search for: firew

...DP for SIP, however from time to time this range isn't where Asterisk is opening the ports: We're at xxx.xxx.xxx.xxx port 8542 Answering with capability 0x2(GSM) Answering with capability 0x4(ULAW) Answering with capability 0x8(ALAW) This call has no audio, presumably because port 8542 is firewalled in the iptables on the server. Is there somewhere I'm missing to port a port range in sip.conf (shouldn't there be if there isn't?). Steve Radich BitShop, Inc. - http://www.bitshop.com

Hi, > On Sat, Nov 20, 2004 at 01:32:15PM -0500, Francisco Reyes wrote: >> I have a grown list of IPs that I am "deny ip from ###.### to any". Infected machines, hackers, etc.. >> >> Is there a way to have this list outside of rc.firewall and just read it in? > from man ipfw LOOKUP TABLES Lookup tables are useful to handle large sparse address sets, typically from a hundred to several thousands of entries. There could be 128 dif- ferent lookup tables, numbered 0 to 127. Each entry is represented by an addr[/masklen] a...

...but let them access internet on specified time window e.g lunch time. I plan to use iptables and squid to do block and web caching but I have no idea how to control access on time frame. Could any one of you experienced with this can give some starting point /document/howto start reading ? My firewal/proxy box will be CentOS 5.2 so I prefer something that can install via yum/rpm Thanks in advance!

I have a grown list of IPs that I am "deny ip from ###.### to any". Infected machines, hackers, etc.. Is there a way to have this list outside of rc.firewall and just read it in?

Hi, I have an DNAT ISSUE with PREROUTING. This is my setup. I have 2 firewalls running iptables. Pls asume 1.2.3.4/29 is the internet interace of FIRST firewall. 2.3.4.5/29 is the internet interface of SECOND firewall. it has DMZ zone. in that DMZ zone, mail server runnig @ 192.168.100.3 Now I want to DNAT port 25 of FISRT firewall (i.e - its ip address - 1.2.3.4/29)...

On Tue, 28 Oct 2003 12:24:16 +0100 Jos? J. Gonz?lez Alonso <jjgonzalez@igalia.com> wrote: > Hi! > > I am very interested in your project. Concretely, I am interested in the > possibility of extending your implementation so that it fulfills the > specifications of 802.1G. I read this specifications and they seem > "simple" extensions of 802.1D standard. >

I''m getting a 403 Forbidden error when I try to access the rails welcome page. I''ve followed the instructions for implementing rails on Apache2 at http://wiki.rubyonrails.org/rails/pages/Tutorial using an alias, but isn''t working. Can anyone help me out? Thanks. -Ofir -- Posted via http://www.ruby-forum.com/.

...ned long tcp_timeouts[] in net/ipv4/netfilter/ip_conntrack_proto_tcp.c from 5 DAYS to 4 HOURS or from 30 MIN to 10 MIN or both ??? will that change tcp keep alive or packets in conntrack in any way ??.. sorry for being too basic but am trying to think how it can help better my iptables/iproute firewal/bandwidth on my pc ! thankiing in advance A.H

Hi List, When we make calls into asterisk with the help of our mobile, landline number, Cisco 79XX series then we didn't able to here any IVR which is playing into asterisk server. But when we dial from SIP softphone then all is working fine and we are able to here the IVR sound files. What is the problem in this case please help me.. -- ----- Thanks and regards Virendra Bhati

...versa from Local2 one could see Local. Additionally, one could easily browse through the remote network as long as the user permissions were correct. With the same user name and password for the two domains there was no issue with authentication. Teh configuration was this: Local ==> IpTables firewall, FC4, with Samba, OpenVpn, Freshclam, Apache and Sendmail Local2 ==>IpTables firewal, FC4, with Samba, OpenVpn, Freshclam Then we had the firewall hacked on Local. The server was compromised and a NEW drive was put in place and reinstalled with Etch (Debian 4.0) The firewall was restored,...

