similar to: AW: Activate ingress policies on suse ent erpr ise serv e r 9

Hi, The problem is this is my goal to use the policier and not the iptables. Because with the policier i think you can give more rules and restrictions to the incoming tcpip traffic. So I would prefer to use the policier and not the iptables. Thanks Gernot > GRAMES Gernot > __________________________________ > SIEMENS AG Austria > PSE SMC AI 21 > * Tel.: +43 (0) 5 1707

Hi, So far, if have understand correctly: I route the incoming tcpip message of port 8099 directly to 8080 and then the ingress filter on port 8099 has nothing to do!? Yes I think on different interface on one machine (different Ports for different Request, with different restriction). What has exactly to be done to set the policier before Prerouting! Which kernel options, or also extra

Good Morning, Thanks for your hint, now I can see the dropped packages! But it is only working for port 8080 why not for port 8099?? (If you need some indices please let me know) Thanks Gernot > GRAMES Gernot > __________________________________ > SIEMENS AG Austria > PSE SMC AI 21 > * Tel.: +43 (0) 5 1707 24356 > * FAX: +43 (0) 5 1707 54600 > * E-Mail:

Hi, My problem is following now: I would like to set the filters for port 8099. I have tried it, but nothing happened. When I try the same filter for the port 8080 it is working very well. .) working filter (here I can see the dropped packages): tc filter add dev eth0 parent ffff: protocol ip u32 match ip dport 8080 0xffff police rate 1kbit burst 1 drop flowid :1 .) not working filter (here I

Hi, Thanks for the fast response, .)Okay I tried your suggestion for my port 8099 and nothing happened: The tcp ip information goes from a firewall to my port 8099 and this port is than routed to the original 8080, I do that because I don`t want to dirturb my port 8080. But it seams the ingress filter doesn`t work on it!! iptables -L -t nat Chain PREROUTING (policy ACCEPT) target prot opt

Hi, what is needed to activate ingress policies for enterprise server 9! My current loaded modules: in the attachments my kernel: Linux linux 2.6.5-7.97-smp #1 SMP Fri Jul 2 14:21:59 UTC 2004 i686 i686 i386 GNU/Linux So you can see the module sch_ingress is loaded and also the package iprout2 is installed. I have set also a filter for ingress policies but i don`t think it is working,

Hi, I have set a ingress filter to reduce the inbound traffic on one specific port and also i check the packages (buffer). No i want to test the ingress filter if it is working how i a expect. Which tool (can be windows also) can i use to test the ingress filter (tcpip load generator or something else), and set the packet length size and so on! Thanks, Gernot

Hi all, I have run into a problem with our samba4 setup. I have successfully joined a Cisco ISE v1.1.4 (Identity Service Engine) test machine to the samba4 AD. User authentication does work but unfortunately the ISE is unable to fetch the AD groups from the domain controller. In the samba logs I get the following error message when initiating the group fetch: [2013/10/02 10:21:37.605554, 0]

Greetings, I've been experimenting with various versions of ISE from 5.2, 6.2, 6.3 and have been unable to get any working to a usable state. Version 5.2 won't allow me the option of adding any sort of schematic, state machine or HDL (only text and edif constraints files) to a project. Versions 6.2 and 6.3 seem to allow me to add any type of file (schematic, sm, vhdl, verilog, etc).

On Tue, 2015-01-20 at 13:33 +1300, Andrew Bartlett wrote: > On Mon, 2015-01-19 at 10:59 +0330, Maryam Lahijani wrote: > > Dear All > > > > We have samba4 in our network as an domain controller.we have cisco ISE1.3 > > and our cisco team want to run IEEE802.1x in our network.The problem is > > that ise use ms-rpc for sending MS-CHAP V2 to samba and it revived RPC

I received the following comment from the Independent Submissions Editor (ISE): The command VER is hazardous because it encourages exploiting of implementation peculiarities that are not well documented in a protocol.? The best example of such a failure is the browser version field in HTTP.? A complete disaster.? You should warn against use of this command, or even better, deprecate it.

On 20.03.22 16:02, Roger Price wrote: >I received the following comment from the Independent Submissions Editor (ISE): > > The command VER is hazardous because it encourages exploiting of > implementation peculiarities that are not well documented in a > protocol.? The best example of such a failure is the browser version > field in HTTP.? A complete disaster.? You should warn

Hello, at our company we are using Samba 4.3.2 in conjunction with Windows 7. We use the Windows 7 machines for our nightly compiles. However, occasionally the schedules compiles stop with a Windows network error message, such as: . . . [ 16%] Generating ui/moc_versiondialog.cxx [ 16%] NMAKE : fatal error U1077: 'R:\usr\20091022\121890\release\win\bin\cmake.exe' : return code

Hi, does somebody else experience booting problems after normal installation on SD32G2 based Shuttle systems. A CentOS 5.0 installation can be performed without any problems but after the first reboot the systems are just stopping the boot process after the grub is searching for the kernel. The last line is some- thing like: [ Linux-initrd @ 0x37db8000, 0x237858 bytes]. We tried already the

Hi all, has somebody already tried to compile the rpm of the newest samba package on a 64-bit CentOS. I tried to do it with the Fedora spec file and it quit with an error, that some files are not located in the lib64 directory. These required files are located in the lib directory. Any sugesstion how this problem could be fixed in a clean way? How is this problem solved during the CentOS

On Dec 7, 2015, at 4:21 PM, Gernot Zander <debian at scorpio.in-berlin.de> wrote: > > Hi, > > am 7 Dez schrieb Marks, Connor: >> Well I just need to monitor the UPS battery for testing and I do about >> 10 UPS's a day. So having to restart my computer every time gets old >> real quick. > > In that case - what about not starting nut-client (upsmon)

First of all, thank you to all of you who have helped to make iptables possible, whether in writing the code for it or testing it. It is BETTER than sliced bread! :-) Anyways, I have two questions related to the use of iptables. 1. I read on a post somewhere that it is smart to put the following two rules at the end of one''s iptables ruleset: iptables -A INPUT -p tcp -i eth0 -j

Hi there, I have a problem with the rpc driver stuff: I have copied the driver files to //atlas/print$/W32X86 and WIN40 (via filesystem copy), added and set the driver without errors. But getdriver reports no driver associatet with the printer?! So reports below. I am sure, this was working on this system. I tried to reinit the ntprinters.tdb, printing.tdb, nt_forms.tdb and ntdrivers.tdb by

Can anyone tell me whether I have a routing problem, or an openVPN problem, or something else? I''ve stared at this for so long I think I must be looking in the wrong place! I have 3 machines: Machine A has single ethernet card, eth0, 192.168.5.5 Machine B has eth0, 192.168.5.? on the local net, eth1, 81.2.x.y to the internet, and

Hello Sir, I want some help from you. I have my configuration like this. I have three machines. PC1,PC2,PC3. hub hub PC1--------------------PC2-----------------------PC3 eth0 eth0,eth1 eth0 I want to work my configuration like diffserv. I am generating traffic from PC3 and sending it to PC1 via PC2(as a router)and from