similar to: Multiple Workgroups and Subnets

Hi all, I would like to do something like this at Samba level: hosts allow = subnet1/mask1 subnet2/mask2 etc hosts deny = * But this doesn't seem to work (machine that are not in subnet1 and not in subnet2 still have access) I think the * is not understood by Samba, I tried ALL, this didn't work either. I'm gonna check the samba source code but if I could get an expert answer

I have 1 100MB NIC with two 2MB-subnets trough a router behind it. I''d like to create multiple default classes: 1: + |\_ 1:10 default, ceiling 100000kbit, rate 96000kbit | |\_ 1:11 ceiling 2048kbit, rate 2048kbit | | | |\_1:110 ceiling 2048kbit, rate 1536kbit | \_1:111 ceiling 2048kbit, rate 512kbit (default subnet1) | \_ 1:12 ceiling 2048kbit, rate

Hi! I have a problem with samba, that I don't know if it's possible to solve. This is my network: <Subnet1>-Ethernet-<Gateway>-Ethernet-<Subnet2>-Internet Subnet1 is my own local network (bcast 192.168.1.255), Gateway is my own gateway machine (FreeBSD4.4, IPs: 192.168.1.1 and 193.13.35.101), Subnet2 is my neighbours (bcast 193.13.255.255). I can configure all

good morning all, i have an interesting issue with browsing. details: i have three subnets. (subnet1, subnet2, and subnet3) i have a samba server on each subnet. (samba1, samba2, and samba3) i have a windows 2000 server on subnet1. (m$1) samba1 is the domain master and wins server with ip 192.168.0.1 win2k clients authenticate to their local server and wins is set to 192.168.0.1. when i run a

Hi there. Currently, our network design has two ISP lines and 3 subnets for LAN. Below are some details :- eth0 - isp1 eth1 - isp2 eth2 - subnet1 eth3 - subnet2 eth4 - subnet3 What i wanted to do is to assign incoming port 80 to our local squid server running on the firewall itself and assigned it to eth0(ISP1). I think it shouldnt be a problem as /etc/shorewall/rules provides a sample of the

---------- Original Message ---------------------------------- From: "Jim Van Eeckhoutte" <jim@vaneeckhoutte.com> Reply-To: <jim@vaneeckhoutte.com> Date: Mon, 8 Jul 2002 15:27:14 -0700 this is shorewall status output: tcp 6 431899 ESTABLISHED src=192.168.20.5 dst=64.4.12.45 sport=2185 dport=1863 src=64.4.12.45 dst=63.25.123.58 sport=1863 dport=2185 [ASSURED] use=1

A number of you are flailing around trying to get the subject combination to work. You should all be aware that there are parts of this that don''t currently work and that won''t work well until there are enhancements made to Shorewall (and probably to Netfilter). I. There is no clean way currently to support Road Warriors from a Masquerading Netfilter firewall/gateway. As

Greetings, I just received some netweb-301 phones frm Seshu down in NJ. I cannot for the life of me get it to register with the asterisk server, nor upgrade the firmware to the latest (1.41) i'm still using 1.37. The packets are traversing the router, going into the other subnet, hitting the asterisk box, but not actually making it to asterisk. Nothing in the asterisk logs, but tcpdump

I've got a pretty large lan at the moment and we are moving into a new office building next week. I'm looking at splitting the lan into seperate networks. At this stage I have one samba DC that does netlogon, roaming profiles etc for all clients. I'm not using LDAP with samba and won't be able to too soon as the change would be major. I have a ldap server used for qmail /

Hello Kevin, We have a  Samba/Windows20008R2 domain that's been running a few years now. Here are the details: * clients auth with SSSD (ldap, kerberos, ldap_schema=rfc2307bis) * idmap * samba on clients/server for joining domain We have scripts that automatically create users with UnixHomeDir, UID and GUID numbers within AD. I don't know about using WInbind...  I dropped that

In my /var/log/messages file, in recent days I have been receiving numerous messages such as: Jun 23 15:02:50 OUR-HOST named[577]: sysquery: nslookup reports danger (dns.SUBNET1.OTHER.DOMAIN.AAA.BBB.CCC.in-addr.arpa) Jun 23 15:02:51 OUR-HOST named[577]: sysquery: nslookup reports danger (HOST2.SUBNET2.OTHER.DOMAIN.AAA.BBB.CCC.in-addr.arpa) Jun 23 15:02:51 OUR-HOST named[577]: sysquery:

hi list, this is my first posting in the list here. At the moment I am reading the Advanced Traffic..... How-To. perhaps some one can tell me how to realize my idea. We have a data-server which is used by different subnets in our company. now I want wo put a linux-box in front the dataserver which control traffic usage to the different subnet´s. is it possible to do this transparent and

Hi all, I am trying to come up with an architecture that has some redundancy. The idea is to hook up the two GbE LAN interfaces of a CentOS server to two Gigabit Ethernet switches. In case one switch goes down, there is a redundant path (the server is redundant too). Here is the idea: ----------- | GbE | PCs

Hello! Can anybody tell me what is the meaning of following logs (/var/log/messages). Feb 28 09:16:10 espl nmbd[3086]: process_local_master_announce: Server VINAY at IP 192.168.10.50 is announcing itself as a local master browser for workgroup EXCELIZE and we think we are master. Forcing election. Feb 28 09:16:10 espl nmbd[3086]: Samba name server ESPL has stopped being a local

Hi, I'm getting confused about the role that kerberos authentication plays. What exactly is the point of using kerberos to join a samba server to an AD domain? If using kerberos still requires you to rely on winbindd for all the nsswitch stuff then what is the point? I can just as easily specify workgroup = wkgrp security =

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I''m trying to setup a central IPSEC-Gateway with several ipsec tunnels. Some are to be routed over one leased line, some over the other leased line. Both leased lines have their own public ip adress. The setup looks kinda like this: eth1(ipsec0)--ISP0--Internet--eth1-Linux1-eth0--Subnet1 /

Hello everybody! I finally managed to set up a Samba 3.0.1 PDC that ran perfectly in the test-environment. Problems arose, when I installed it in a real bureau network. On a prepared w2k client that was already a domain member one could log on to the domain with the administrator's account, but trying to add other w2k clients failed with error msgs like: "Domain controller not

Hi, Is there a way in Linux to do NAT with a pool of outside addresses such that each connection to the outside resource gets a different IP address?? I don''t want 1:1 NAT as I have some thousands of IP addresses on one side of the LARTC router that _may_ need to access a resource on the other side... The resource needs to see a different IP address for each active call, but these

Hi, Apologies for the cross-posting; I''m not sure whether this is a firewall or routing issue, or both! I have four network cards, detailed below. eth0 and eth3 connect to my ISPs, and eth1 and eth2 connect to local networks. I want to route all traffic from eth2 to eth0, and from eth1 to eth3. However, I am having a few problems with this. eth0 ip: 192.168.100.253/24 gw:

I started with one dc, 'dc1', running samba v4.0.21, in subnet1. I successfully added two more dc's, 'dc2' and 'dc3', both running samba v4.0.24, both in subnet2. There are several firewalls between subnets 1 & 2. I continued to make firewall holes on behalf of msad after I added dc's 2 & 3. I.e. when they were added, there were patterns of communication