search for: chunkyhtml

...oth result in: #iptables --list -n Chain INPUT (policy ACCEPT) target prot opt source destination DROP all -- 0.0.0.0/0 0.0.0.0/0 limit: avg 1/sec burst 5 But in the iptables Tutorial 1.1.19 by Oskar Andreasson (http://iptables- tutorial.frozentux.net/chunkyhtml/matches.html#TABLE.LIMITMATCH) there is written: "The limit match may also be inverted by adding a ! flag in front of the limit match. It would then be expressed as -m ! limit. This means that all packets will be matched after they have broken the limit." And in the iptables man-page the...

HI folks, I have a linux router connected to two separate internet connection from an ISP. There is a third interface ( ip -> 192.168.1.1 ) in the router connected to the local network. Configured the routing tables and added the rules and everything seems to be working fine from the routing box. Traceroute to external internet sites reveal that traffic is being routed correctly and

...was thinking about fwmark option. The problem is that routing decision is made after PREROUTING and not POSTROUTING (name obviously sais that :)) and i need to use -o. In OUTPUT this marking can''t be done. I made this conclusion by studying this URL: http://iptables-tutorial.frozentux.net/chunkyhtml/traversingoftables.html Am I right? _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

...ation of the ICMP type, which can be a numeric ICMP type, type/code pair, or one of the ICMP type names shown by the command iptables -p icmp -h As we can see, there is no word about the "Note" found on this page: https://www.frozentux.net/iptables-tutorial/chunkyhtml/a6339.html which clearly says that 255 is treated specially by iptables to mean "any". I think it would be a good thing to add that note to the manual page. Also since there is a name "any", maybe make a clear correlation between both. -- You are receiving this mail because:...

is there anybody who can tell me how to forward request to other host, i would like to forward all dns requests to other dns server and it must be done with packet forwarding because dns server (resolver) must go down. There is many docs about port forwarding based on nat table and explanation consider linux box act like nat with two e cards. thanks, alens

Hi, I have the following situation: 1 gateway box with 2 WAN interfaces (eth1 and eth2). 1 LAN interface eth0 default gateway is eth2 I want to route all traffic with destination protocol tcp 22 (ssh) NOT over the default gateway eth2 but force them to find it''s route over eth1. All other traffic must go the normal way over eth2. Is this possible with tc or an other tool? --

Hi all ls the network address traslation in centos5.2 different? I disable the default iptable rule and use the following commands but I can't connect http://public:8080 from outside to this host 192.168.0.10 port 80 eth1 is public address eth0 is private address 192.168.0.1 iptables -F -t nat iptables --table nat --append POSTROUTING --out-interface eth1 -j

Hi, I'm using the preconfigured firewall that comes with CentOS 5. I configure it with system-config-securitylevel-tui, close all ports except SSH, and then open only the ones I need. Right now, on one of my desktops, I've installed AMSN, which requires opening a series of ports. I've configured the app to use ports 7000 to 7010 (TCP and UDP). When running

Hi All, I am new to CentOS and I signed up for a Mosso Cloud Server that runs Cent OS 5.2 I can ssh in. I ran: yum install vnc vnc-server then: vncserver (and set desktop viewing password) But I cannot connect. How do I add 5900 to the centos firewall? How do I edit the conf file? I only have SSH ability at this point... -jason

Hello everyone, Please excuse these basic questions but I am new to Linux and I am getting desperate for answers. We are running redhat linux and after many hours of investigation I am unable to get a certain ip rule and ip route command combination to work. These are the software versions installed. [root@c1b04a01 linux-2.4.21-15.EL]# uname -a Linux c1b04a01 2.4.21-15.ELsmp #1 SMP Thu Apr

I have a dual homed server in an install for someone who is very cost sensitive. This server originally is being setup as an Asterisk server, but now the simplest thing for me to do is also set it up to provide internet access for the small shop as well. So it will have one external, WAN facing nic that needs all incoming ports except UDP 5060 and 10000 -> 60000 blocked for all but two ips.

Hello all, I need a virtual firewall/router solution. I''m thinking of a netscreen 1000 but I want to know if it can be done in Linux. Here is my idea: 1 Linux box 2 GigE interfaces 1 interface setup with a public IP address ($PUBIP) 1 interface setup with 802.1q VLAN trunking with 100 vlans assigned ($VLAN1-$VLAN100) a /25 subnet routed to $PUBIP from my core routers All $VLAN

Well FWbuilder is NOT easy. The documentation does not match the current GUI. Now the box is locked up. I will have to pull it again, hook it up to a kybd/VGA and reset iptables.... Maybe Shoreline with webmin.... Problem is I want a REAL router/firewall with little work. Both public and private nets have routable addresses. No NATing for me! I just help write the RFC ;) And all the

...-securitylevel-tui, the > last line enables to define custom ports, not mentioned elsewhere in the > menu. So, for example, when I want to add port 6891 for tcp and udp, I > write an entry like this: Check out this site. It's a tutorial fro IPTables. http://iptables.rlworkman.net/chunkyhtml/index.html -- Regards Robert Smile... it increases your face value! Linux User #296285 http://counter.li.org ------------------------------ Message: 79 Date: Fri, 14 Mar 2008 14:52:31 -0700 From: Rogelio <scubacuda at gmail.com> Subject: Re: [CentOS] php 4/5 dependency question To: &q...