similar to: selinux issues

I would like to dnat certain protocols (HTTP, HTTPS, SSH) to the contents of an ipset (lan:+serviceshost or similar) where the ipset is ensured to contain only one host, but can be changed dynamically when services are in maintenance mode and go to the "services are down" message on another server. Will this work, or am I barking up a fish here?

I''m using Shorewall with a load-balanced muti-ISP config along with LSM for failover. It''s working great, except for DNS requests. I''d appreciate some advice on how to best configure this. The WAN connections are a T1 through XO and a cable connection through Comcast. About 80% of the traffic is routed out the Comcast connection under normal connections. I would

https://bugs.freedesktop.org/show_bug.cgi?id=57034 Priority: medium Bug ID: 57034 Assignee: nouveau at lists.freedesktop.org Summary: [Quadro FX 4800] display port connectors not recognized QA Contact: xorg-team at lists.x.org Severity: normal Classification: Unclassified OS: Linux (All)

I'm trying to figure out a puzzling thing that we are seeing with some recently joined or re-joined samba servers. Our linux servers are in a different DNS domain than our AD machines (nwra.com or cora.nwra.com vs ad.nwra.com for the AD machines). Generally when we've joined a machine to AD the DNS name recorded in AD is their regular linux FQDN. But a couple machines have ended up with

Okay, so I''m trying to setup my multiple ISP setup that I described earlier. I have: # ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: em1: <BROADCAST,MULTICAST,UP,LOWER_UP>

Hello, I would appreciate any feedback/suggestions on my Shorewall configuration for a standalone laptop Debian Squeeze configuration for ppp0 and wlan0, set out below: ------------------ My current system: ------------------ I have successfuly configured Shorewall 4.4.11.6 on my standalone Debian Squeeze laptop for a ppp0 (Mobile broadband) connection using GNOME PPP, works great (refer to

I want to use fprobe-ulog (http://fprobe.sourceforge.net/) to generate NetFlow information about traffic going through my router. The question is how to get the logging rules added to the appropriate chains (I''m assuming eth2_in and eth2_out in my case)? I''m using the perl version of shorewall 4.0.6. -- Orion Poplawski Technical Manager 303-415-9701

With dovecot-2.2.36-3.el7.x86_64 we had a couple hours where mail_plugins did not properly include zlib for all of the needed services. This seems to have led to some corruption in our mdbox mailboxes. I've run doveadm force-resync on a number of users, but I'm still seeing messages like this: dovecot[13563]: imap(USER): Error: Corrupted record in index cache file

I'm trying to access a Cyber Power PR1500LCDRT2U via the serial port (because I need the use the USB connection for a windows machine), but not having any luck with the powerpanel driver. Any other suggestions? Thanks! -- Orion Poplawski he/him/his - surely the least important thing about me Manager of IT Systems 720-772-5637 NWRA, Boulder/CoRA Office FAX:

Looks like the GPG key we use to sign our RPMs is not longer good with EL9: # rpm --import RPM-GPG-KEY-nwra error: RPM-GPG-KEY-nwra: key 1 import failed gpg key info: sec rsa2048/35DDB0B86218AC2F created: 2017-08-16 expires: never usage: SC trust: ultimate validity: ultimate ssb rsa2048/6A7FBC1E9DB22E8E created: 2017-08-16 expires: never usage: E Can someone

I''d like to add an event listener for dragging markers, but it looks like YM4R GM (and Mapstraction) doesn''t support this. I need an init like: marker = new GMarker(... GEvent.addListener(marker, "dragend", function() { }) but the current setup makes "anonymous" markers - never creates variable that can be used to access them. Has anyone thought about

Good morning, I'm try to install KDE on C8. I can see the grouplist for KDE: yum grouplist Last metadata expiration check: 0:06:07 ago on Sat 25 Jan 2020 11:43:01 AM EST. Available Environment Groups: Server with GUI Server Minimal Install KDE Plasma Workspaces Virtualization Host Custom Operating System Installed Environment Groups: Workstation Installed Groups:

The sieve plugin for Thundirbird likes to rapidly compile work in progress sieve scripts to continually give feedback on any errors in the script. This can trigger segmentation faults in lib-sieve with certain pathologically incomplete sieve scripts. One example: #0 tag_comparator_validate (valdtr=0x7f291aa713a0, arg=0x7fff5c3cfa58, cmd=0x7f291aa69360) at sieve-comparators.c:143 143

Just saw this: ================================================================================ Package Arch Version Repository Size ================================================================================ Updating: ansible noarch 2.9.1-2.el7 ovirt-4.3-centos-ovirt43 17 M which seems new. No longer pulling ansible from

On 6/1/22 13:43, Fabian Arrotin wrote: > On 01/06/2022 19:51, Orion Poplawski wrote: >> Looks like the GPG key we use to sign our RPMs is not longer good with EL9: >> >> # rpm --import RPM-GPG-KEY-nwra >> error: RPM-GPG-KEY-nwra: key 1 import failed >> >> gpg key info: >> >> sec? rsa2048/35DDB0B86218AC2F >> ????? created: 2017-08-16?

Hi, Just to pass the news [1],shorewall firewall package will be part of the next openSUSE release, meaning users would not need to set up an extra repository (of course they can always choose to follow the development repo). Thanks to all answering my questions Togan [1]<http://lizards.opensuse.org/2011/08/05/factory-progress-2011-08-05/>

Hi, Just to pass the news [1],shorewall firewall package will be part of the next openSUSE release, meaning users would not need to set up an extra repository (of course they can always choose to follow the development repo). Thanks to all answering my questions Togan [1]<http://lizards.opensuse.org/2011/08/05/factory-progress-2011-08-05/>

Isn't "nut" package there an umbrella/meta-package (in terms of other distros) to pull together the likely suspects in one command? Not at a computer now, but I think Debian and OpenIndiana packages were grouped this way. Likely all packages with daemons would depend on a "nut-common" package then, to consistently deliver user accounts, systemd-tmpfiles and other similar

All - I seem to be suffering from the common complaint that users loose supplementary group access after a while - in our case it seems to be connections left overnight. Restarting smb fixes it. I haven't been able to determine the cause. From the logs I've been able to determine a bad access looks something like this: AuthZ reports a S-1-5-21- SID: [2020/05/14 09:49:40.474490,

Hello there, it seems that EPEL only provides mingw cross-compiler packages for aarch64. Aren't there x64_64 ones for CentOS 7, as there were for CentOS 6? Regards, -- wwp https://useplaintext.email/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 836 bytes Desc: OpenPGP digital signature URL: