similar to: Firewalls (was: Sigh....ok once more with feeling)

The firewall didnt help matters. I think its FUBAR and I need to reformat anyways, so ill reformat and reinstall and put fresh SAMBA up, on Mandrake 9.0. The system has 2 NICs and NET_MASQ shares internet to the XP machine. Therein it acts as a DHCP server and has a firewall. I will open 139 from the start next time.

Hi, I asked this last week but i didn't get any answer So i will elaborate on my question. I need to setup a pix 515 firewall (running 7.2.2 OS) to allow sip traffic thru it from a sip phone wherever i may be. The pix is where all my servers are colocated and i will need to connect thru it from softphones / hardphones wherever i happen to be traveling. I need help setting up the pix for

Now that I have winbind working, life is good. However, I've hit upon a real kick in the pants. As you can see from my email address, we have a convention here of usernames being firstname.lastname. So, when I go to change the owner ship of a file: $ chown chris.palmer myfile Linux thinks I mean user chris, group palmer, and says "invalid group" (there is no palmer group,

Hello once again, I've got winbind doing authentication not just for the samba service but also sshd and login. It's great. However, I have to give a fully-qualified username (e.g. "GENEEDINC+chris.palmer") as the username when logging in via these methods. I wondered, Is there any way to get winbindd to insert the domain and the separator for the user, when none is provided? I

I apologize in advance if this is a FAQ, but I couldn't find the FAQ document for this list. I also could not find anything relevant in other Samba documentation sources like http://hr.uoregon.edu/davidrl/samba.html. There seems to be plenty of information about using Samba *as* a DC, but I want to know if I can use Samba *with* a Windows 2000 DC. We have two DCs running Windows 2000, a W2K

Typically a "hardware" firewall is specialized and uses ASICs. Because the solution utilizes specialized chips tailored to the task, this is considered a hardware based solution. Of course software is involved but it too is specialized and is even proprietary in nature. A "software" firewall, be it BlackICE or even a Linux on PC uses no specialized hardware. Thus the

Hello, I am not too familiar with the settings in our PIX (learning though). Here is the only access-list setting that we have in place for Asterisk: access-list acl-prod permit udp any host EXTERNAL_*_IP_HERE eq 5060 In rtp.conf we are allowing ports 10000 - 20000. We are not using SIP Fixup in our PIX due to firmware version. How do I go about adding the ability for udp ports 10000 - 20000

hey friends, I am looking for a free open source software (web based or application) through which I can monitor the Pix Firewall. What it should show Interface status or traffic , VPN Connectivity status, CPU Status, Memory Status etc. I am also running DHCP server on Pix Firewall (due to some reasons) If it can monitor that also means showing how many IPAddresses has been assigned, to whom,

Hi, I have about 10 Cisco 7960s behind a PIX 506E (IOS v6.3) firewall. After some period of time, asterisk says that some of them are unreachable, and the phones lose their registration. The only way to make the phones recover is to clear the NAT translation tables for the phones on the PIX (clear xlate...) Does anyone know how to fix this? As you can imagine, it is quite annoying. And it does not

Hi All, I have a home business circuit and I am gearing up to host my business affairs in my place. I have Comcast and 13 static IP's. I have an extra PIII 1U, 2 9gb SCSI, 1gb RAMm dual NICS. So I am wanting to build a firewall to front end my traffic. Assign one of my statics to it and have Comcast statically route my traffic to this IP. Then when traffic comes have it decide if it

Hi, I just wonder if I can replace PIX firewall with machine having IPTable as my firewall. I want to control our firewall but due to the lack of knowledge in configuring PIX, i want to replace it with Linux or BSD. I do not have the time now to learn the complexity of PIX and yet I want to know what happening in my firewall and control it as much as possible. Do you think it is justifiable for

Hi To investigate the UNREACHABLE issue I'm having, I need to have confirmation that it's OK for the Asterisk server to be behind a NAT router, and also have clients elsewhere on the Net behind their own NAT router? I know that clients must use STUN to resolve their public IP and punch UDP holes in their firewall, but is there something special that must be done in the configuration

Hi All, I want to build a dedicated firewall/router as I am launching a NPO and I can host this in my garage. (Comcast offered me a 100 x 20 circuit for $99/mo with 5 statics) I used to run Untangle, but as of version 9, you are forced to use their build in protocol policies versus the firewalling I am used to (Deny All and then opening holes for specific IP's, etc). There are so many

On Fri, Aug 10, 2018 at 08:33:00PM +0000, procmem wrote: >Hello. I'm a distro maintainer and was wondering about the efficacy of >entropy daemons like haveged and jitterentropyd in qemu-kvm. One of the >authors of haveged [0] pointed out if the hardware cycles counter is >emulated and deterministic, and thus predictible. He therefore does not >recommend using HAVEGE on those

Hello everyone, I need to do a sample size calculation. The study two arms and two endpoints. The two arms are two different cancer drugs and the two endpoints reflect efficacy (based on progression free survival) and toxicity. Until now, I have been trying to understand this in terms of a one-arm design, where the acceptable rate of efficacy might be 0.40, the unacceptable rate of efficacy

hi, i was reading a rsync log file, and i discovered that the summatory of each file transfer(in bytes) doesn't match the total transfer for the operation. for instance: 2005/09/28 22:02:06 [1072] rsync to NOC from nocbox (63.110.176.221<http://63.110.176.221> ) 2005/09/28 22:02:07 [1072] IdsProcessor/IdsProcessorLogs/ 2005/09/28 22:02:11 [1072] IdsProcessor/SysLogs/Heartland-Bank/Pix/

hi guys, found this logs on my mail server about possible fraud attempt and phising. is this normal ? Found ip-based phishing fraud from 10.2.0.0 Found ip-based phishing fraud from 255.255.255.255 Found ip-based phishing fraud from 10.1.0.0 Found ip-based phishing fraud from 255.255.255.255 . MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be

Is there anything special that anyone here has had to do to get an Aastra phone (on the Internet) to talk to Asterisk behind a PIX firewall? Ports 10000-20000 UDP are open on the PIX and forwarding to the Asterisk server. The Asterisk server's RTP.CONF is set to use 10000-20000. The phone registers, and will place AND receive calls, however, no audio is passed. The phone is an Aastra

Hi, We have a shorewall firewall running on SUSE 10. We have three nic''s, Lan, DMZ and Internet. We also have a Cisco Pix 506e. We moved from sending all our traffic through the pix to using the Suse box yesterday. The PIX is in the DMZ, with a connection to the LAN switch, the idea being that VPN users can connect to the pix to the lan. The Pix is on the 10.0.1.x subnet, the lan is

Hi, I''m a relative newbie to LARTC but I have read Matthew Marsh''s book and lurked on this list for a while.... I still seem to be missing a few key ideas here.... So... Maybe folks on the list will be kind enough to help. I have two different ISPs. Cogent and Bell. I have three different firewalls (2 PIX and 1 IPCop). And I have an Ubuntu Linux box doing LARTC for around