WTF FortiGate/Fortinet TCP/8008 and /8010

Noticed odd traffic to Canada IPs from FAZ and found they are in use by the FortiGate for the FortiGuard block pages as well as the FortiGuard override pages.

How to close TCP ports 8008 and 8010 on a FortiGate unit

 

Source: http://itheadaches.com/wtf-fortinet-fortigate-tcp-ports-8008-8010-reserved-ports/

QUIC Protocol udp/443

QUIC (Quick UDP Internet Connections, pronounced quick) is an experimental transport layer network protocol developed by Google. QUIC supports a set of multiplexed connections between two endpoints over User Datagram Protocol (UDP), and was designed to provide security protection equivalent to TLS/SSL, along with reduced connection and transport latency, and bandwidth estimation in each direction to avoid congestion. QUIC’s main goal is to optimize connection-oriented web applications currently using TCP. An experimental implementation is being put in place in Chrome by a team of engineers at Google.

Source: How to Block QUIC Protocol

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Block-QUIC-Protocol/ta-p/120207

WordPress Update Failed

Attempting update to wordpress as we are not worthy. Got this error:

Update WordPress

Downloading update from https://downloads.wordpress.org/release/wordpress-4.9.2-no-content.zip…

Unpacking the update…

The update cannot be installed because we will be unable to copy some files. This is usually due to inconsistent file permissions.: wp-admin/includes/update-core.php

Installation Failed

 

THIS guy saved us…https://aaronjholbrook.com/wordpress-permissions-update-error-resolved/

Thanks Aaron!

 

wp-admin/includes/update-core.php

 

 

WordPress install folder:

/var/www/html

 

sudo find /var/www/html -type f -exec chmod 664 {} \;

sudo find /var/www/html -type d -exec chmod 775 {} \;

sudo chgrp -R www-data /var/www/html

Office 2016 Issue

Receiving this notice today with Outlook, Word, and Excel:

capture

Searched google and…

This Microsoft link explains the error, but I believe we are good with payment.

This link provided some more reasonable fix to the issue.

After reboot, the error persisted.

This link provided some additional steps. Be sure to view to step 4 to clean up stored credentials for Office apps.

After the removal of the stored office credentials a restart was conducted. Upon login, I was prompted to login to 3-4 various Office 365 resources and no longer received the original account notice.

ISSUE RESOLVED! Thanks google and peeps!

WordPress update issue from wp-admin

TROUBLE:

Update WordPress
Downloading update from https://downloads.wordpress.org/release/wordpress-4.6.1-no-content.zip…

Unpacking the update…

The update cannot be installed because we will be unable to copy some files. This is usually due to inconsistent file permissions.: wp-admin/includes/update-core.php

Installation Failed

FIX was this:

sudo find /nas/content/live/cdbackslash/ -type f -exec chmod 664 {} \;
sudo find /nas/content/live/cdbackslash/ -type d -exec chmod 775 {} \;
sudo find /nas/content/live/cdbackslash/ -exec chown www-data:www-data {} \;

ASSIST:

http://stackoverflow.com/questions/12827513/what-permissions-should-a-wordpress-installation-have-to-be-secure-but-functiona

https://aaronjholbrook.com/wordpress-permissions-update-error-resolved/

Windows 10 Update Issues with GRUB

STILL NOT F%@KING WORKING!!!

Issue getting latest Windows 10 Cumulative Update KB3194798 installed on Windows 10 system with Windows 7, Kali 2.0, and Ubuntu 16. Needed to remove GRUB boot loader and let Windows do the boot magic.

Ran the following in order to address:

bootrec /fixmbr
bootrec /fixboot
bootrec /rebuildbcd

Credit to these geniuses:

http://pcsupport.about.com/od/fixtheproblem/ht/rebuild-bcd-store-windows.htm

http://www.digitalcitizen.life/command-prompt-fix-issues-your-boot-records

Sequencing Access-List Entries and Revising the Access List

This task shows how to assign sequence numbers to entries in a named IP access list and how to add or delete an entry to or from an access list. It is assumed a user wants to revise an access list. The context of this task is the following:
•A user need not resequence access lists for no reason; resequencing in general is optional. The resequencing step in this task is shown as required because that is one purpose of this feature and this task demonstrates the feature.
•Step 5 happens to be a permit statement and Step 6 happens to be a deny statement, but they need not be in that order.
SUMMARY STEPS

1. enable
2. configure terminal
3. ip access-list resequence access-list-name starting-sequence-number increment
4. ip access-list {standard | extended} access-list-name
5. sequence-number permit source source-wildcard or sequence-number permit protocol source source-wildcard destination destination-wildcard [precedence precedence] [tos tos] [log] [time-range time-range-name] [fragments]
6. sequence-number deny source source-wildcard or sequence-number deny protocol source source-wildcard destination destination-wildcard [precedence precedence] [tos tos] [log] [time-range time-range-name] [fragments]
7. Repeat Step 5 and/or Step 6 as necessary, adding statements by sequence number where you planned. Use the no sequence-number command to delete an entry.
8. end
9. show ip access-lists access-list-name

SOURCE:http://www.cisco.com/c/en/us/td/docs/ios/12_2s/feature/guide/fsaclseq.html#wp1043060