Temporary network outage when Symantec Endpoint Network protection is enabled - ping

I got a new laptop with Windows 7 some time ago. Since that time I have observed that network traffic is slower. When I ping my local gateway I got following ping times:?
Reply from 10.0.0.1: bytes=32 time=57ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=57ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=57ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=3024ms TTL=64
Reply from 10.0.0.1: bytes=32 time=57ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=57ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=57ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Request timed out.
Request timed out.
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=57ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Especially arguing is the ping of 3024ms or Request timed out as it means that there is a short network outage. As a consequence I have a drop when I am using software phone.
When I disable Network Endpoint proection my pings to the gateway are OK:
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time<1ms TTL=64
Reply from 10.0.0.1: bytes=32 time<1ms TTL=64
Reply from 10.0.0.1: bytes=32 time<1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
Reply from 10.0.0.1: bytes=32 time=1ms TTL=64
This happens in all locations for my computer and the computers for my colleagues who use the same Symantec Endpoint Protection version (12.1.4013.4013)

It seems that it was the issue with policies fetched from policy server. Clicking Update policy button after right click on on Symantec icon in tray resolved it.

Related

Unable to reach localhost from Chrome, after having installed Rancher desktop on Windows 10

After having installed Rancher desktop on my Windows 10 laptop, I cannot reach services listening on localhost through Chrome. Rancher desktop is configured to support Moby/dockerd.
The error reported by Chrome is:
This site can’t be reached
The connection was reset.
Try:
Checking the connection
Checking the proxy and the firewall
Running Windows Network Diagnostics
ERR_CONNECTION_RESET
Replacing localhost with 127.0.0.1 they are reachable, instead.
Ping resolves localhost to 127.0.0.1 correctly:
PS C:\> ping localhost
Pinging xxxxxxxxxx [127.0.0.1] with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Ping statistics for 127.0.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
PS C:\>
I noticed that the hosts file (C:\Windows\System32\drivers\etc\hosts) contains the following entry:
# To allow the same kube context to work on the host and the container:
127.0.0.1 kubernetes.docker.internal
# End of section
I tried to add
127.0.0.1 localhost
to the hosts file, unsuccessfully.
I tried to run the following:
netsh winsock reset
netsh int ip reset
ipconfig /release
ip/config /renew
ipconfig /flushdns
and to restart the pc, but it didn't work, either.
I also tried solutions to similar problems, like:
Localhost not working in Chrome, 127.0.0.1 does work
chrome wont let me access localhost (it google searches instead)
Any suggestion to solve the problem?

Why the first EHLO command is "unrecognized command" on gsmtp?

I'm learning basics of the networking and want to send a email via command line. I opened a telnet session with gmail-smtp-in.l.google.com:25 and issue the very first command EHLO gmail.com
220 mx.google.com ESMTP u16-20020ac25190000000b00449fff280afsi9331201lfi.49 - gmtp
EHLO gmail.com
502 5.5.1 Unrecognized command. u16-20020ac25190000000b00449fff280afsi9331201lf.49 - gsmtp
EHLO gmail.com
250-mx.google.com at your service, [xxx.xxx.xxx.xxx]
250-SIZE 157286400
250-8BITMIME
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-CHUNKING
250 SMTPUTF8
When i first issuing EHLO gmail.com it says Unrecognized command but then it accepts my command. What am i doing wrong?
I cannot replicate your problem. telnet gmail-smtp-in.l.google.com 25 followed by EHLO localhost after having received the greeting works fine for me. (You're not supposed to use gmail.com in EHLO, but this shouldn't matter. The correct way would be to use the fully qualified domain name for your machine (not localhost) or your IP address in square brackets if your machine has no DNS address.)
RFC 5321 specifies that SMTP clients should wait for the greeting from the server before sending the EHLO command. Delaying the greeting can be used as an anti-spam measure, but I don't think that this is the problem here.

