search for: prohibit

Hi all am setting up a Forward Tunnel from one machine to another machine can anyone Guide me what this might be its degrading performance on a busy server load channel 968: open failed: administratively prohibited: open failed channel 969: open failed: administratively prohibited: open failed channel 973: open failed: administratively prohibited: open failed channel 975: open failed: administratively prohibited: open failed channel 976: open failed: administratively prohibited: open failed channel 977: ope...

...T -s 10.3.3.0/25 -p tcp -m tcp --dport 24007 -m conntrack --ctstate NEW -j ACCEPT -A INPUT -s 10.3.3.0/25 -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT -A INPUT -s 10.3.7.0/25 -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT # Completed on Tue Apr 23 09:15:14 2019 >From time to time, when this server, say 10.3.3.3, trying to connect to port 24007 of another server 10.3.3.4, it will fail sometimes. from tcpdump output, you can see these packages:...

Signed-off-by: ZhiHu <huzhi001 at 208suo.com> --- .../gpu/drm/nouveau/nvkm/engine/fifo/gk104.c | 40 ++++++++++++++----- 1 file changed, 29 insertions(+), 11 deletions(-) diff --git a/drivers/gpu/drm/nouveau/nvkm/engine/fifo/gk104.c b/drivers/gpu/drm/nouveau/nvkm/engine/fifo/gk104.c index d8a4d773a58c..b99e0a7c96bb 100644 --- a/drivers/gpu/drm/nouveau/nvkm/engine/fifo/gk104.c +++

...te email in the trash folder sometimes. Best would be some event filter that executes for every mail that somehow end up in Trash, that checks if \\seen is present, if not, then it will add it, on all emails in trash? But how I do to prevent the duplicate copy that appears sometimes? 2: I want to prohibit email clients from ever creating a new mail in Sent folder. If its possible to allow MOVE and/or COPY, it should be allowed, only new mail should be prohibited. (also note that external processes must be able to create new mail in Sent) HOWEVER - this prohibition must be silent - ergo the newly cr...

...> yeah and when you get connection refused on a TCP port the service is not > reachable at all - it's not running or some firewall in front and hence the > ICMP "port unrechable" response With wireshark the response was "Destination unreachable (Host administratively prohibited)." The "administratively prohibited" was the big clue. MB -- e-mail: vidiot at vidiot.com | vidiot at vidiot.net /~\ The ASCII 6082066843 at email.uscc.net (140 char limit) \ / Ribbon Campaign Visit - URL: http://vidiot.com/ X...

Hello, on my ISDN phone I can configure that on the next outgoing call, my telephone number should not be transmitted, instead it should be UNKNOWN. How can I configure Asterisk to do the same? Is this a feature/parameter of the driver (chan_capi) that I'm using? BTW: I'm using ISDN and Deutsche Telekom, if the provider makes any difference. Thanks for your help, Stefan --

Someone just told me about imapsieve. Sieve rules for folders. I assume that could solve your issue. https://wiki.dovecot.org/HowTo/AntispamWithSieve -----Original Message----- Sent: 09 May 2020 17:32 To: dovecot at dovecot.org Subject: Marking all emails in "Trash" as opened, and also prohibiting email clients from creating new mails Dovecot version: 2.3.7.2 (3c910f64b) (pkg shipped by: Ubuntu-Desktop 20.04) I want to accomplish 2 things in dovecot: 1: I want to force all mails inside Trash to have an "opened"/"read" flag and "Non-Recent" flag. Basical...

...lt;------> centos v0: eth2 fc00:2:3:4::1 fc00:2:3::4 i turned the packet forwarding ping6 -i eth2 fc00:2:3:4::1 the output is PING fc00:2:3:4::1(fc00:2:3:4::1) from fc00:2:3::5 eth2: 56 data bytes >From fc00:2:3::4 icmp_seq=1 Destination unreachable: Administratively prohibited >From fc00:2:3::4 icmp_seq=2 Destination unreachable: Administratively prohibited >From fc00:2:3::4 icmp_seq=3 Destination unreachable: Administratively prohibited >From fc00:2:3::4 icmp_seq=4 Destination unreachable: Administratively prohibited why the box do not forwarding icmp packet...

hi all, I need different routes for packets with different TOS values, and tried to do this with ip. I noticed that ip does not recognice all possible values for the TOS byte, even when I enter them in /etc/iproute/rt_dsfield. to demonstrate this, I added prohibit rules for different marked packets and tried if the packets are dropped when I try to "ping -Q tosvalue <somehost>": #: ip route add prohibit default tos 0xb8 #: ip route add prohibit default tos 0x11 #: ip route add prohibit default tos 0x10 #: ip route add prohibit default to...

...-m conntrack > --ctstate NEW -j ACCEPT > > -A INPUT -s 10.3.3.0/25 -p tcp -m tcp --dport 22 -m conntrack > --ctstate NEW -j ACCEPT > > -A INPUT -s 10.3.7.0/25 -p tcp -m tcp --dport 22 -m conntrack > --ctstate NEW -j ACCEPT > > -A INPUT -j REJECT --reject-with icmp-host-prohibited > > -A FORWARD -j REJECT --reject-with icmp-host-prohibited > > COMMIT > > # Completed on Tue Apr 23 09:15:14 2019 > > > > From time to time, when this server, say 10.3.3.3, trying to connect > to port > 24007 of another server 10.3.3.4, it will fail sometimes...

