similar to: FirewallBuilder

For those of you that either have an older revision of my firewall document, or are otherwise keeping track of it, there is a new version available. The current version of the document is version 3.1. It's changed rather significantly in some areas.

I know that some of you from the list have asked me in the past for a copy of my CentOS based Linux Firewall document. There are also those that have no clue what I am talking about. This is for the former group... There is a new version of my document out. It's changed quite a bit since the last person asked me for it. Some of the changes are: * Updated the scripts in the Useful Shell

Looking through the build files I'm wondering if we can't do some clean-up and remove extraneous kruft before we release. Like the config.dbs and the README.build that talks about the config.dbs. From looking through the build setup I don't see either file actually critically needed and looks like Ralph may have come to a similar conclusion by the comments added to the README.build

>On Thu, 2006-06-29 at 20:48 -0700, Chris Fox wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Rodrigo Barbosa wrote: >> >> > you might want to try agetty: >> > >> > T0:23:respawn:/sbin/agetty 9600 ttyS0 vt100 >> > >> > Not sure if it will work, but seems likely. >> > >> I've always

yum apparently still can't cope with transparent proxies. I tried the following and got the yum http behind proxy error: Is there an ftp version of the mirrorlist or are those of us that have to use transparent proxies stuck without this new feature? [root at joshua ~]# yum install yum-plugin-fastestmirror Setting up Install Process Setting up repositories Reading repository metadata

Hola a tod en s, Estoy tratando de abreviar nombres ciéntificos pero no me gusta cómo queda usando make.cepnames de la librería vegan. Me gustaría poderlos abreviar así, Hymenocephalus italicus --> H.italicus Merluccius merluccius --> M.merluccius He probado con varias opciones y no consigo dar con ello. Estoy casi seguro de que es algo relativamente sencillo, pero no doy con ello.

Hola a todos, Gracias por las respuestas. Los nombres ciéntificos son los nombres de las columnas de un csv. Usando vuestros comentarios y sugerencias, estoy tratando de "automatizarlo", ya que tengo unas 40 especies. De momento sin mucho éxito por que no consigo dar con la forma de que me abrevie las especies correctamente y mezclo campos La aproximación de Jorge me valdría (y he

Hi! I was running lintian on our package... Among the copious errors and warnings there are: W: xen-utils: manpage-has-errors-from-man usr/share/man/man1/xm.1.gz 668: warning: can't find numbered character 160 Should we try to fix this, perhaps? E: xen-hypervisor-pae: unstripped-binary-or-object ./boot/xen_pae-syms-3.0.1 E: xen-hypervisor: unstripped-binary-or-object ./boot/xen-syms-3.0.1

God help me I know I said let it die, but it was continued elsewhere also. I'll try to keep this forest fire in ONE location. On 6/7/07, Frank Tanner III <pctech at mybellybutton.com> wrote: Okay, lets try to contain this to ONE forum (mailing list) please. > See... Your whole response to my whole firewall document thing is EXACTLY why I didn't post it on your wiki. Because

I need a decent, easy, firewall on Centos. This is for test systems, so I do not need a lot. For 'a lot', I use and Astaro firewall. I had used Firestarter once, but found out that it cannot handle routing between a public and private network. Basically saying this is impossible. Of course, if your private network is addressed per RFC 1918 (that I co-authored), I can understand

We have kernel support for IPv6 in Centos, but not stateful firewall support. That requires at least the 2.6.20 kernel, which means Fedora Core 6 or some other Linux distro. None of the various free Linux firewalls have IPv6 support. Supposedly FWBuilder can manage Netfilters for a Linux Kernel, but that seems to be the extent of it. More sad facts as I uncover them.....

Well FWbuilder is NOT easy. The documentation does not match the current GUI. Now the box is locked up. I will have to pull it again, hook it up to a kybd/VGA and reset iptables.... Maybe Shoreline with webmin.... Problem is I want a REAL router/firewall with little work. Both public and private nets have routable addresses. No NATing for me! I just help write the RFC ;) And all the

hi, on Friday i did a upgrade vom 3.0.2 to 3.0.3. I get in trouble with my IPTables rule-set, generated with the fbuilder (2.0.9) tool. I use as inside device xenbr0 (private-ip) and ppp0 as outside. After upgrading the scripts from the install, everything blocked, after starting the firewall. I saw, that xenbr0 does not have any ip, but eth0, so i changed the inside device from xenbr0 to eth0.

Hi, This is semi-OT, but is Centos-related. I'm looking for an IPTables GUI to help us with our expanding network configuration. I know there's plenty out there, but most of them seem to manage the firewall on the computer on which they run, or only handle one firewall at a time. I need one that can easily manage multiple firewalls from some sort of central location/repository, i.e.

I have some archive mails in gzipped mboxes. I could use them with dovecot 1.x without problems. But recently I have installed dovecot 2.0.12, and they are slow. very slow. Creating index files takes about 10 minutes for ~20M file with 560 messages for bzipped mbox, for gzipped is little better but still unusable :( Stracing dovecot process shows that every ~ 20 messages it rereads complete mbox

the new src/lib/ipwd.c introduced in 2.0.12 no longer compiles on solaris. Under solaris, the *_r routines doesn't pass in result as the last parameter and return errno - it just returns result. obviously a job for configure..... -- Roger Fujii<rmf at lookhere.com>

Hello listmates, I know this may sound stupid... but I am trying to set up a firewall/filter/forwarder using CentOS 5.5 machine as a platform and I am succeeding but only partially. Fro example, I am literally trying to forward HTTP and HTTPS (TCP 80 and 443) from the public interface to a private IP and TCP 80 works like a charm whereas TCP 443 seems to be a no-go. To that effect: does anyone

Hello, today I tried to update 2.0.12 to 2.0.13, but I got those messages, only: Aug 1 10:20:27 mail dovecot: master: Dovecot v2.0.13 starting up (core dumps disabled) Aug 1 10:20:33 mail dovecot: imap-login: Login: user=<***@***.**>, method=PLAIN, rip=192.168.1.99, lip=192.168.1.1 , mpid=5123, TLS Aug 1 10:20:33 mail dovecot: imap-postlogin: Error: script-login: Error: user ***@***.**:

Hi, I'm using the generic system-config-securitylevel-tui program on a remote server to configure my firewall. So far it's been fairly decent, allowing me to open up ports and whatnot. But I want to start blocking a couple of outgoing ports on my machine. I want to lock it down so the only traffic going in our out of my machine is stuff that I specify. Is there a way to do this

Currently using 2.0.12, configured the auth-sql.conf to look like this for password lookups (doing smtp auth with postfix, so I am not actually running pop or imap, just auth): passdb { driver = sql connect = host=server.net dbname=passwd user=sqluser password='password' default_pass_scheme = CRYPT password_query = SELECT CONCAT(username,'@domain.net') as user, pw as