Oracle Cloud Infra connection between instances not working

I have two instances in Oracle Cloud Infra. Both running Ubuntu 20.4. I have very strange problem. I cannot access Apache on instance 1 from 2 or even from public IP. Both instances are part of same Subnet. I have enable traffic from Security list, NSG. I can ping and SSH but just can't access apache page on port 80
ubuntu#docker1:~$ ping 10.100.246.237
PING 10.100.246.237 (10.100.246.237) 56(84) bytes of data.
64 bytes from 10.100.246.237: icmp_seq=1 ttl=64 time=0.410 ms
64 bytes from 10.100.246.237: icmp_seq=2 ttl=64 time=0.662 ms
^C
--- 10.100.246.237 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1022ms
rtt min/avg/max/mdev = 0.410/0.536/0.662/0.126 ms
ubuntu#docker1:~$ curl http://10.100.246.237
curl: (7) Failed to connect to 10.100.246.237 port 80: No route to host
ubuntu#docker1:~$
Instance 1 Docker1 = 10.100.246.50
Instance 2 Docker2 = 10.100.246.237
I tried using Oracle Linux but still same problem.
You also need to open the port 80 in your firewall on your Ubuntu instances.
By default Ubuntu comes with UFW (Uncomplicated Firewall) so you can open the port with something like this : sudo ufw allow 80/tcp.
Oracle Linux uses firewalld.

Mysql Database cant connect using "loclhost" But Can Connect using "127.0.0.1" Centos 7 (Cloudlinux)

My OS: Centos 7 + CLOUDLINUX 7.7
When I Try To Login Mysql From Server
[root#server3 ~]# Mysql -u root -h localhost -P 3306 Working ok
[root#server3 ~]# Mysql -u root -h 127.0.0.1 -P 3306 Working Ok
But When I Use localhost on Hosted Domain "xyz.com" In there DB Host = "localhost"
It Not Connect, When I Change It to DB Host = "127.0.0.1" It Connect to Database
[root#server3 ~]# cat /etc/hosts
127.0.0.1 localhost
::1 localhost localhost6.localdomain6 localhost6
[root#server3 ~]# ping localhost
PING localhost (127.0.0.1) 56(84) bytes of data.
64 bytes from localhost (127.0.0.1): icmp_seq=1 ttl=64 time=0.044 ms
64 bytes from localhost (127.0.0.1): icmp_seq=2 ttl=64 time=0.056 ms
64 bytes from localhost (127.0.0.1): icmp_seq=3 ttl=64 time=0.079 ms
64 bytes from localhost (127.0.0.1): icmp_seq=4 ttl=64 time=0.064 ms
/** MySQL hostname */
define( 'DB_HOST', 'localhost' );
any Idea For Fix?
MySQL connects over TCP/IP when using IP address (127.0.0.1), and uses socket file when used localhost. In your situation, I suppose you have mysql.sock in some special location and it is not available from CageFS inside. While /var/lib/mysql/ is being used by default.
If so - please add that directory to /etc/cagefs/cagefs.mp file then run cagefsctl --remount-all.
And Problem Fix

SMTP (port 25) Plesk 12 on CentOS 7 "None of the authentication methods supported by your server"

I have just moved my server to OVH Dedicated server and now having a problem with SMTP, which I need a bit of help with.
SMTP is set on port 25, but when I am setting up my email client (MS Outlook 2010 or Android Email Client) I have notification "server does not support authentication"
I can receive emails on all of the email clients and can send email but only via webmail.
here is an update:
220 myserver.net ESMTP Postfix
EHLO iamuser
250-myserver.net
250-PIPELINING
250-SIZE 10240000
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DNS
Also if I enable TLS on Outlook the it works, but it does not work on android even with TLS.
Please help!!!
Server doesn't provide auth, it may be because of "smtpd_tls_auth_only = yes" in /etc/postfix/main.cf.
"smtpd_tls_auth_only = yes" forbid authentication on non-secure connection like port 25.
You can just change it to "no", or try using secure port 465 in Android Mail Client.
It's quite easy to check your SMTP server auth methods.
On Windows you need telnet client:
CMD> telnet yourserver.name 25
SERVER> 220 deb7x64-plesk12-1.local ESMTP Postfix (Debian/GNU)
CLIENT> EHLO iamuser
SERVER> 250-deb7x64-plesk12-1.local
SERVER> 250-PIPELINING
SERVER> 250-SIZE 10240000
SERVER> 250-ETRN
SERVER> 250-STARTTLS
SERVER> 250-AUTH DIGEST-MD5 CRAM-MD5 PLAIN LOGIN
SERVER> 250-ENHANCEDSTATUSCODES
SERVER> 250-8BITMIME
SERVER> 250 DSN
CLIENT> quit
SERVER> 221 2.0.0 Bye
Where "DIGEST-MD5", "CRAM-MD5", "PLAIN", "LOGIN" it's an authentication methods.
I've checked that "Android Email Client" is replaced with google's Gmail application and it working fine with provided auth methods.