search for: userset

...rate limit an action, too.. suppose I have an action named Accept_good_source : ACCEPT - - tcp - 1024:65535 ACCEPT - - udp - 1024:65535 and that i want to use it in an action called AllowCVS, i can''t limit the cvs usage, but only the general use of Accept_good_source... same goes for userset... as each rule will give one iptables command, I believe there is no limitation ... Is that right ? I tried : @@ -3086,8 +3090,8 @@ fi ;; *) - [ -n "$ratelimit" ] && fatal_error \ - "Rate Limitin...

Hi, First of all, thanks to all shorewall developers. Shorewall is really great. Here is a patch to add the following feature : This patch allows you to mark packets according to the user name under which the program generating output is running. To do so, the patch will allow you to write rules in the tcrules file looking like that : #MARK SOURCE DEST PROTO PORT(S) CLIENT USER #

Is anyone using user sets? I''m considering dropping support for them in 2.0 in favor of just listing individual user/groups in the rules file. Thanks, -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hi, I was wondering how could you create a model that is tied to all the records in one table, and retrieves the values of all records on first load, and also handles the updating of its values. For example, suppose I have this table: id INT(11) PK group CHAR(40) name CHAR(40) value CHAR(128) updated_at DATETIME Sample rows: group name value --------------------------- main something

http://shorewall.net/pub/shorewall/Snapshots ftp://shorewall.net/pub/shorewall/Snapshots This snapshot is identical to the previous one (20030821) except that the usersets file has been broken into two files: /etc/shorewall/usersets - Define user sets and their logging /etc/shorewall/users - Add users and/or groups to user sets defined in /etc/shorewall/ Details in http://shorewall.net/UserSets.html. -Tom - Tom Eastep \ Shorewall -...

Hi, I have a model (let''s say User) and I would like to add any number of user-defined-settings to this Model. I created a UserSetting Model with user_id, key and value. I connected them with has_many. I know how to access these properties from a user but I would like some methods like user.hasProperty? / user.getProperty ... I think I know how to write these methods/finders myself but it seems like a pretty common problem to...

Hello! i have some problems with my SuSE 9.2 and the samba ports: if the xp client wants to loggin in samba domain, I get the message at the announcement - usersettings: the servercopy of the serverstored profile was not found. No saving of the changed profile -. After the loggin there are no more problems with the xp client in samba. After googling I collimated the ports in the SuSE Firewall: 137:139 445. But the same error message as before. If I shutdo...

.../home/samba/DOMAINNAME/USERNAME ? but?when lways the from the account manager in windows these back. ? /bin/sh /home/username ? sure i can manualy correct this, but i would be nice if it's isnt needed. ? I tried it with these settings in al my servers, but didnt help. how/where can i set my usersettings so the windows usermanager adapts these when i want set the new user settings. ? And last question, from the usermanager, there is no option to create an OU in AD ? or im i missing something? ? ? Thanks in advance. ? Louis ?

I''m working on shorewall_setup_guide.htm -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hi, we want to grant some users the right to change passwords and enable accounts in our samba domain but they should not have admin rights. Windos is using the group Account Operators for this. So we put some users into this group and tried to change some Usersettings with the usermanger. The user has no right to edit any user. I tried to grant a right to this group with net rpc rights but i cant find a suitable rigth. Does anybody use this group? We are running Sles9 and samba 3.0.21a Mit freundlichen Gr??en Benjamin Oeltze Systems Engineer S DE SE P...

I've searched the archives for an answer to this problem, and yet nothing that works seems to have been posted. I've seen it posted many times In my particular case, I'm running Samba 2.0.6 on Solaris 2.5.1, configured with the --with-smbwrapper, --with-automount, and --with-syslog options. I also have samba set up as a PDC, and that seems to be working fine. A stripped down

http://shorewall.net/pub/shorewall/Beta ftp://shorewall.net/pub/shorewall/Beta Problems corrected since RC1: 1) The documentation of the USERSETS column in the rules file has been corrected. 2) If there is no policy defined for the zones specified in a rule, the firewall script previously encountered a shell syntax error: [: NONE: unexpected operator Now, the absence of a policy generates an error message and the fi...

...be able to upgrade easily from Shorewall 1.4.x to Shorewall 2.0.0. You will only have to make changes after the upgrade if: a) You have created an /etc/shorewall/common file for reasons other than dropping SMB traffic rather than rejecting it; or b) You have defined User Sets in /etc/shorewall/usersets. You will need to convert to using User-defined actions that control connections based on the effective user-id and/or group-id of the firewall-resident application making the connection. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shor...

http://shorewall.net/pub/shorewall/Beta ftp://shorewall.net/pub/shorewall/Beta -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

...font face="Times New Roman"> </font> <table style="border-collapse: collapse;width:150pt" border="0" cellpadding="0" cellspacing="0" width="199"> <colgroup><col style="mso-width-source:userset;mso-width-alt:6958;width:150pt" width="199"> </colgroup><tbody> <tr style="height:14.5pt" height="19"> <td style="height:14.5pt;width:150pt" height="19" width="199">Read</td&gt...

...wall adds a route to a proxy ARP host and such a route already exists, two routes resulted previously. This has been corrected so that the existing route is replaced if it already exists. 12) The rfc1918 file has been updated to reflect recent allocations. 13) The documentation of the USERSETS column in the rules file has been corrected. 14) If there is no policy defined for the zones specified in a rule, the firewall script previously encountered a shell syntax error: [: NONE: unexpected operator Now, the absence of a policy generates an error message and the firewa...

...all/common file for reasons other than dropping SMB traffic rather than rejecting it. In that case, you will need to rename your /etc/shorewall/common file to /etc/shorewall/initdone and remove all references to the ''common'' chain. b) You have defined User Sets in /etc/shorewall/usersets. You will need to convert to using User-defined actions that control connections based on the effective user-id and/or group-id of the firewall-resident application making the connection. ---------------------------------------------------------------------------- For those of you running Shore...

...or reasons other than dropping SMB traffic rather than rejecting it. In that case, you will need to rename your /etc/shorewall/common file to /etc/shorewall/initdone and remove all references to the ''common'' chain. b) You have defined User Sets in /etc/shorewall/usersets. You will need to convert to using User-defined actions that control connections based on the effective user-id and/or group-id of the firewall-resident application making the connection. IF YOU ARE RUNNING SHOREWALL 1.4, PLEASE READ THE NEXT SECTION! ----------------------------------...

Let''s move this to the Shorewall Development list.... On Tuesday 10 February 2004 03:14 pm, xavier wrote: > here is a patch to allow this : > |ACCEPT<10/sec:20>:debug fw lan:$ntp_servers udp 123 - - - - ntp > > a problem with the patch is that now the logprefix is mandatory. > i''m trying to debug it, but i can''t find the flaw. Also, with

...f but when I change the Win95 >client to have user profiles, several folders and the user.dat file is >created in the users home directory instead of the profile share... > >My questions are: > >1. Does anyone know how to solve this? >2. Does anyone know how to copy the local usersettings to the specific >network-profile so I won't have to install software all over again? > >I hope that someone can AND will help me... > This is a copy of the smb.conf files from one of our servers which uses the netlogon and winlogon functions to achieve roaming profiles. I have...