search for: subnet2

Hi all, I would like to do something like this at Samba level: hosts allow = subnet1/mask1 subnet2/mask2 etc hosts deny = * But this doesn't seem to work (machine that are not in subnet1 and not in subnet2 still have access) I think the * is not understood by Samba, I tried ALL, this didn't work either. I'm gonna check the samba source code but if I could get an expert answer that...

Hi! I have a problem with samba, that I don't know if it's possible to solve. This is my network: <Subnet1>-Ethernet-<Gateway>-Ethernet-<Subnet2>-Internet Subnet1 is my own local network (bcast 192.168.1.255), Gateway is my own gateway machine (FreeBSD4.4, IPs: 192.168.1.1 and 193.13.35.101), Subnet2 is my neighbours (bcast 193.13.255.255). I can configure all machines at Subnet1 and the Gateway, but not Subnet2. Subnet2 does not use a...

...8kbit | | | |\_1:110 ceiling 2048kbit, rate 1536kbit | \_1:111 ceiling 2048kbit, rate 512kbit (default subnet1) | \_ 1:12 ceiling 2048kbit, rate 2048kbit | |\_1:120 ceiling 2048kbit, rate 1536kbit \_1:121 ceiling 2048kbit, rate 512kbit (default subnet2) I want to use 1:110 for subnet1 sport 3389 I want to use 1:111 for subnet1 (the rest) I want to use 1:120 for subnet2 sport 3389 I want to use 1:121 for subnet2 (the rest) When selecting u32 match ip dst 10.106.18.0/24 \ match ip protocol 6 0xff \ match ip sport 3389 0xffff \ flowid...

good morning all, i have an interesting issue with browsing. details: i have three subnets. (subnet1, subnet2, and subnet3) i have a samba server on each subnet. (samba1, samba2, and samba3) i have a windows 2000 server on subnet1. (m$1) samba1 is the domain master and wins server with ip 192.168.0.1 win2k clients authenticate to their local server and wins is set to 192.168.0.1. when i run a net view \\...

Hi there. Currently, our network design has two ISP lines and 3 subnets for LAN. Below are some details :- eth0 - isp1 eth1 - isp2 eth2 - subnet1 eth3 - subnet2 eth4 - subnet3 What i wanted to do is to assign incoming port 80 to our local squid server running on the firewall itself and assigned it to eth0(ISP1). I think it shouldnt be a problem as /etc/shorewall/rules provides a sample of the rule. For ISP2, i wanted to assign yahoo msgr, msn msgr and ftp...

...y /var/log/messages file, in recent days I have been receiving numerous messages such as: Jun 23 15:02:50 OUR-HOST named[577]: sysquery: nslookup reports danger (dns.SUBNET1.OTHER.DOMAIN.AAA.BBB.CCC.in-addr.arpa) Jun 23 15:02:51 OUR-HOST named[577]: sysquery: nslookup reports danger (HOST2.SUBNET2.OTHER.DOMAIN.AAA.BBB.CCC.in-addr.arpa) Jun 23 15:02:51 OUR-HOST named[577]: sysquery: nslookup reports danger (dns.SUBNET3.OTHER.DOMAIN.AAA.BBB.CCC.in-addr.arpa) Jun 23 15:02:51 OUR-HOST named[577]: sysquery: query(dns.OTHER.DOMAIN.AAA.BBB.CCC.in-addr.arpa) A RR negative cache entry (HOST2.SU...

.../rfc1918 to pass traffic to/from remote RFC1918 networks. III. The requirement to avoid masquerading traffic through tunnels means that you can''t cleanly define a VPN hub. You would want to be able to have an entry in /etc/shorewall/masq as follows: <ext if>:!<subnet1>,<subnet2>,... <local if> Where <subnet<n>> are the remote networks that you are tying together. Shorewall currently doesn''t support such entries. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington U...

...es on both workgroups. I have a Samba server in each subnet/workgroup, configured as both the domain and local master for each workgroup. Each server is also the WINS server for its subnet. The setup is like this: Subnet1: network - 192.168.10.0/24 server IP - 192.168.10.254 workgroup - Group1 Subnet2: network - 192.168.20.0/24 server IP - 192.168.20.254 workgroup - Group2 The two servers are configured identically, except for the information above, so the smb.conf for the Group1 server looks like this: [global] workgroup = GROUP1 netbios name = GROUP1_SRV domain maste...

...risk server, nor upgrade the firmware to the latest (1.41) i'm still using 1.37. The packets are traversing the router, going into the other subnet, hitting the asterisk box, but not actually making it to asterisk. Nothing in the asterisk logs, but tcpdump on all three interfaces (subnet1, subnet2, asterisk box) all see the packets coming and going. What's even better is when I set the IAX2 ports to use 4569, it seems to try and connect to port 6001... has anyone successfully gotten these phones to work with either sip or iax, and have instructions on updating the firmware properly?...

