similar to: iptables question

Where is the correct place to control what traffic is masq'ed out? This is what I have, but I was told the Forward chain isn't the right place to do this? iptables -A POSTROUTING -t nat -o $WAN -j MASQUERADE iptables -A FORWARD -i $WAN -o $LAN -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A FORWARD -i $LAN -o $WAN -m state --state NEW,ESTABLISHED,RELATED -p tcp -m multiport

I have a dual homed server in an install for someone who is very cost sensitive. This server originally is being setup as an Asterisk server, but now the simplest thing for me to do is also set it up to provide internet access for the small shop as well. So it will have one external, WAN facing nic that needs all incoming ports except UDP 5060 and 10000 -> 60000 blocked for all but two ips.

I have a squid proxy running transparently, so in my firewall script I run the following fairly early: iptables -A PREROUTING -t nat -i $LAN -p tcp -m multiport --dports 80,443 -j REDIRECT --to-port 3128 This is a multihomed server so after this change the masquerading was removed (as only web access on the lan side of this server was needed). I now need to masq cleanly one device so that it

I need to increase reliability at an office as SIP/Internet provider outages are causing some issues. What would be the least expensive analogue card that people are using reliably? Thanks! jlc

I need to implement a solution and not having ever used anything but MS Project I would be grateful for a reco on something good. The only hope would be that its web based but I am open to anything! Thanks! jlc

What is the closest open source mail server I can replace exchange with that provides the nearest equivalent in user experience? Thanks! jlc -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20080406/5a469804/attachment-0001.html>

Hey Guys, I am trying to get a python script running but I get the following error: atexit.register(atexit_handler) NameError: global name 'atexit' is not defined A Google search doesn't really help me, except confirm that I don't know anything about python:) Anyone got any ideas? Thanks, jlc

I have a xen machine that has iptables turned off, and after a reboot it started behaving badly during times when network IO rose to anything other than almost nil. Since I know iptables makes xen unstable without some additional config and since its isolated I just have is disabled. As a result it was the last place I looked and spent the better half of the day chasing my tail. Somehow it gets

I have been searching the net for directions on rhel and centos 5(1) to log in to a windows domain and have found many examples, all different and none work for me. Is there a hint to some documentation anyone here knows of that actually works? Thanks! jlc -------------- next part -------------- An HTML attachment was scrubbed... URL:

We are moving all our (limited and badly organized) documentation to a wiki. Anyone got any examples/pointers to a hierarchy that made logical sense? We are hoping to move everything from topology to application specific notes in to the wiki. Given the size of this task, I only want to do this once:) Thanks for any reco's! jlc

When choosing either of these methods and using an iso, how does CentOS determine the right iso file to mount? Is there an expected file name format? Thanks! jlc

Trying to rsync a rather large file from a windows server to a centos server and all but this is working fine. As it's a 20 gig file I am trying to send the diff of with a -c, I suspect over the low bandwidth this presents an issue. I also stage this file locally on another centos server and could calc the diff and create a patch and send that, comparing checksums etc... A quick look at

What's the simplest way to increment the number 0000 up by one until some other 4 digit number while preserving leading zero's until the 1000's has a digit other than 0? Thanks! jlc

Anyone got any experience/suggestions for a way to store a directory of sensitive information on a CentOS box? This directory contains many scripts and output files, I need it backed up but not unencrypted and don't want to store it in a tar file type archive as when it needs to be accessed and have scripts executed/data generated, it needs to be untarred/unencrypted and I don't know the

I have a user w/o a shell that runs an app as a daemon that needs to use mutt to email an attachment from a script. During testing when the app was ran as root everything worked:) Now that we obviously are running as a user w/o a shell this little bit broke. I used mutt as I needed to send the attachment as mime, and the ability to specify a muttrc from the cli when executed was useful so we

Any way to initiate a call and execute a playback of an audio file from the cli? My only chance to debug or make changes is usually when no one's at the office including me! Thanks! jlc

For ages I have been keeping docs and notes in Public Folders inside an Exchange server and want to move this out to a more modern facility that allows tagging and searching via a web interface for keywords so I can keep all my notes more organized. Anyone have any personal recos for the slickest system to do this with. Given the nature of my home setup, its routinely used to lab stuff up so I

What are the ramifications to a large key length when using pub/priv keys for ssh authentication. I have some remote admin and file transfers to manage and only have ssh access w/o vpn to use for it. Thanks, jlc

How does one do this? Also, is it possible an rpm installed by rpm and not yum does not indicate what it provides to yum when yum queries needed dependencies for another package? Thanks! jlc -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20080330/18ba2e89/attachment-0001.html>

How can I do this w/o restarting services or rebooting? Thanks! jlc