search for: internalip

...args = /etc/dovecot/dovecot.passdb } socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } mechanisms = plain login user = root count = 1 } dovecot.passdb: testuser1:::::::host=<internalip> port=143 nodelay=y nologin=y proxy=y testuser2:::::::host=<internalip> port=143 nodelay=y nologin=y proxy=y dovecot.log: dovecot: Oct 06 10:37:26 Info: Dovecot v1.1.7 starting up dovecot: Oct 06 10:37:26 Info: auth(default): passwd-file /etc/dovecot/dovecot.passdb: Read 2 users doveco...

...nterface. This is to force locally generated traffic (ie, traffic generated on the server) to go through the VPN, rather than out with a source IP of the external interface. So I''ve done: ip rule add table 1 prio 100 ip route add table 1 <remoteLAN>/CIDR dev ipsec0 src <internalIP> ip route flush cache Now, my confusion is with regards to the src <internalIP> bit. I''ve been assuming that the ''src ...'' syntax actually changes the source IP in the packets matching the route to the IP specified, much like SNAT does. But this doesn'...

All, I have my * box NAT'd with all ports forwarded that are SIP related (based on Wiki). I also have nat=yes, externalip=WAN address of firewall, internalip=LAN network of *. I have my Xten soft phone on a PC which is NAT'd behind firewall with ports forwarded. I have also followed instructions on Wiki for Xten. I can authenticate fine, and sip show peers shows my extension is OK, but whenever I dial another SIP or zap channel, I can a "max...

I'm a database noob, and it really seems like it would be overkill for my setup: I just want to proxy all connections from my DMZ to my internal mail server -- same internal server for all users. I used to use perdition for this set up, but am having issues getting it to play nicely with my new servers. Can I bypass all of the SQL stuff and just have dovecot forward all POP/IMAP

...86 boxes to simply collate share information then remote browse sync to the DMB in the main office. It worked! Network neighborhood was never happier. Since then my knowledge of iptables has increased and I now invoke `/sbin/iptables -t nat -A POSTROUTING -o ipsec0 -s $EXTERNALIP -j SNAT --to $INTERNALIP` This allows me to connect to services on remote internal networks from an IPsec Gateway. AHA I thought. I can eliminate those unsightly pentium samba boxes and place the share collation on the reliable (and underworked) firewall/IPsec Gateways now that I could actually ping the DMB from any gi...