...- security = user - encrypt passwords = yes - smb passwd file = /etc/samba/smbpasswd - remote browse sync = 192.168.4.208 - remote announce = 192.168.4.208 - local master = yes - os level = 65 - domain master = yes - preferred master = yes - domain logons = yes - wins support = yes Sambaserver2 on Subnet2 (192.168.4.0/24): - security = server - password server = Sambaserver1 - remote browse sync = 192.168.1.205 - remote announce = 192.168.1.205 - local master = yes - os level = 65 - domain master = no - preferred master = yes - domain logons = yes - wins server = 192.168.1.205 This two Subnets are...

...{    default_domain = example.com    master_kdc= domserver1.example.com    kdc=domserver1.example.com    kdc=domserver2.example.com    admin_server=domserver1.example.com  } [domain_realm]  example.com = EXAMPLE.COM  subnet1.example.com = EXAMPLE.COM  .subnet1.example.com = EXAMPLE.COM  subnet2.example.com = EXAMPLE.COM  .subnet2.example.com = EXAMPLE.COM [appdefaults]  pam = {    debug = false    ticket_lifetime = 10h    renew_lifetime = 7d    forwardable = true    krb4_convert = false    validate = true  } ############## end /etc/krb5.conf ##################### Here's the...

...mba server a wins server, how does it know on which interface to operate - each server has one interface that connecets to a central backbone network and obviously I don't want ALL my servers to be a wins on that subnet. subnet1 ------- subnet1 server ---------- backbone network -------------- subnet2 server ------------- subnet 2 All one domain About 17 of the subnets connecting to backbone network through their linux server / router Need to be able to browse accross subnets users on subnet1 sometimes need to access "subnet 2 server" etc. Using roaming profiles Using samba 2.2.8a (2....

...nt the dataserver which control traffic usage to the different subnet´s. is it possible to do this transparent and dynamic? linux bridge? UserPC | | Subnet1 ---- Router ------100Mbit--- | switch <-100MBit --> Linux-Box <--- 100MBit ----> Dataserver | Subnet2 ----------- 100MBit------------ | | UserPC Subnet 2 should have 80% of capacity. Subnet 1 the leftover. and perhaps it is possible to to speed up Subnet1 when the reserved 80% for subnet 2 are not fully stretched. Thank you. greetings Benny -- Mit freundlichen Grüßen / Best regards...

...ave their own public ip adress. The setup looks kinda like this: eth1(ipsec0)--ISP0--Internet--eth1-Linux1-eth0--Subnet1 / (ipsec-tunnel0) Intranet--eth0-Linux-HQ \ (ipsec-tunnel1) eth2(ipsec1)--ISP1--Internet--eth1-Linux2-eth0--Subnet2 I wanted to use the advanced routing features (ip command) of the linux kernel to solve the routing issues. When advanced routing is activated I can start tunnel0. After a few seconds their is still traffic on ipsec0 but not eth1. When I deactivate advanced routing and bring down eth2, tunnel0 wor...

Hi, Is there a way in Linux to do NAT with a pool of outside addresses such that each connection to the outside resource gets a different IP address?? I don''t want 1:1 NAT as I have some thousands of IP addresses on one side of the LARTC router that _may_ need to access a resource on the other side... The resource needs to see a different IP address for each active call, but these

I started with one dc, 'dc1', running samba v4.0.21, in subnet1. I successfully added two more dc's, 'dc2' and 'dc3', both running samba v4.0.24, both in subnet2. There are several firewalls between subnets 1 & 2. I continued to make firewall holes on behalf of msad after I added dc's 2 & 3. I.e. when they were added, there were patterns of communication between the dcs that weren't yet allowed. Replication is not fully working, and I do...

...port 655) failed: Connection reset by peer We see this across all of the hosts with no real pattern. Our main tinc configuration looks like this: Name = myname Device = /dev/net/tun ConnectTo = host1 ConnectTo = host2 ConnectTo = host3 The per host configs look like: Subnet = subnet1 Subnet = subnet2 Subnet = subnet3 Address = eip public_key_info We are using tinc-1.0.24. We have roughly 170 hosts running tinc and 907 subnets total. Please let me know if any other details would help. Mike -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-v...

Hi! This is another thread of "setting gateway in interfaces file" and while i dont want to create any confusion here, i have decided to open a new thread.(which mean Diamond King no longer a subscriber to shorewall-users) Actually, i turned out not to be the MARK issues. Something is missing and i got this error instead :- Setting up Accounting... Creating Interface Chains...

Thanks Luc, First, can I just use the small /etc/krb5.conf suggested in Samba AD docs or do I need something more substantial on the server & client for Kerberos NFS to work? [libdefaults]         default_realm = SUBDOMAIN.DOMAIN.COM         dns_lookup_realm = false         dns_lookup_kdc = true I understand a /etc/krb5.keytab file has to be created on both server & client. Most

Hi. I''m wondering if there''s a good way to configure a Linux firewall box to failover to a single backup server, while preserving connection state. This question has been asked before, but the latest reference I can find is from 2004, at which time Linux had no equivalent of OpenBSD''s pfsync, though Harald was said to be working on one. Did anything come of those