved the problem.
NOTE: The original article said to delete these files before copy them from c:\windows\repair:
system
software
sam
security
default
But I found you can just copy & over write them to save time. It works
UPDATE: After I copied these 5 files mentioned above, the system told me to do:
- reactive the windows
- reinstall some drivers for motherboard (For this case, motherboard is Intel D945 Gtp)
UPDATE: Actually, it is not necessary to copy all these 5 files. Only the SYSTEM file is corrupt ,why should you recover all of them? And the other 4 files control other functions for Windows XP, if they are overwritten, the corresponding functions would be changed.
TODO: Will add detail information for these 5 files.
Hyper-V High Availability Configuration
Friday, October 9th, 2009http://technet.microsoft.com/zh-cn/magazine/2008.10.higha.aspx
Install CentOS 5.3 on Windows 2008 R2 Hyper-V
Thursday, October 8th, 2009I tried install CentOS 5.3 on Hyper-V Version 2 before, it DID NOT work, I googled and found this was very useful:
http://www.jules.fm/Logbook/files/win2008_linuxic_rc2_rhel.html
However, the author said the method did not support CentOS 5.3. When Windows 2008 R2 came out, I tried it again, it worked fine.
The installation is very easy:
- Download the CentOS 5.3 ISO file from www.centos.org
- Create a virtual machine on Windows 2008 R2 Hyper-V system.
- Install CentOS 5.3 on the virtual machine.
- yum update (When I do “yum update” on Hyper-V Version 2 system, the CentOS 5.3 will die on boot up with error message of “kernel panic”)
- Download Linux_IC from Microsoft Website and install it to the installed CentOS 5.3.
- Setup Mouse driver
- UPDATE November 19, 2009: Make sure add Legacy Network Adapter, otherwise, you can not see the network card when you use setup utility.
That’s it. All done!
TODO: I am going to write the details for this topic. Before I finish it, if you encounter any problem during the installation, please leave me a comment, I will try my best to answer your question.