Ian

21 posts

Draytek Router Firmware Damage – the router will die after reboot

2 Comments
How To IT Support

Draytek Router Firmware Damage

If you have a DrayTek with Firmware Damage and a warning “the router will die after reboot” read on to learn how to resolve it.

 

I have been flashing some DrayTek routers after I received an advisory from DrayTek about new critical firmware updates.

The first few went as expected with minimal downtime until one, a DrayTek 2830, disconnected midway through the upload of the firmware.

The web page of the router came back with an error “session disconnect”.

When I reloaded the page and logged back in I got the message:

Warning: Firmware Damage!!!

You must upgrade FW immediately, or the router will die after reboot!

Continue reading →

Event ID 1500 1501 application event log spwebapp

1 Comment
IT SBS Support

I have just been looking at a problem with IIS (OWA outlook web access and sharepoint http://companyweb were not responding) and remote access to the RDS server had stopped. The application event log was full of event ID 1500 and 1501 for the user spwebapp.

The Windows SBS 2011 is running Exchange/OWA and IIS and has the remote gateway configured to redirect to the RDS server.

I restarted the remote gateway service which fixed the remote access problem.

The next problem was OWA and Company web not responding. I restarted IIS by running the IISreset from an admin command prompt but this didn’t change anything.

Event Id 1500 and 1501
Event Id 1500 and 1501

As you can see the event were happening frequently (about 20 a second). I have no idea when this started as the log was full and overwriting older events.

Continue reading →

Windows 2012 Backup error 0x8004231F

General IT Support Windows Backup

I recently had a server that had Windows Backup failing with the error (0x8004231F) “There is not enough disk space to create the volume shadow copy on the storage location”

Windows Backup Error
Windows Backup Error

All the hard drives appeared to have plenty of space and the backup drives were new and also had plenty of space.

Disk Space
Disk Space

I deceided to try and run the backup from the command line and while this also errored it gave a bit more detail

Error code 0x8004231f Continue reading →

PCI Compliance failure due to Clickjacking threat

General IT PCI Compliance

Recently I’ve come across a new PCI compliance failure “Web Application Potentially Vulnerable to Clickjacking”.

Clickjacking PCI compliance failure

What is Clickjacking ?

Clickjacking uses IFrames to basically put a tranparent layer over a website and therefore can hijack the clicks and keystrokes the user enters.  This is also known as a “UI redress attack” as it is changing the Users Interface.

This means users can be fooled into giving up usernames and passwords when they think they are logging into legitimate web sites, not realising there is a layer intercepting these details between them and the legitimate site. Continue reading →

Security Metrics PCI Compliance Site Failed

General IT PCI Compliance

One of the companys I work with take Credit Card payments and therefore want to be PCI compliant, and use security metrics to scan the network for compliance.

Lately they’ve been failing their online scan for a few reasons.

  1. Windows 2003 has been detected and that now unsupport
  2. TLS version 1.0 is still enabled
  3. SSL RC4 is still enabled.

Security Metrics PCI Compliance Site Certification Failed…

Security Metrics PCI compliance Site Certification Failed
Security Metrics PCI compliance Site Certification Failed

Continue reading →

Windows 2008 server Hyper-V host and corrupted windows install

General IT Hyper-V IT Support

I had a bit of a worrying time last week when a colleague upgraded an old (but live) Dell PowerEdge R310 server running Hyper-V with some new RAM.
He powered down the old server, upgraded the RAM and booted the server back up.
A few minutes later he was looking at the screen loading windows, when it failed. He put the DVD and tried to repair windows but when he got to the  System recovery window it didn’t show any installations of Windows.
He then looked to restore from backup to another server to get the Hyper-V clients running while we fix this server.

Yes, you know what’ coming here, the latest backup we had was over a year old. Our client had not swapped out the drives for that length of time and something had corrupted the one drive that was plugged in.  Windows Backup was reporting successful backups, but when you try to restore, you cannot see any dates to select from. An investigation for another day I think !

Continue reading →

Draytek 2820 maximum number of permitted Internet Sessions

IT Support

I’ve been having some issues with a Draytek 2820 at home lately. I’d made some changes to my network and swapped out a none WiFi Draytek 2820 with the WiFi version. Whilst configuring the new router I took the opportunity to upgrade the Firmware to the latest version (3.3.7.7 , Release Jan 2016).

A few days later I started getting an error message browsing the internet:

“You have reached the maximum number of permitted Internet sessions. Please close one or more applications to allow further Internet access. Contact your system administrator for further information.”

I rebooted the router, which solved the problem, and didn’t think much of it. This happened again a few days later, so I checked the Session Limit, under Bandwidth management, and this was disabled. I did note that the message I saw in the browser was the same message that would be displayed if the Session Limit was enabled.
I tried enabling session manager and then disabling, just in case the GUI was not reporting it correctly, but still the same problem.

Continue reading →