similar to: Does shorewall change Kernel parameters?

> > Hi !!! > > I've managed to make Samba 4.6.4 run on AIX 6.1. Packages from OSS4AIX. I > have two shares both are read write, but I'm not allowed to write on them. > > This is my [GLOBAL]: > > [global] > bind interfaces only = Yes > interfaces = 127.0.0.1 en0 > netbios name = P7-AIXTEST > realm = MYCOMPANY.LOCAL >

One of our systems run Apache 2.0.52 (httpd-2.0.52-12.2.ent.centos4 rpm). The kernel we're running is 2.6.9-11.ELsmp. After a few weeks of uptime, Apache refuses to start with the following error in error.log: [crit] (28)No space left on device: mod_jk: could not create jk_log_lock With Apache not running, there're a lot of semaphores left behind by Apache, e.g.: ------ Semaphore

I have a bunch of servers, where I''ve deployed shorewall-lite. For us is very useful to have a centralized repository of the firewall rules deployed in our servers. One of this servers is pretty busy, handling lots of connections. In that server I''m getting from time to time this message: ip_conntrack: table full If I where working in a custom made iptables firewall I will

Ole.H.Nielsen@fysik.dtu.dk wrote: > > SAMBA grabs ALL available semaphores minus 1 on SunOS 4.1.3, > where the kernel has 60, see /usr/include/sys/sem.h: > #define SEMMNS 60 /* # of semaphores in system */ > > This is a MAJOR PROBLEM to us, since our backup software > (IBM ADSM) also needs available semaphores for the client > part to work. Hence we can

There are massive attacks on specific port, I want to trap and log just the ip source to this port. Is there anyway to do so with shorewall? Thanks. Willy Mularto sangprabv@gmail.com ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev

Hi, i've setup samba on one of our solaris boxes, it was working fine, but suddenly now it does not start. here is the error message from the log.smb file: [2000/02/11 09:42:51, 0] locking/shmem_sysv.c:sysv_shm_open(566) Can't create or use semaphore [1]. Error was No space left on device [2000/02/11 09:42:51, 0] locking/locking.c:locking_init(174) ERROR: Failed to initialise share

According to the man pages for sem_wait, etc., POSIX semaphores are available in Linux 2.6 (with the right NTPL threading in glibc). However, I have a program that compiles just fine but won't link because it can't find the library for the semaphore operations. What am I missing? I ran a find and grep through all the libc's on the system and they turned up nothing: $ find /lib

Hello all, I have a very annoying situation (at least at my end). I set up Samba 2.0.5 on a Digital UNIX 4.0F system sitting on a Compaq DS20 server with great success.... until recently. I set up three directory file shares with no problems, when I tried to set up a forth, quite a while after setting up the inital three, I tried to access it from a NT box, I got the message server not found,

Hello, I have 2 ISP uplinks (zones: inet1 and inet2), each with a fixed IP on the outside and a routed subnet (/25 and /26) on the inside. So, behind the firewall i have 2 networksegments (lan1 and lan2) with public IP-addresses. The segments are completely isolated from eachother: hosts in zone "lan1" connect only to "inet1" and hosts in zone "lan2" only connect

Hi, I have recently installed shorewall with a very simple rules configuration, ---------------------------------- #SECTION RELATED SECTION NEW Ping/ACCEPT all $FW Trcrt/ACCEPT all $FW SSH/ACCEPT all $FW ACCEPT net $FW tcp http #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE ----------------------------------------- and I have no

I want to use lastest version of Shorewall in my fresh debian squeeze instalation, so I follow http://www.shorewall.net/Install.htm#Debian but, modify preferences file was not enough for me, I have to modify/add some other files in /etc/apt/ directory: 1.) include testing repo to source.list 2.) add APT::Default-Release "stable"; to apt.conf and pinning all other packages to stable

Running v5 64bit on a Dell 1950. A cluster of 3 DB machines, identical hardware. One of them suddenly became slower 2 weeks ago. tar -zxf with a large file on this machine takes 1.5 minutes, but takes only 10 seconds on any of its siblings. CPU usage seems high while untarring, with lots of user and sys cycles being used, but almost no wait cycles. It doesn't matter whether I untar on a

Hi, I'm using IPSEC in a multi-ISP configuration, lsm 0.131, Kernel 2.6.32, ipsec-tools 0.8.0 This worked fine with Shorewall/Shorewall-Lite 4.5.7. After updating Shorewall to 4.5.8 the routing of ESP packets doesn't work. If I change the Providers.pm file and add connmark => "! --mark 0/$mask" like before in Shorewall 4.5.7 than everything works fine. add_ijump

These three patches (for discussion only, NOT to be applied) implement a mutex system that lets the user limit the number of libguestfs instances that can be launched per host. There are two uses that I have identified for this: firstly so we can enable parallel-tests (the default in automake >= 1.13) without blowing up the host. Secondly oVirt has raised concerns about how to limit the

I am running Samba 2.0 and occasionally get a "semaphore timeout period has expired" message when accessing Samba shares on a Digital UNIX 4.0e server. Does anyone know what kernel semaphore settings should be. Or could a upgrade to 2.0.7 help. I new to Samba and am very green with this product. Thanks David

Hi all, I Try use shorewall rules with time element but its never works, the rules look like this HTTPS(REJECT) loc net:69.63.181.11,69.63.181.12,69.63.184.142,69.63.187.17,69.63.187.19 localtz&timestart=20:00&timestop=20:10&weekdays=Mon,Tue,Wed,Thu,Fri This rules for block https access to facebook site at working hours & day My system is Debian lenny, shorewall 4.4.4.2 kernel

I am attempting to use the Knock.pm from http://www.shorewall.net/ManualChains.html I am not having much luck making the DNAT- knock work for some reason. Anyone else using this on 4.4.4 that can verify if this still works as documented? Thanks ------------------------------------------------------------------------------ Return on Information: Google Enterprise Search pays you back Get the

On 28/07/2010 15:45, shorewall-users-request@lists.sourceforge.net wrote: > On 7/28/10 1:50 AM, Andrea Perdicchia wrote: > >> > Hi all, >> > Is possible log mac address in shorewall? >> > I try all configuration "debug,info..." in /etc/shorewall/shorewall.conf >> > but in /var/log/messages the log show only few information and not mac

Hello, My name is Felipe I succesfuly installed Shorewall 4.4.20.3 in Ubuntu 10.04, This installation is for controlling the access into the local Network, My question is if it is possible to make a conecction WAN to LAN using Terminal Name?? i have been searching in goolge but i didnt find an answer!!!! For example we have IP Public into shorewall with 2 interfaces, and in the LAN we have 3

Hi, I''ve been having a really strange thing happen. I can''t remember when it happened, or if it coincided with a shorewall update, but if I have shorewall "running", my 100mbps connection is limited to about 1-6mbps per connection. This is with TC/Shaping/QoS disabled or enabled. I have no idea if its shorewall doing something funky or ipables or what, but if I