similar to: Router stops forwarding packets when MAC Address changes

Hi All - I looked for mention of this in the archives but wasn''t able to find anything. This isn''t even an advanced routing question, it should be a dirt-simple, basic, no-brainer, routine routing job. But I''m not getting it! I have a Linux iptables based firewall system that is making me crazy. The gist of the problem is, even when I turn off all firewall rules

I see it is posting to the archive website but not emailing them out. Is anyone else getting emails or is it just me? Thanks - Greg Scott _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

YES!!!!!!!!!!!!!!! HOT DOGGIES!!!!!!!!!!!!!!!!!!!!! I think I fixed it. The problem - Squid worked at my test site - it did not popup a login window, but instead used Ssamba's ntlm helper program to get credentials from IE. But at my customer site it did (improperly) popup a login window. The squid.conf files were almost identical - even to the point where my working test site incorrectly

I am trying to get windind to work so my domain users can touch shares on this Linux box without being prompted for credentials. I put these in nsswitch.conf: passwd: files winbind group: files winbind Then I did this: cp /usr/src/samba-3.0.13/source/nsswitch/libnss_winbind.so /lib ln --symbolic /lib/libnss_windbind.so /lib/libnss_winbind.so.2 Make libnss_windbind

Dear All Why NAT rules stays valid even if I flush nat anf table chains?? I have: iptables -P FORWARD DROP iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -s SOME_IP -d SOME_BCP_5_IP --dport 1234 -j ACCEPT iptables -i nat -A PREROUTING -s SOME_IP -d MY_INTERNET_IP \\ --dport 1234 -j DNAT --to-destination SOME_BCP_5_IP The conection is

hi i have a problem with my icmp, i have a router that performs nat. i cannot ping to internet hosts from more than one stations situated behind NAT at once. if i want to ping from another station i have to stop the ping that was initiated from the first host, and after a few seconds i can ping from another station.i've checked firewll and i have no ipfw rules that could stop icmp traffic.

Hello - I have a problem where I need to authenticate a RedHat 9.0 system with a Win 2003 domain. After days ot labor and tinkering, I keep getting this error when trying to join my Linux box to the Win2003 Active Directory domain: [root@infra-fw etc]# net ads join -S 10.10.10.100 -U administrator administrator's password: [2005/04/01 21:24:41, 0] libads/kerberos.c:ads_kinit_password(146)

Thanks to everyone for all the help getting this done. As promised, here are the detailed notes I put together. These step by step instructions should work starting with a raw RedHat Linux 9.0 system. - Greg Scott GregScott@InfraSupportEtc.com These are step by step instructions for how to install and configure the Squid proxy server with transparent authentication for users in a

Here is a puzzle. I have a network with several servers. It''s a mess. It''s a /24 and pieces and servers are all over the place inside this /24 block, on both sides of the firewall. For example, the router at 1.2.3.1 is outside the firewall and many of the servers at 1.2.3.nnn/24 are behind the firewall. (Obviously, 1.2.3.nnn is a fudged network.) eth0 points outward to

This turned into the mother of all system integration exercises and I **almost** have it working. I am trying to set up proxy authorization using: RedHat Linux 9.0, MIT Kerberos 1.4 built from source, Samba 3.0.13 built from source, Squid 2.5.STABLE7 built from source SmartFilter 4.01. Active Directory with Windows 2003 Why not use RPMs? Well - ADS support for Windows 2003 needs

Hi, Searching my samba logs for errors, I noticed the following logged occasionally on (all three) DCs: > ../../librpc/rpc/dcerpc_util.c:373: ERROR: pad length mismatch. Calculated 44 got 0 Searching the samba archives, they seem to be related to DNS. So I checked our config. We're on buster, with: > root at dc2:~# dpkg -l | grep bind9 > ii bind9

Hello Routing Gurus ;-) I''d like to know if it''s possible to make a routing decision for pakets originating from a specific port of the local machine without using ipfilter/iptables to mark the pakets. I read about the tc filter stuff but that seems only to be able to sort the pakets to a different queue on the same interface and not choose a different interface for example. Is

Hi Eric, On Wed, Aug 17, 2016 at 05:56:51PM -0600, Eric Eastman via samba wrote: > I was testing Samba 4.5rc2 with an existing smb.conf file that I have been > using since Samba 4.1.x and found that I cannot access data in the share on > Windows 2012 (my AD server), a Windows 2008 client or on a Ubuntu 16.04 > client. I built a new version of Samba 4.4.5 using the same procedure as I

On Thu, 2007-04-12 at 15:19 -0700, Jeff Cohen wrote: > Adamant isn't a Tolkien creation. It often refers to diamonds, but > historically can mean any hard, "unbreakable" stone, metal or other > substance. It's in the dictionary :) I'm having enough trouble this end just keeping up with the submissions, never mind tracking down the etymology of all submissions. If

Hi, I am trying to get information on out-of-sequence packets being dropped on my load balanced multilink router. Can anyone give me any information on how best to log/track such packets? The router is based on Leaf Bering uClib 2.4 (kernel 2.4.26) The load balancing is being done using teql over a number of gre tunnels, each on a separate ethernet ADSL to a central box where the gre

When using redhat8 as routers to forward short udp packets(40 bytes length),I found 40 % of all packets has been dropped by the router. Iperf is used to generate the UDP traffic. Any information about this? Thanks a lot! H _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

On 2016-08-18 at 12:21 +0300, Uri Simchoni via samba wrote: > On 08/18/2016 08:28 AM, Ralph Böhme wrote: > > Hi Eric, > > > > On Wed, Aug 17, 2016 at 05:56:51PM -0600, Eric Eastman via samba wrote: > >> I was testing Samba 4.5rc2 with an existing smb.conf file that I have been > >> using since Samba 4.1.x and found that I cannot access data in the share on

On Thu, Aug 18, 2016 at 12:21:37PM +0300, Uri Simchoni wrote: > On 08/18/2016 08:28 AM, Ralph Böhme wrote: > > Hi Eric, > > > > On Wed, Aug 17, 2016 at 05:56:51PM -0600, Eric Eastman via samba wrote: > >> I was testing Samba 4.5rc2 with an existing smb.conf file that I have been > >> using since Samba 4.1.x and found that I cannot access data in the share on

Hi there, I have a little problem. I had this some months ago but didn''t solve it back then. I have patched my kernel with Layer 7 support and patched my iptables to support it, too. Now I inserted this line in my firewall script on my router for testing purpose: $IPTABLES -t mangle -A POSTROUTING -o $INET_IFACE -p tcp -m layer7 --l7proto http -j DROP It works, BUT only if the

Hi, after migrating to shorewall firewall from my own iptables rule set (to utilise freeswan vpn tunnels) I have successfully configured a 3 interface firewall with net2net vpn tunnels, with the help of the shorewall documentation. However I cannot seem to configure my final step which is to masq another subnet attached to my LAN (LANB, via Cisco 1603 router) to get internet access via the