search for: lokkit

hi All - I tried doing: yum provides "/usr/sbin/lokkit" on CentOS 8 and got No Matches found. Where can I get his for C8? Jerry

I have used lokkit to setup iptables ( I have a big script that does this) basically just ports I want with "--port=https:tcp" etc... I wish to allow igmp and add igmp to the lokkit command line? How do I do that? I can add this to /etc/sysconfig/iptables: iptables -A RH-Firewall-1-INPUT -i eth1 -j ACC...

I am wanting to pass arguments to lokkit to set up the iptables config file with an entry like this: ( i dont want to manually edit it - I want to do it automatically) iptables -A INPUT -p udp -m udp --dport 10000:20000 -j ACCEPT I have a small script file that has in it the ports I want enabled, like: ------------------- PORT_SSH=...

On Fri, 31 Jan 2020 at 12:36, Jerry Geis <jerry.geis at gmail.com> wrote: > hi All - > > I tried doing: > yum provides "/usr/sbin/lokkit" > on CentOS 8 and got No Matches found. > > Where can I get his for C8? > > As far as I know you can't. It was last supported in Fedora in F23 2015-03-02 and was removed in later releases. It would need a major rewrite to work with how things are 'different' between...

On Mon, 2020-02-03 at 19:04 -0500, Jerry Geis wrote: > Hi All, > > Over the last 20 some years I have a file with about 200K worth of address > that have "wrongly" tried to connect to my boxes running centos. So the > file has one line per address or group of addresses like: > 2.244.112.0/24 > > So using the OLD iptables I would run through my file build the

I've just tried setting up a Shrike (9) version of Redhat. Using the medium settings of lokkit, then adding manually accept commands for ports 137/udp 138/udp, 139/tcp and 445/tcp, I thought I should have been ready to go. This isn't the case, however. I know it's not the smb.conf settup because when I kill iptables samba works. When iptables IS running however, it will respond...

Hi All, Over the last 20 some years I have a file with about 200K worth of address that have "wrongly" tried to connect to my boxes running centos. So the file has one line per address or group of addresses like: 2.244.112.0/24 So using the OLD iptables I would run through my file build the iptables.txt file and start that with DROP for the IP address. iptables ran through the big

On Tue, 4 Feb 2020 at 05:37, Pete Biggs <pete at biggs.org.uk> wrote: > On Mon, 2020-02-03 at 19:04 -0500, Jerry Geis wrote: > > Hi All, > > > > Over the last 20 some years I have a file with about 200K worth of > address > > that have "wrongly" tried to connect to my boxes running centos. So the > > file has one line per address or group of

...ped all the files I was copping over into / after the dest. partition was full, I tried samba again. I am getting the "requested 10000 open files, only 1014 available." error in the samba log. Under a port scan, it shows netbios-ssn working, so that's available and there. I made sure lokkit was set to no firewall, and then even uninstalled it. Any ideas? I have been pounding away at this for 4 days now, and am going insane. Thanks, -geoff Exact Error: [2001/11/20 01:12:04, 1] smbd/files.c:file_init(215) file_init: Information only: requested 10000 open files, 1014 are available....

...hey actually say "used for setting up things like firewalls") and then installing shorewall on top of that. Would this leave me with anything crucial missing in my installation? Also, when installing RedHat, it has a step where it offers to setup a basic firewall for you (it just uses Lokkit to setup a starter iptables script.) Since I''ll be installing Shorewall on this system, can I assume it would be right to choose the "No Firewall" option in the RedHat installer? If this isn''t a good way to go about setting up a new firewall, could you all let me kn...

I have a CentOS 4.2 machine. lokkit shows that a firewall is enabled, and it is customized to allow SSH, Web, and DNS traffic only. But if I run nmap against the server IP (from my home machine, outside the local network) it shows over 1000 open ports. Am I not understanding nmap, or is there something seriously wrong here? H...

Hi, This question is about how to set up the firewall iptables in sysconfig? I have my firewall set to high and have no luck connecting to the SAMBA server (a low firewall works fine). I feel this is because the port is being blocked. I used Lokkit to generate the iptables and set the level to high. I also found on the SAMBA site what ports are used, unfortunately I don't know what to add to the iptables file. Suggestions? Eric

Hi, Here is my situation : I have installed Samba 2.0.6 on my computer, which is running with Linux RedHat 6.0. When somebody tries to connect to this server, he's got a 'refused connection' message after he tried to my_IP@:139. I don't think the smb.conf is responsible because we have tried with the basic one, and it doesn't change anything. As I'm fresh in Linux (and

...le to find any > reference to /etc/hosts file. (But I bet it's in there somewhere.) > > I then decided to try to set up the firewall rules as suggested. There > doesn't appear to be a program named "ipfwadm". Back to the Red Hat > docs. They said to use "GNOME Lokkit". Again, that program is apparently > not available. The docs said I could use a text version, lokkit. That > program ran but I was unable to go to the second screen and my attempt > to just turn off the firewall using "lokkit" failed. > > My frustration is not so muc...

The following two patches fixes / reimplements the oVirt appliance project, installing the entire oVirt stack including all server and node components on one machine. These patches are intended to be checked out and used to build the appliance rpm, after which it is installed provides the /usr/sbin/ovirt-appliance-ctrl script to install/uninstall the appliance. The first patch merely removes

Is there a CentOS equivalent to config-system-firewall in Fedora, allowing specified services to pass through? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

...e the Netgear and have C5.5 do all the services- gateway, router, dhcp, and firewall. The only way I could get this to work was with no bridging at all. Each nic needed an IP and all on different subnets. eth0: dynamic from TW WAN eth1: static at 192.168.1.1 eth2: static at 192.168.3.1 Using the lokkit firewall tool and adding NAT/Masquerade to eth0 this worked. My question is: is there a way avoid a wasted IP at eth2 and somehow bridge it to or with eth1 so only one subnet is possible inside the LAN? I know I need at least one static IP on one of the nics for the gateway. -- Mark

...ped all the files I was copping over into / after the dest. partition was full, I tried samba again. I am getting the "requested 10000 open files, only 1014 available." error in the samba log. Under a port scan, it shows netbios-ssn working, so that's available and there. I made sure lokkit was set to no firewall, and then even uninstalled it. Any ideas? I have been pounding away at this for 4 days now, and am going insane. Thanks, -geoff Exact Error: [2001/11/20 01:12:04, 1] smbd/files.c:file_init(215) file_init: Information only: requested 10000 open files, 1014 are available....

...disable=no, ran /bin/kill -HUP -a xinetd to make it reread the config file. I created /usr/local/samba/lib/smb.conf, and created the tmp directory. Finally, I ran smbpasswd for the root account to add the account into the encrypted password database. I set the security level to No firewall, and Lokkit is not on this system, so I don't think it's a firewall issue. I don't see anything in any of the iptables files that would seem to be an issue (suggestions are welcome re. iptables - I'm not that familiar). I've added swat: 127.0.0.1 to host.allow and swat: ALL to hosts.deny....

...implementation instead of ebtables/iptables (providing that impl was suitably expressive of course) Finally, in terms of problems we have in deployment. The biggest problem is that if the admin does 'service iptables restart' all our work gets blown away. We've experimented with using lokkit to record our custom rules in a persistent config file, but that caused different problem. Admins who were not using lokkit for their config found that all their own rules got blown away. So we threw away our lokkit code. Instead we document that if you run 'service iptables restart', you n...