search for: rfxnetwork

Hi, We have 7 Dell 2850 servers with dual xeon 3 gig processors running the APF firewall version 0.9.6 http://rfxnetworks.com/apf.php They run fine for a day or two, then suddenly lock out all incoming connections, other than the backend IP, sometimes restarting the firewall resolves this, but occasionally we may have to leave it 10 mins or so before restarting where it will actually allow connections again....

Is there an easy way to reject all incoming packets except those that come from certain IPs? I can't find any way via iptables or via the GUI provided with CentOS (or another GUI for CentOS) without having to resort to Shorewall. It's fine if the answer is "go with Shorewall". I just didn't want to have to become a Shorewall expert for this really small task. Any help/advice

Hi, I get ssh connect attempts all the time, to my servers at home and at work. I've noticed lately they come from a certain ip address, hitting every 3 or 4 seconds, trying 50 or 100 different user names and passwords. And I get these sweeps from 2 or 3 ip addresses a day. I guess this is an automated attempt to guess a user/pass and break into a system. I tried to secure ssh better by

Message-ID: <479F2A63.2070408 at centos.org> On: Tue, 29 Jan 2008 07:30:11 -0600, Johnny Hughes <johnny at centos.org> Subject Was: [CentOS] Unknown rootkit causes compromised servers > > SOME of the script kiddies check higher ports for SSH *_BUT_* I only see > 4% of the brute force attempts to login on ports other than 22. > > I would say that dropping brute force

In our environment we have many legacy application servers running apache/jserv. There is a web server front end, then a couple of load-balanced java servers on the backside. One of the problems we are faced with is hung or stuck jvms. I have looked at the java process with the ps command, and there are many times when URL(s) do not respond, yet the java looks healthy, at least from the OS

I have a xen 3.0.2 running on a 733 MHz server, 1 GB RAM. It has two domU domains. dom0 has 512 MB, domUs have 256 MB each. Whenever load average on dom0 is above 1-2 (for example, compressing 200 MB file), I can''t reach any domU domain. Ping replies to domUs take very long time (it''s on LAN), and there are packet losses: 64 bytes from 192.168.11.61: icmp_seq=7 ttl=64

Hi, I have servers of mixed OS, some Centos, some Fedora, and after the flame war that erupted last week (where I said basically nothing and just watched), my server was hacked by this team of hackers, actually their friend: http://www.sibersavascilar.com/ This made Karanbir's statements about mixing Cpanel and Centos (any maybe any linux distro) come true very quickly. If