search for: packetfilters

Hello @ all With the rebuilding of my Server from Debian 9 to Debian 10, I also switch from Virtual Box to Libvirt/KVM. Due to new requirements for the VMs, now I have an actual problem, which unfortunately I can not solve. The problem has already been discussed in the German Debian-Forum ... unfortunately also without success. The facts: - ISP = Dual Stack with daily separation - Host and

Hi, Host A has two interfaces: eth0, tap0. I want that all locally generated traffic from user 1004 goes through tap0. This is what I did: iptables -A OUTPUT -t mangle -m owner --uid-owner 1004 -j MARK --set-mark 2 echo 202 bigmac.out >> /etc/iproute2/rt_tables ip rule add fwmark 2 table bigmac.out ip route add default via 10.0.0.1 dev tap0 table bigmac.out ip route flush cache

Hi there, I have a need to have scp pass the -P option to ssh to "bypass" the packetfilters that doesn't allow connections to return to arbitary "priviledged" ports, ie. ports <1024. See attached context sensitive diffs against 2.2.0p1 to please integrate. Thanx Hendrik Visage -------------- next part -------------- *** 1.1 2000/10/11 13:31:45 --- scp.c 2000/10/11 14:...

On Sat, Sep 21, 2019 at 11:28:56AM +0200, Thomas Luening wrote: > Hello @ all > > With the rebuilding of my Server from Debian 9 to Debian 10, I also switch > from Virtual Box to Libvirt/KVM. Due to new requirements for the VMs, now I > have an actual problem, which unfortunately I can not solve. The problem has > already been discussed in the German Debian-Forum ...

> I recently did something like this. I have a webserver in a jail that > needs to talk to a database, and the webserver is the only thing that > should talk to the databse. > My solution was to use 2 jails: one for the webserver, and another for the > database. > Jail 1: > * runs webserver > * binds to real interface with real, routable IP > Jail 2: > *