PDA

View Full Version : Quick help needed: visnetic firewall


sharp2037
2007-02-22, 19:24 PM
I have a problem, visnetic appears to have banned my own IP. I am able to get in the server as of right now, but I need to remove myself from the list. Of course, everytime I open visnetic I get booted?

Is there a safe mode or way to edit the firewall without opening visnetic!

Thanks! :help: :help: :help:

sharp2037
2007-02-22, 19:45 PM
don't think it can be done, had to get another way, all set for now!

DXD
2007-02-22, 19:49 PM
I have a problem, visnetic appears to have banned my own IP. I am able to get in the server as of right now, but I need to remove myself from the list. Of course, everytime I open visnetic I get booted?

Is there a safe mode or way to edit the firewall without opening visnetic!

Thanks! :help: :help: :help:

Adding Ban List Entries Using the Command Line

To help link other programs (email, IDS, etc.) to the firewall for banning IPs, the following command line can be used:

DFW.EXE -ban (address) [-expiry {dwn}] [-tarpit] [-reason "(text)"]

where

(address) is the IP or IP range, in one of the following formats:
#.#.#.# - a single IP address
#.#.#.#-#.#.#.# - an IP address range
#.#.#.#/#.#.#.# - a masked IP address
#.#.#.#/N - a network range (N is typically 8, 16 or 24)

-expiry sets when the entry expires (d=1 day, w=1 week, n=never)

-tarpit sets this ban entry as a tarpit

-reason sets the "Reason" text field (a reminder of the cause of the ban)

The (address) is mandatory, "-expiry", "-tarpit" and "-reason" are optional. If "-expiry" is not supplied, the setting shown on Ban List/Properties is used. The default for "-tarpit" is off. The default for "-reason" is "Added from command line".

Example:
The following command line entry would add the IP address 192.168.0.8 to the Ban List, with the expiry set to One Day, the tarpit option on, and the reason set to Untrusted System:

DFW.EXE –ban 192.168.0.8 –d –tarpit –reason "Untrusted System"


Removing Ban List Entries Using the Command Line

You can also remove Ban List entries from the command line using the following syntax:
DFW.EXE -unban (address)

sharp2037
2007-02-22, 20:29 PM
/\/\ boy is that helpful, thanks so I am much printing it now :)

DXD I know you've been a fan of Visnetic Firewall have you ever had problems with IPs getting banned for "doubly encoded escape characters?"

What does this mean really, a search appears to be showing nothing. I am trying to figure it out! Any help is appreciated! THANKS!

DXD
2007-02-22, 20:36 PM
/\/\ boy is that helpful, thanks so I am much printing it now :)

DXD I know you've been a fan of Visnetic Firewall have you ever had problems with IPs getting banned for "doubly encoded escape characters?"

What does this mean really, a search appears to be showing nothing. I am trying to figure it out! Any help is appreciated! THANKS!

Sounds like you have HTTP Filtering turned on. I've turned that off as it caused to many bans of customers just doing silly mistakes. IF you really want to keep it on I'd advise that instead of banning the ip just ignore those violating packets so people don't get baned by accident.

sharp2037
2007-02-23, 09:38 AM
Yes, I did have that on. haven't had too many problems but I guess it's starting to create more of a hassle than it's worth. Have you had it completely disabled for a while, any problems arising or is another HTTP filtering tool you reccomend?

Thanks again for all you help!

DXD
2007-02-23, 09:49 AM
Yes, I did have that on. haven't had too many problems but I guess it's starting to create more of a hassle than it's worth. Have you had it completely disabled for a while, any problems arising or is another HTTP filtering tool you reccomend?

Thanks again for all you help!

I've had it off for a few months I found that my users make to many mistakes causing them to get blocked and then that just led to them getting mad and having to email our support department to get unblocked.

I was going to write an ASP.NET app to allow them to unblock themself based on their control panel login but I've not had time to do that so for now it's stayed off and I've not had any problems with it off. Just make sure you keep any web apps like MailEnable, or and PHP or ASP or ASP.NET apps up to date.

sharp2037
2007-02-26, 11:22 AM
thanks again!