search for: gtaylor

...it''s a bit sketchy right now. And it''ll be interesting to try and keep your table up-to-date as holes are found and new packages are released. Perhaps you should coordinate the data with one of the various RPM listing web sites or one of the rpm manager tools. -- Grant Taylor - gtaylor@picante.com - http://www.picante.com/~gtaylor/ Where do these people come from? Finger for PGP public key.

Hey guys, I am planning to buy some components for a Linux router that will handle the Internet access of 200 computers (includes tc shaping) and some inter sub-network routing (at least 100MBps per eth - and there are 3 eth cards). I was thinking of a: Pentium 4 - 3GHz 256 or 512MB RAM Network Cards. Now - I wonder what is more important: the processor speed or the amount of RAM. And can you

Hi. I''m wondering if there''s a good way to configure a Linux firewall box to failover to a single backup server, while preserving connection state. This question has been asked before, but the latest reference I can find is from 2004, at which time Linux had no equivalent of OpenBSD''s pfsync, though Harald was said to be working on one. Did anything come of those

Subject almost says it all, I wonder if there is a way for me to use iptables matches like l7 and/or ipp2p match in a bridge ( one ethernet in and one ethernet out ) ? Regards.

I have 2 cable modems on a server (Linux 2.6.22). I use multipath, so the route is something like this: default nexthop via 201.6.102.1 dev eth1 weight 256 nexthop via 201.6.107.1 dev eth2 weight 128 The first one (eth1) has a higher priority, then when it goes down, I can "ifconfig" the interface eth1 down and Linux automatically detects the "dead"

Hay guys, I'm looking for some advice here. The company I work for is implementing Windows 2000 workstations in the future. At the moment we have Samba 2.2.4 acting as an NT 4.0 PDC, with out a problem I might add. But alas the rest of the people here in my company will not even think about running Linux. So I'm going to have to move over to a Windows 2000 / XP DC. My problem is that

Hi all, I want to run vsftp behind a firewall.(i.e DMZ zone) . It is runnig as passive ftp. the theroy behind passive ftp is , - FTP server''s port 21 from anywhere (Client initiates connection) - FTP server''s port 21 to ports > 1024 (Server responds to client''s control port) - FTP server''s ports > 1024 from anywhere (Client initiates data

...st like the viral email to stop being sent to our mail list and to the world. :) Grant Taylor Systems Administrator Riverview Technologies Inc. 601 West Business Loop 70 Suite 109 Columbia MO 65203-2546 United States of America Phone: (USA) (573) 442-7151 Fax: (USA) (573) 442-3062 eMail: gtaylor@riverviewtech.net postmaster@riverviewtech.net Below are the pertinent headers out of each email message: ---------------------------------------------------------- Received: from jai.com (unknown [202.56.216.56]) by outpost.ds9a.nl (Postfix) with SMTP id B9B363FDD for <LARTC@mailman...

I know this is not a normal request, but I would like to connect two vlans into the same box that have the same subnet on them, and then NAT them out to the Internet. We don''t need to make any connections inbound to them, but only provide outbound access. Any suggestions on how to do this? If I can''t do it with routing then I could use something like user-mode Linux, or other

Hi. Is anyone using conntrack-tools to implement gateway failover on a network with windows clients? I set it up with ucarp and keepalived, and found that gratuitous ARP doesn''t always seem to update the cache on Windows machines. It works the first time, but if a second failover happens, the client continues to send stuff to the wrong MAC address. Linux machines work fine.

I always used multiple links from different ISPs and in my oppinion the best way to really aggregate bandwidth is using some kind of proxy which the client connects to and distribute multiple connections to the links. Years ago, a friend of mine wrote Netsplitter: http://www.hostname.org/netsplitter/ but it''s outdated, abandoned (last version from 2002). And it was mainly written for

Hello all! I applied http://www.ssi.bg/~ja/routes-2.6.8-10.diff patch to kernel 2.6.8.1 and it works fine, or almost fine. It does the load balancing well, but when one link is dropped it continues to try it. At the end of http://www.ssi.bg/~ja/nano.txt it is said to ping gateway 1 and gateway 2, for the kernel to know if that route is working, but since my linux is connected to the links

I have a Smoothwall like firewall and proxy, I would like to establish a bandwidth I inside specify for each IP my network. But that I have been able to do it is to install the QoS to him but it is not sufficient. Somebody can help me? My English is very bad, pardon if this badly written, I had to use a translator.

...37:33 +0200 Received: (qmail 13149 invoked by uid 501); 8 Jul 1998 14:37:19 -0000 Received: (qmail 13014 invoked from network); 8 Jul 1998 14:37:16 -0000 Received: from pace.picante.com (root@199.103.241.49) by mail2.redhat.com with SMTP; 8 Jul 1998 14:37:16 -0000 Received: from pace.picante.com (gtaylor@localhost [127.0.0.1]) by pace.picante.com (8.8.7/8.8.7) with ESMTP id KAA17970 for <linux-security@redhat.com>; Wed, 8 Jul 1998 10:40:00 -0400 Message-Id: <199807081440.KAA17970@pace.picante.com> To: linux-security@redhat.com Subject: [linux-security] Re: RedHat 5.X Security Book In...

Hi, I''ve asked this elsewhere and received hints but no one seems to have a concrete explanation :- What I am looking to do is to be able to configure a Linux based router to be able to share THE SAME SINGLE Public IP address between the linux router and a single computer on the lan acting as the DMZ host (NOT normal NAT IP sharing !). So basically you have a linux router with two

I ran across an interesting article (http://www.heise-security.co.uk/articles/print/82481) (1) that I think any and all firewall administrators should take a few moments to read. I personally have known that using "-m state --state ESTABLISHED,RELATED" was not the most secure thing to use for returning traffic. Namely this will allow you to make a valid connection to a web server,

...ally think PUIS is a great book, but it's way to > advanced for a lot of Linux users/admins. These people need to learn > to walk first and rmemeber to close the front door before they start > armour plating the roof and putting a minefield in the front lawn =) Yup. -- Grant Taylor - gtaylor@picante.com - http://www.picante.com/~gtaylor/ Where do these people come from? Finger for PGP public key.

Hi all I am a small business user running my IT infrastructure on Whitebox linux (RHEL3 clone), with ADSL connectivity with a static ip, using the ipcop firewall gateway (www.ipcop.org). I run my own web/mail server as my website usage is not much and I cannot afford to lease a dedicated server on the net, and leasing a shared server...I lose control. My DSL is prone to frequent outages and

Hi, I''m trying to increase the bandwidth between two hosts (backup). Both hosts are in the same /24 subnet and each of them is connected to a Cisco switch by 2 GbE interfaces (intel e1000). The switches/host are located in different building which are connected by 3 x GbE. building A | building B | --------

Hi There, We currently using iproute2 for load balancing. However we need more upload speed as we load balance over 3 dsl lines. I''ve been looking for a way to combine the upload speed to more faster. Found a site called www.upstreaminter.net where these guys bond the adsl channels to improve uploads, Since downloading is problem as its need to know the ip address of the downloader they