search for: vieridipaola

I''m new to openvpn and maybe I should be asking on openvpn''s list... But I read the tutorial: http://www.shorewall.net/OPENVPN.html#id2452626 and saw the following: " On System A: ifconfig 192.168.99.1 192.168.99.2 " I don''t understand the reason for using these "virual" IPs. For instance, I configured openvpn on my peers so that the IPs on the

Hello, I am thinking of connecting a Shorewall Firewall to three different ISPs and load balancing some but not all connections. Just asking for some advice for now. Here''s the network layout: ISP1 ISP2 ISP3 ADSL Router 1 ADSL Router 2 ADSL Router 3 | | | FW:eth0 FW:eth1 FW:eth2

Hi, I followed the guide here below to add my Samba client to an AD PDC (rid backend): https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member The end result is that commands such as: # wbinfo -g # wbinfo -u work fine in that I get a domain group and user listing. Also, computers in the domain network can transparently authenticate (Windows) to the newly-added (joined) Linux

Sorry, "encrypt passwords" was added by mistake. I see it is deprecated now. In any case, even without removing it, I decided to remove the member from the domain and added it again as I saw other posts with similar issues. I ran a "net ads leave" followed by a "net ads join" again, and after the message that it had joined successfully, now wbinfo -t and the likes

OK, interesting debate, but I still can't convert to SID. I still get messages such as this one: AUTH-PAM: BACKGROUND: my_conv[0] query='Cannot convert group GROUP to sid, please contact your administrator to see if group GROUP is valid.' style=4 # wbinfo -t checking the trust secret for domain DOMAIN via RPC calls succeeded # wbinfo --ping-dc checking the NETLOGON for

I'm trying to use the txfax application based on spandsp in Asterisk 1.2. It seems to be working but I would need a way to reliably check whether the fax has been completely transferred or not. I'm using a mail2fax system (as with email2fax and .call files) but I can't seem to get it working. If I use "Application" and "Data" in the .call file, there doesn't

I realize this may be off-topic but I was hoping someone could help me maybe by pointing me to some other discussion group. Sorry for the spam (I won''t post back on this matter). How can I detect if an ethernet switch is faulty (supposing all the physical indicators are fine)? Googling around didn''t lead to much (or led to too much). I''m asking this because our 300+

In my peculiar setup I need my shorewall router to do one-to-one NAT with RFC1918 addresses. The "external" addresses are 10.215.0.0 and the internal addresses are 192.168.0.0. I can ping, vnc, http, smb from 10.215.144.48 to 10.215.145.237 which is 192.168.44.237 internally. >From 192.168.44.237 I can do http, rdp, ping to 10.215.0.0 hosts. So all seems fine except for the fact

Are shorewall-shell and shorewall-common required at compile time even if one only wishes to use shorewall-perl (4.0.9)? ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

It's Gentoo Linux. System uname: Linux-5.4.38-gentoo-x86_64-x86_64-AMD_EPYC_7272_12-Core_Processor-with-gentoo-2.6 KiB Mem: 32746472 total, 27513712 free KiB Swap: 37005244 total, 37005244 free Timestamp of repository gentoo: Fri, 29 May 2020 00:45:01 +0000 Head commit of repository gentoo: 9e5f0b894af4ad7780998a137656d0835b73213e sh bash 5.0_p17 ld GNU ld (Gentoo 2.33.1 p2) 2.33.1

Hello, I''m reading this guide on ipv6 (really just getting my "feet wet"): http://www.shorewall.net/6to4.htm In the section "Configuring IPv6 using my script" I can read that the IPv6 interfaces are: INTERFACES="eth2 eth4" and that correlates fine with the first diagram/figure. However, further down I read "You will notice that sit1, eth0 and eth2

Nice call. It almost worked except for a small error in 'man pam_winbind' -- DOMAIN\\GROUP should actually be DOMAIN\GROUP in the pam.d file. Now, I'm a bit confused. The pam module 'pam_winbind' is from the Samba suite. OpenVPN is just passing on the authentication decision to Samba. However, I was expecting to just use the group name without the domain name since I have

Yes: # getent group GROUP group:x:17573: # getent group group2 group2:x:11010: # getent group GROUP3 group3:x:21178: # wbinfo --group-info GROUP group:x:17573: # wbinfo -n GROUP S-1-5-21-948789634-15155995-928725530-7573 SID_DOM_GROUP (2)

Does anyone know of a script that can act as a "helper" for Shorewall''s dynamic blacklist capabilities? Briefly said, I''d like to know if someone already wrote a script/program that, e.g., parses log files (/var/log/messages, etc) and picks up for example all IP addresses that failed SSH login more than X times and then executes a command such as shorewall drop

OK for the DC. I noticed that converting users and groups to sid with the example below seems to work fine: # wbinfo -n DOMAIN\\user S-1-5-21-948789634-15155995-928725530-6864 SID_USER (1) # wbinfo -n DOMAIN\\group S-1-5-21-948789634-15155995-928725530-11178 SID_DOM_GROUP (2) However, applications using PAM and winbind seem to fail when trying to convert to sid. For instance, just to name one,

Hi, I created an IAX2 trunk between my old Asterisk 1.4 server (A) and my new one with v. 16.10.0 (B). The trunk seems to be up, and the calls are initiated, eg. an extension from A can dial an extension in B which rings. However, as soon as the extension in B answers, the call is terminated. This is what I see in the console of B: -- Called PJSIP/4053 -- PJSIP/4053-00000002 is ringing

Hi, I followed the instructions in the section "Squid (transparent) Running on the Firewall" on http://www.shorewall.net/Shorewall_Squid_Usage.html to setup Squid transparently on a Linux gateway. My net is as follows: loc subnet --- fw Linux Gateway --- ADSL router 192.168.1.0/24 192.168.1.92 (eth1) WAN.WAN.WAN.2 (gw = WAN.WAN.WAN.WAN (eth0) 192.168.1.92) (gw =