similar to: CentOS 6.3 as Firewall/Router

Hi, I''m having issues with policing my incoming traffic by matching packet marks made by iptables. I''ve checked as many sites and guides as I can find, and I seem to be doing the exact same thing as they all are, but there''s still no success. As such, I was wondering if anyone can have a quick look to see if I''ve done anything obviously stupid? Essentially, I

Hi all i have big problem,I am newbie and my english is bad,but i know you can help solve my problem. I have box with gentoo,I live in latvia and i have 2 ISP: One isp gives me ip range from 62.85.71.1-62.85.71.15 (62.85.71.1 is gateway) but there is only latvian trafik - no other countries (link is 2 mbit Asinhronus dsl) and other isp who gives me one ip from dhcp adn there ios no trafik

Hello All, I have a strange problem regarding samba 3.0.37 I have samba server installed in the local network behind NAT, the router iptables are configured as follows: #samba $IPT -t nat -A PREROUTING -i $INET_IFACE -p udp -d $INET_IP -m multiport --dports 137,138 -j DNAT --to-destination $FILESERV $IPT -t nat -A PREROUTING -i $INET_IFACE -p tcp -d $INET_IP -m multiport

I put a bridging firewall together last winter (with some help) and have it= in production in front of a couple windows web and mail servers for going = on 6 months now. I used Fedora C1 with 2.4.22 kernel and 0.9.6 bridge-utils= . The bridge has solved a lot of security headaches. I use a modified start= up script written by David Whitmarsh that has worked really well. http://ww=

On 01/27/2016 04:17 PM, John R Pierce wrote: > is seamonkey .i686 or .x86_64 ? you might need to yum install > dbus-glib.i686 Thanks. $ rpm -aq seamonkey seamonkey-2.39-1.el6.x86_64 Double-check: $ file /usr/lib64/seamonkey/seamonkey-bin /usr/lib64/seamonkey/seamonkey-bin: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.18,

I have a router used as a gateway for a small lan, I want half the machines to use one IP and half to use another IP when using SNAT to reach the internet. Both IPs are from the same ISP, same account, just different IPs. Heres what I''m trying: ------------------ LAN_IP="10.0.0.1" LAN_IFACE="eth0" EXT_IP_1="x.y.246.186" EXT_IFACE_1="eth1"

On 01/27/2016 02:47 PM, Clint Dilks wrote: >> /usr/local/seamonkey/seamonkey-bin: error while loading shared libraries: >> libdbus-glib-1.so.2: cannot open shared object file: No such file or >> directory >> >> > Have you tried yum provides 'libdbus-glib-1.so.2'. I get a hit with > dbus-glib Thanks. Package dbus-glib-0.86-6.el6.x86_64 already

Can you list more than one interface in the 'interfaces' config option? I have two interfaces, one that does nmbd and smbd to my LAN, and another that will browse-sync with a remote samba machine with the same configuration of two network cards. I'm looking to do something like this: interfaces = eth1 $LAN_IP/24 127.0.0.1/24 eth0 $INET_IP/24 bind interfaces only = yes Thanks,

Hello, First I want to point out that I''m not so familiar with HFSC, since there not so much info online. But here is my script: ${TC} class add dev ${LAN_IFACE} parent 1:0 classid 1:1 hfsc ls rate 100mbit ul rate 100mbit ${TC} class add dev ${LAN_IFACE} parent 1:1 classid 1:2 hfsc ls rate 90mbit ul rate 90mbit ${TC} class add

Hi, system info: ubuntu 7.04 (Host OS) samba 3.0.24 (installed with apt-get) vmware-server 6.0.1 windows XP (Guest OS) I was using the iptables script provided by iptablesrocks.org. It's been quite useful, but I ran into a problem when I tried to connect samba. Without any iptables rules, I have no problem when connecting host os(ubuntu samba server) from guest os Windows XP. I referenced

Hello i''m having some issues trying to match packets using iptables mark, iproute filter and tc filter.- i mean, when i do iptables -t mangle -A INPUT -p tcp --dport 80 -j MARK --set-mark 20 iptables -t mangle -A PREROUTING -p tcp --dport 25 -j MARK --set-mark 10 iptables -t mangle -A FORWARD -p tcp -i eth0 -o eth1 --dport 25 -j MARK --set-mark 10 $TC qdisc del dev $INET_IFACE root $TC

I found the problem! It was me and it was dumb... This was the network layout: 10.10.10.0/24 1.2.3.0/27 10.10.10.n internal hosts | <----+-----+--------+ +-------+------>to the Internet | | | | Proxied | | | H.323 device Firewall Router eth1 eth0 1.2.3.11

Looking for a command-line way to extract only the Subject lines from my mailbox on my ISP's IMAP server, without actually downloading/modifying the contents of the mailbox. Sort of the remote equivalent of locally doing: $ grep ^Subject /var/spool/mail/mymailbox > subjectlistfile Thanks. -- Tim Evans | 5 Chestnut Court UNIX System Admin Consulting | Owings Mills, MD 21117

I've followed the instructions in the README at http://us4.samba.org/samba/ftp/Binary_Packages/AIX/ for building 3.0.21x on AIX 5.2 ('oslevel -r' reports '5200-07'). The last version I was able to build on the system was 3.0.14a. 3.0.21c's configure completes with no errors, but the make immediately bombs with: # make Using FLAGS = -O -D_SAMBA_BUILD_ -I./popt

Hi there, I have a little problem. I had this some months ago but didn''t solve it back then. I have patched my kernel with Layer 7 support and patched my iptables to support it, too. Now I inserted this line in my firewall script on my router for testing purpose: $IPTABLES -t mangle -A POSTROUTING -o $INET_IFACE -p tcp -m layer7 --l7proto http -j DROP It works, BUT only if the

We are replacing four servers, running mail, web, ftp, and dns, respectively, with a single server to run all four services. The new server will have a new IP address. It seems fairly straightforward to redirect mail, web, and ftp services to the new server via DNS CNAMES, but I'm not quite sure about how to do the change for the DNS service itself. Is there a need to maintain the old

Solaris 10 5/08 Customer migrated to a new emc array with a snap shot and did a send and receive. He is now trying to set quotas on the zfs file system and getting the following error. [root at osprey /] # zfs set quota=800g target/u05 cannot set property for ''target/u05'': size is less than current used or reserved space [root at osprey /] # zfs list -o

I've been using the SeaMonkey built-in HTML editor from the epel repo for CentOS 6.7: $ repoquery -i seamonkey Name : seamonkey Version : 2.39 Release : 1.el6 Architecture: x86_64 Size : 127340745 Packager : Fedora Project Group : Applications/Internet URL : http://www.seamonkey-project.org Repository : epel Summary : Web browser, e-mail, news,

Just upgraded a RedHat 4.5 system to 4.6, including Samba Version 3.0.25b-1.el4_6.2 Smbd starts, but denies all access. winbindd-idmap.log shows this error message: [2007/11/19 10:37:06, 1] nsswitch/idmap_tdb.c:idmap_tdb_allocate_id(470) Fatal Error: GID range full!! (max: 20000) Individual PC log file shows: check_ntlm_password: Authentication for user [chughes] -> [chughes] FAILED

I've installed Google Chrome using the Richard Lloyd 'install-chrome.sh' script (http://chrome.richardlloyd.org.uk/), and am finding a couple of nagging issues. (Current install is google-chrome-stable-46.0.2490.71-1.x86_64). First, every time I shut down Chrome and start it back up, it whines about not having been shut down "properly." Second, and worse, at start up,