search for: usersets

I think it would be nice to be able to rate limit an action, too.. suppose I have an action named Accept_good_source : ACCEPT - - tcp - 1024:65535 ACCEPT - - udp - 1024:65535 and that i want to use it in an action called AllowCVS, i can''t limit the cvs usage, but only the general use of Accept_good_source... same goes for userset... as each rule will give one iptables command, I

Hi, First of all, thanks to all shorewall developers. Shorewall is really great. Here is a patch to add the following feature : This patch allows you to mark packets according to the user name under which the program generating output is running. To do so, the patch will allow you to write rules in the tcrules file looking like that : #MARK SOURCE DEST PROTO PORT(S) CLIENT USER #

Is anyone using user sets? I''m considering dropping support for them in 2.0 in favor of just listing individual user/groups in the rules file. Thanks, -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hi, I was wondering how could you create a model that is tied to all the records in one table, and retrieves the values of all records on first load, and also handles the updating of its values. For example, suppose I have this table: id INT(11) PK group CHAR(40) name CHAR(40) value CHAR(128) updated_at DATETIME Sample rows: group name value --------------------------- main something

http://shorewall.net/pub/shorewall/Snapshots ftp://shorewall.net/pub/shorewall/Snapshots This snapshot is identical to the previous one (20030821) except that the usersets file has been broken into two files: /etc/shorewall/usersets - Define user sets and their logging /etc/shorewall/users - Add users and/or groups to user sets defined in /etc/shorewall/ Details in http://shorewall.net/UserSets.html. -Tom - Tom Eastep \ Shorewall -...

Hi, I have a model (let''s say User) and I would like to add any number of user-defined-settings to this Model. I created a UserSetting Model with user_id, key and value. I connected them with has_many. I know how to access these properties from a user but I would like some methods like user.hasProperty? / user.getProperty ... I think I know how to write these methods/finders myself but

Hello! i have some problems with my SuSE 9.2 and the samba ports: if the xp client wants to loggin in samba domain, I get the message at the announcement - usersettings: the servercopy of the serverstored profile was not found. No saving of the changed profile -. After the loggin there are no more problems with the xp client in samba. After googling I collimated the ports in the SuSE

Hai, ? ( Debian / sernet-samba 4.1.6 ) ? Im working on the member server join now, and almost finished. ? But when i create a new user in the AD and when i go to the unix tab.? ( using the windows RATS tools ) There i want samba to adapt the settings i want, like: ? ??????? template shell = /bin/bash ??????? template homedir = /home/samba/DOMAINNAME/USERNAME ? but?when lways the from the

I''m working on shorewall_setup_guide.htm -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hi, we want to grant some users the right to change passwords and enable accounts in our samba domain but they should not have admin rights. Windos is using the group Account Operators for this. So we put some users into this group and tried to change some Usersettings with the usermanger. The user has no right to edit any user. I tried to grant a right to this group with net rpc rights but i cant

I've searched the archives for an answer to this problem, and yet nothing that works seems to have been posted. I've seen it posted many times In my particular case, I'm running Samba 2.0.6 on Solaris 2.5.1, configured with the --with-smbwrapper, --with-automount, and --with-syslog options. I also have samba set up as a PDC, and that seems to be working fine. A stripped down

http://shorewall.net/pub/shorewall/Beta ftp://shorewall.net/pub/shorewall/Beta Problems corrected since RC1: 1) The documentation of the USERSETS column in the rules file has been corrected. 2) If there is no policy defined for the zones specified in a rule, the firewall script previously encountered a shell syntax error: [: NONE: unexpected operator Now, the absence of a policy generates an error message and the fir...

...be able to upgrade easily from Shorewall 1.4.x to Shorewall 2.0.0. You will only have to make changes after the upgrade if: a) You have created an /etc/shorewall/common file for reasons other than dropping SMB traffic rather than rejecting it; or b) You have defined User Sets in /etc/shorewall/usersets. You will need to convert to using User-defined actions that control connections based on the effective user-id and/or group-id of the firewall-resident application making the connection. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shore...

http://shorewall.net/pub/shorewall/Beta ftp://shorewall.net/pub/shorewall/Beta -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hi All We are currently testing our product using KVM as the hypervisor. We are not using KVM as a bare-metal hypervisor. We use it on top of a RHEL installation. So basically RHEL acts as our host and using KVM we deploy guests on this system. We have all along tested and shipped our application image for VMware ESXi installations , So this it the first time we are trying our application

...wall adds a route to a proxy ARP host and such a route already exists, two routes resulted previously. This has been corrected so that the existing route is replaced if it already exists. 12) The rfc1918 file has been updated to reflect recent allocations. 13) The documentation of the USERSETS column in the rules file has been corrected. 14) If there is no policy defined for the zones specified in a rule, the firewall script previously encountered a shell syntax error: [: NONE: unexpected operator Now, the absence of a policy generates an error message and the firewal...

...all/common file for reasons other than dropping SMB traffic rather than rejecting it. In that case, you will need to rename your /etc/shorewall/common file to /etc/shorewall/initdone and remove all references to the ''common'' chain. b) You have defined User Sets in /etc/shorewall/usersets. You will need to convert to using User-defined actions that control connections based on the effective user-id and/or group-id of the firewall-resident application making the connection. ---------------------------------------------------------------------------- For those of you running Shorew...

...or reasons other than dropping SMB traffic rather than rejecting it. In that case, you will need to rename your /etc/shorewall/common file to /etc/shorewall/initdone and remove all references to the ''common'' chain. b) You have defined User Sets in /etc/shorewall/usersets. You will need to convert to using User-defined actions that control connections based on the effective user-id and/or group-id of the firewall-resident application making the connection. IF YOU ARE RUNNING SHOREWALL 1.4, PLEASE READ THE NEXT SECTION! -----------------------------------...

Let''s move this to the Shorewall Development list.... On Tuesday 10 February 2004 03:14 pm, xavier wrote: > here is a patch to allow this : > |ACCEPT<10/sec:20>:debug fw lan:$ntp_servers udp 123 - - - - ntp > > a problem with the patch is that now the logprefix is mandatory. > i''m trying to debug it, but i can''t find the flaw. Also, with

At 01:45 AM 03/23/2000 +1100, Paul Rijke wrote: >Hi all you Samba cracks (I hope) out there, > >I've a question... I use the following smb.conf but when I change the Win95 >client to have user profiles, several folders and the user.dat file is >created in the users home directory instead of the profile share... > >My questions are: > >1. Does anyone know how to