I spent several days (at least 20 hours) tying to get Fedora 11 Samba server going. I consulted every resource that I knew including this list. When I discovered that Fedora 11 Samba could be browsed immediately upon installation, and a simple reboot disabled this, I gave up. I decided to try Ubuntu. After intallation it took only five minutes of editing the smb.conf file to make my share fully

Hi, I have an DNAT ISSUE with PREROUTING. This is my setup. I have 2 firewalls running iptables. Pls asume 1.2.3.4/29 is the internet interace of FIRST firewall. 2.3.4.5/29 is the internet interface of SECOND firewall. it has DMZ zone. in that DMZ zone, mail server runnig @ 192.168.100.3 Now I want to DNAT port 25 of FISRT firewall ( i.e - its ip address - 1.2.3.4/29)...

...reports old network stuff (addresses and browser) as if it has a history file and it is not going to change regardless of the new environment. ie SAMBA fails. Details: Old environment: About 2.2 OpenBSD with a really old SAMBA. i386 Pentium PC Server 4 workstations 1 3com Office Connect Firewal/Gateway(does DHCP) to cable modem and Internet. 192.168.200. network addressing Comments: Solid as a rock never a problem. Boss wants a new PC with XP. Admittedly old workstation giving problems. Test Environment: 3.7 OpenBSD and 3.0.14a SAMBA i386 Server Duron processor 1 new De...

Hi! Some - few - providers are using IAX2 as a protocol. Most are using SIP. I know that there are advantages of IAX2 regarding multiple connections. But beside this I'm asking myself (and you all) why I should prefer IAX2 when my SIP connection is working. Are there differences in the performance? Bye! Michael

...6.3 : SuSE FTP Proxy - The first program of the SuSE Proxy Suite. A secure FTP proxy with support for SSL, LDAP, command restriction, active and passive FTP support, and much more. RPM: fwproxy.rpm, fwproxys.rpm (SSL - not in the US version) SuSE Firewall - The new firewall script from SuSE, rewritten from scratch. Autodetection of interface information, masquerading, autoprotection of services, protection from internal networks, fail-close design and easy to configure. RPM: fir...

...mdk-1-1mdk is installed, but I haven''t rebooted yet). I get a significant number of newnotsyn packet denials from existing, valid connections. Most of these seem to be on port 80 and port 25, and directionality doesn''t seem to matter (I run public web and mail services on the firewall). Web and mail seem to work fine despite the drops, so it''s not enough to actually stop TCP... I''m not sure if this is because of retransmits or if the packets were never actually dropped, just logged as such. The behavior is intermittent enough that it''s difficult...

Hi, I want to block Yahoo Messenger, MSN messanger and Kazza with IPTABLES as my local network users always go there. How Can I do it? I am not runnig iptables as a script nor have I put anything in my rc.local. But instaed, I input the commands and save it by using the below cmmand /etc/init.d/iptables save and I restart it /etc/init.d/iptables restart My box runs on Cent OS 4.4. Help

https://bugzilla.mindrot.org/show_bug.cgi?id=1604 Summary: SCTP support for openssh Product: Portable OpenSSH Version: 5.2p1 Platform: All OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Miscellaneous AssignedTo: unassigned-bugs at mindrot.org ReportedBy: jchadima at

I am having trouble with no return audio on inbound calls. I have been working on this for 18 hours and even built a fresh server and moved everything over and I am getting the same results. I need someone that can help get this resolved tonight. I can provide access to all machines involved. Please email me at tim.compnetwork at gmail.com if you can help. -------------- next part --------------

Hi, I have installed the public domain version of samba version 2.2.8a on aix 5.2 and I receive the following error message while attempting to start the samba server. I am wondering if anyone could help me. Thanks in advance. [2003/11/19 11:52:21, 0] smbd/server.c:main(791) smbd version 2.2.8a started. Copyright Andrew Tridgell and the Samba Team 1992-2002 [2003/11/19 11:52:21, 0]