...[RFC 4314]) does not permit this user to carry out an operation, such as selecting or creating a mailbox. C: f select "/archive/projects/experiment-iv" S: f NO [NOPERM] Access denied My reading of this is that NOPERM should be returned for ANY ACL prohibited action, not just for selecting or creating a mailbox. Dovecot 2.0.12 does not return NOPERM for DELETE/EXPUNGE actions (at a minimum) that are prohibited. Thoughts? michael

Signed-off-by: ZhiHu <huzhi001 at 208suo.com> --- .../gpu/drm/nouveau/nvkm/engine/fifo/gk104.c | 40 ++++++++++++++----- 1 file changed, 29 insertions(+), 11 deletions(-) diff --git a/drivers/gpu/drm/nouveau/nvkm/engine/fifo/gk104.c b/drivers/gpu/drm/nouveau/nvkm/engine/fifo/gk104.c index d8a4d773a58c..b99e0a7c96bb 100644 --- a/drivers/gpu/drm/nouveau/nvkm/engine/fifo/gk104.c +++

...to introduce new annotation to > store the function address (and size) at somewhere, we can > easily move onto that by replacing NOKPROBE_SYMBOL() with > nokprobe annotation (and just modifying the > populate_kprobe_blacklist() a bit). > > This series also includes a change which prohibits probing > on the address in .entry.text because the code is used for > very low-level sensitive interrupt/syscall entries. Probing > such code may cause unexpected result (actually most of > that area is already in the kprobe blacklist). > So I've decide to prohibit probing all...

...track --ctstate > NEW -j ACCEPT > > -A INPUT -s 10.3.3.0/25 -p tcp -m tcp --dport 22 -m conntrack --ctstate > NEW > -j ACCEPT > > -A INPUT -s 10.3.7.0/25 -p tcp -m tcp --dport 22 -m conntrack --ctstate > NEW > -j ACCEPT > > -A INPUT -j REJECT --reject-with icmp-host-prohibited > > -A FORWARD -j REJECT --reject-with icmp-host-prohibited > > COMMIT > > # Completed on Tue Apr 23 09:15:14 2019 > > > > From time to time, when this server, say 10.3.3.3, trying to connect to > port > 24007 of another server 10.3.3.4, it will fail sometimes....

not sure how i got signed up for this and i don?t see a way to unsubscribe. this is flooding my email with things i don?t care about. On Fri, Jul 14, 2023, at 1:14 AM, huzhi001 at 208suo.com wrote: > Signed-off-by: ZhiHu <huzhi001 at 208suo.com> > --- > .../gpu/drm/nouveau/nvkm/engine/fifo/gk104.c | 40 ++++++++++++++----- > 1 file changed, 29 insertions(+), 11 deletions(-)

Hello Dovecot Community, I am using Dovecot 2.2.13-12~deb8u1 (Debian Jessie). separator = / listescape plugin is NOT active LAYOUT=fs is NOT active I would like to prohibit a creation of folders with dot "." in the names - so creation of a folder "foo.bar" should NOT be possible. Currently, when I create "foo.bar" in Outlook 2013 it will be created but won't be synchronised with the mail server - Outlook shows it as "foo.bar (O...

...s name. It broadcasts a message and it really receives response from the windows machine resolving the name successfully. However after smbclient receives the successful netbios response, it sends and ICMP message to the windows machine indicating "unreachable destination host(administratively prohibited)". 3. Steps 1 and 2 repeat for a few times(about 3 times), each time ending with the strange ICMP message. I can't see what's wrong with my network configuration. I can access the other windows machine by IP address pretty well. I can access all internet sites successfully. I've...

...rote: > On 10.01.2017 17:38, Marek Grondecki wrote: >> Hello Dovecot Community, >> >> I am using Dovecot 2.2.13-12~deb8u1 (Debian Jessie). >> >> separator = / >> listescape plugin is NOT active >> LAYOUT=fs is NOT active >> >> I would like to prohibit a creation of folders with dot "." in the >> names - >> so creation of a folder "foo.bar" should NOT be possible. >> Currently, when I create "foo.bar" in Outlook 2013 it will be created >> but won't be >> synchronised with the mail se...

On Fri, 15 Nov 2013 04:53:18 +0000 Masami Hiramatsu <masami.hiramatsu.pt at hitachi.com> wrote: > .entry.text is a code area which is used for interrupt/syscall > entries, and there are many sensitive codes. > Thus, it is better to prohibit probing on all of such codes > instead of a part of that. > Since some symbols are already registered on kprobe blacklist, > this also removes them from the blacklist. This change only works with x86. On other archs, I get this: kernel/built-in.o: In function `register_kprobe': (.kpr...

On Fri, 15 Nov 2013 04:53:18 +0000 Masami Hiramatsu <masami.hiramatsu.pt at hitachi.com> wrote: > .entry.text is a code area which is used for interrupt/syscall > entries, and there are many sensitive codes. > Thus, it is better to prohibit probing on all of such codes > instead of a part of that. > Since some symbols are already registered on kprobe blacklist, > this also removes them from the blacklist. This change only works with x86. On other archs, I get this: kernel/built-in.o: In function `register_kprobe': (.kpr...