How to blow up a server in one mouse click

http://scripting.com/stories/2010/10/06/howToBlowUpAServerInOneMou.html

by davewiner • 16 years ago

3 12 16 years ago

scripting.com

makmanalp• 16 years ago

What? How does he not have access to a serial console or something?

martinp• 16 years ago

Why couldn't he reach port 5337 if the firewall was turned off? Doesn't make sense.

jhrobert• 16 years ago

True. Maybe he assumed that when the firewall was off, everything was blocked (forgetting about the remote desktop).

davewiner• 16 years ago

It's a good question why 5337 wasn't accessible, but it wasn't.

That's why I was clicking around looking for reasons when the OS asked this question (which I answered too quickly without thinking).

No matter, I've already provisioned a new server to take its place, and terminated the old one.

teilo• 16 years ago

Probably because he forgot to open that port in his EC2 security group.

Machines belong to security groups, and security groups define which ports have access to the outside world - which is why you don't need the Windows firewall at all when running an EC2 instance.

pseudonym• 16 years ago

Virtual machines run on physical machines. Physical machines can have stuff plugged into them and can probably run a VM app.

It's a hassle, sure, but if you're hosting this elsewhere chances are this isn't the first time this has happened, and if you're hosting it yourself then problem solved.

brk2• 16 years ago

Why would you have to completely re-provision a machine just because you turned the firewall on?

I'm guessing maybe this is a VM?

Either way, I tend to prefer hardware firewalls over software firewalls for this reason ESPECIALLY on Windows. With a "real" firewall, you can generally maintain a connection to the firewall (if you've set it up right), and that way if you firewall off the wrong port and need to reverse something you can still do so.

mkelly2• 16 years ago

Isn't that what he says?

"And this is a completely virtual machine, there's no keyboard, no big red switch, no physical reality with which to fix this."

brk2• 16 years ago

Oops, yeah. I missed the "virtual" part. That's what I get for reading/commenting while on a conference call and working on a remote desktop session...

mkelly2• 16 years ago

I think changing firewall rules remotely is one of those things where it pays to be extra-careful, and then make sure you have access to the console (or physical access) for when you inevitably mess it up and lock yourself out.

frognibble• 16 years ago

The server is running on EC2. As far as I can tell, EC2 does not have a virtual console interface or any other way to rescue a server that blocks all network connections with a firewall.

bradleyland• 16 years ago

If you can get a command prompt, you can just run:

netsh firewall set opmode disable

Tragedy averted.

How to blow up a server in one mouse click

Related Stories