search for: firewals

I notice most things say to open ports 10000-20000 for UDP for SIP, however from time to time this range isn't where Asterisk is opening the ports: We're at xxx.xxx.xxx.xxx port 8542 Answering with capability 0x2(GSM) Answering with capability 0x4(ULAW) Answering with capability 0x8(ALAW) This call has no audio, presumably because port 8542 is firewalled in the iptables on the server.

Hi, > On Sat, Nov 20, 2004 at 01:32:15PM -0500, Francisco Reyes wrote: >> I have a grown list of IPs that I am "deny ip from ###.### to any". Infected machines, hackers, etc.. >> >> Is there a way to have this list outside of rc.firewall and just read it in? > from man ipfw LOOKUP TABLES Lookup tables are useful to handle large sparse address sets, typically

Hello all, I have to setup a system that required to block users access internet in work time but let them access internet on specified time window e.g lunch time. I plan to use iptables and squid to do block and web caching but I have no idea how to control access on time frame. Could any one of you experienced with this can give some starting point /document/howto start reading ? My

I have a grown list of IPs that I am "deny ip from ###.### to any". Infected machines, hackers, etc.. Is there a way to have this list outside of rc.firewall and just read it in?

Hi, I have an DNAT ISSUE with PREROUTING. This is my setup. I have 2 firewalls running iptables. Pls asume 1.2.3.4/29 is the internet interace of FIRST firewall. 2.3.4.5/29 is the internet interface of SECOND firewall. it has DMZ zone. in that DMZ zone, mail server runnig @ 192.168.100.3 Now I want to DNAT port 25 of FISRT firewall (i.e - its ip address - 1.2.3.4/29) to the internet ip

On Tue, 28 Oct 2003 12:24:16 +0100 Jos? J. Gonz?lez Alonso <jjgonzalez@igalia.com> wrote: > Hi! > > I am very interested in your project. Concretely, I am interested in the > possibility of extending your implementation so that it fulfills the > specifications of 802.1G. I read this specifications and they seem > "simple" extensions of 802.1D standard. >

I''m getting a 403 Forbidden error when I try to access the rails welcome page. I''ve followed the instructions for implementing rails on Apache2 at http://wiki.rubyonrails.org/rails/pages/Tutorial using an alias, but isn''t working. Can anyone help me out? Thanks. -Ofir -- Posted via http://www.ruby-forum.com/.

hi all, have anyone tried changing the tcp setting in the source files ? for eg decreasing the TCP_KEEPALIVE_TIME from 2 hours to say 10 min --> (120*60*HZ) to (10*60*HZ) in include/net/tcp.h ?? changing the parameters in static unsigned long tcp_timeouts[] in net/ipv4/netfilter/ip_conntrack_proto_tcp.c from 5 DAYS to 4 HOURS or from 30 MIN to 10 MIN or both ??? will that change tcp keep

Hi List, When we make calls into asterisk with the help of our mobile, landline number, Cisco 79XX series then we didn't able to here any IVR which is playing into asterisk server. But when we dial from SIP softphone then all is working fine and we are able to here the IVR sound files. What is the problem in this case please help me.. -- ----- Thanks and regards Virendra Bhati

When I took over as the IT guy in September, there were 2 separate locations with different domains each managed by a SBS 2003 machine. The connection between them was an OpenVPN tunnel. The network was fine and one could see 2 domains in the network. Local and Local2 are working names. From a workstation on Local one could see Local2 in the Microsoft Windows Network, and vice versa from Local2

I spent several days (at least 20 hours) tying to get Fedora 11 Samba server going. I consulted every resource that I knew including this list. When I discovered that Fedora 11 Samba could be browsed immediately upon installation, and a simple reboot disabled this, I gave up. I decided to try Ubuntu. After intallation it took only five minutes of editing the smb.conf file to make my share fully

Hi, I have an DNAT ISSUE with PREROUTING. This is my setup. I have 2 firewalls running iptables. Pls asume 1.2.3.4/29 is the internet interace of FIRST firewall. 2.3.4.5/29 is the internet interface of SECOND firewall. it has DMZ zone. in that DMZ zone, mail server runnig @ 192.168.100.3 Now I want to DNAT port 25 of FISRT firewall ( i.e - its ip address - 1.2.3.4/29) to the internet ip

After setting up a working SAMBA test server, attempts to move it to production failed. The plan was to replace an old file server upgrading to 3.7 OpenBSD and SAMBA 3.0.14a. The test server worked in a test environment, but when moved to the production network replacing the existing server, SAMBA failed. The failure centers around SAMBA's inability to recognize that it has changed

Hi! Some - few - providers are using IAX2 as a protocol. Most are using SIP. I know that there are advantages of IAX2 regarding multiple connections. But beside this I'm asking myself (and you all) why I should prefer IAX2 when my SIP connection is working. Are there differences in the performance? Bye! Michael

...rewall - The new firewall script from SuSE, rewritten from scratch. Autodetection of interface information, masquerading, autoprotection of services, protection from internal networks, fail-close design and easy to configure. RPM: firewals.rpm Harden SuSE - A special script for hardening a SuSE Linux 5.3 - 6.3. By answering 9 questions, the system is reconfigured very tightly. e.g. disabling insecure network services, removing suid/sgid/world-writable permissions which are not cr...

Hi, I''m running shorewall-2.0.8-1mdk with iptables-1.2.9-7.1.101mdk on kernel-2.4.22-30mdk, Mandrake 10.1 (kernel-2.6.8.1.10mdk-1-1mdk is installed, but I haven''t rebooted yet). I get a significant number of newnotsyn packet denials from existing, valid connections. Most of these seem to be on port 80 and port 25, and directionality doesn''t seem to matter (I run

Hi, I want to block Yahoo Messenger, MSN messanger and Kazza with IPTABLES as my local network users always go there. How Can I do it? I am not runnig iptables as a script nor have I put anything in my rc.local. But instaed, I input the commands and save it by using the below cmmand /etc/init.d/iptables save and I restart it /etc/init.d/iptables restart My box runs on Cent OS 4.4. Help

https://bugzilla.mindrot.org/show_bug.cgi?id=1604 Summary: SCTP support for openssh Product: Portable OpenSSH Version: 5.2p1 Platform: All OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Miscellaneous AssignedTo: unassigned-bugs at mindrot.org ReportedBy: jchadima at

I am having trouble with no return audio on inbound calls. I have been working on this for 18 hours and even built a fresh server and moved everything over and I am getting the same results. I need someone that can help get this resolved tonight. I can provide access to all machines involved. Please email me at tim.compnetwork at gmail.com if you can help. -------------- next part --------------

Hi, I have installed the public domain version of samba version 2.2.8a on aix 5.2 and I receive the following error message while attempting to start the samba server. I am wondering if anyone could help me. Thanks in advance. [2003/11/19 11:52:21, 0] smbd/server.c:main(791) smbd version 2.2.8a started. Copyright Andrew Tridgell and the Samba Team 1992-2002 [2003/11/19 11:52:21, 0]