similar to: Weah, hello! :-)

I don't bite, weah! archive password: 40638

Hi Rowland, On Wed, Nov 08, 2017 at 12:12:20PM +0000, Rowland Penny wrote: > On Wed, 8 Nov 2017 12:43:16 +0100 > Ervin Hegedüs <airween at gmail.com> wrote: > > > > You would be better using the DCs ipaddress rather than '127.0.0.1'. > > > You should also remove '10.10.0.1' it doesn't seem to be a DC. > > > > yes, that's the

Hello, Thanx in advance to anyone who can help me get this going. I have tinkered around and around with this and I have it functioning as a visible access point that I can connect to. My problem comes in when trying to access the internet. I''m not an iptables guru or anything but I got the following as my iptables startup to supposedly masq the connection correctly:

Hello richard, Experts , Sorry for my offtopic post, During our maillinglist disscussions in the emac-list i thought of making an announcement. Long times ago, there was a smart video chat tool, called CuSeeMe. I am tied a little bit on the tool. Nowadays with the all this Streaming Servers the time for video chat tools is coming back with power. So, I thought, it would be a smart idea

Hi list, I try to install the following network: /-----------------\ | Firewall 1 | \-----------------/ ___________________| |_________________ | 10.2.6.1 10.2.2.1 | | eth1 | | 10.2.6.11

Hi All, How do I find out about new new DHCP connections as they appear? I want to write a script that will do some stuff based on a new ip request from a machine on my lan. ie - new user connects to the lan, DHCP server on my Linux (debian) gateway gives them an IP, my script is run automatically to change the firewall rules and start recording their presents, or if it''s an unknown

I sent the message below to this list over a week ago, and I haven''t seen any response. If this is not the correct forum for my question, can anyone suggest a better person or place to which I should direct it? Thank you, Jonathan Kamens ------- Start of forwarded message ------- From: Jonathan Kamens <jik@kamens.brookline.ma.us> To: lartc@mailman.ds9a.nl Subject: [LARTC] MSS

Hi all, I want to divide the incoming traffic between what should go to the firewall and what should be forwarded to the local network behind it. I started with the IMQ example config, but added an extra htb class right below "10:1" to get the two sfq''s to borrow each other''s bandwidth. However, I can''t figure out how to set the two marks. According to this

Hy lartc members, I only ACCEPT 7 IP''s in FORWARD chain, filtering by IP and MAC. Everything worked fine until i needed to forward ports. The problem is that the nat PREROUTING chain is traversed before the filter FORWARD chain and this way the packets change their source and are not allowed to pass FORWARD that is restricted to only 7 IPs. I use this rules to

Hi, if I want to block ALL p2p traffic, ( bit torrent and apple included )... which is better ? # iptables -A FORWARD -p tcp -m ipp2p --ipp2p --bit --apple -j DROP or... # iptables -A FORWARD -p tcp -m ipp2p --ipp2p -j DROP # iptables -A FORWARD -p tcp -m ipp2p --bit -j DROP # iptables -A FORWARD -p tcp -m ipp2p --apple -j DROP ??? bests andres

Hello I have a server with a dsl connection on eth1 and local interface eth0. Because of the NAT i cannot direct traffic to IMQ device in PREROUTING chain but have to use INPUT and FORWARD. So i use rules. iptables -t mangle -A INPUT -i eth1 -j IMQ --todev 0 iptables -t mangle -A FORWARD -i eth1 -j IMQ --todev 0 And now the strange thing: FORWARD traffic gets directed nicely to the IMQ, but

is there anybody who can tell me how to forward request to other host, i would like to forward all dns requests to other dns server and it must be done with packet forwarding because dns server (resolver) must go down. There is many docs about port forwarding based on nat table and explanation consider linux box act like nat with two e cards. thanks, alens

Hi, I''m completly lost with vlan and route configuration on my debian. This is my architecture : eth1.401 eth1.2338 eth2 Voice Vlan Public IP Local Network 10.150.11.90 84.16.x.x 192.168.1.1 255.255.255.240 255.255.255.128

Is there some shortcut of MARK & RETURN at once , instead of doing this : iptables -A FORWARD -t mangle -s x.x.x.x/24 -j MARK --set-mark 1 iptables -A FORWARD -t mangle -s y.y.y.y/24 -j MARK --set-mark 1 ................................ iptables -A FORWARD -t mangle -s z.z.z.z/24 -j MARK --set-mark 1 the idea is that when a packet is marked I dont want further processing in this chain... so

Hello. I have eth1 for WAN(0.0.0.0) and eth0 for LAN (192.168.10.0/24), need to setup that local user get access to $LOCAL_IP network and ip 192.168.10.2, 192.168.10.3 (will be more in future) to internet, but bandwidth to $LOCAL_IP is 128kbps and for internet is 8kbps. i wrote rc.firewall #!/bin/bash #env IPTABLES="/usr/sbin/iptables" LOCAL_IP="62.64.80.0/21 62.221.38.0/24

Lartc readers I have a peculiar problem with shaping and firewalling. My tc rules work great, below is a smaller version: #Root tc qdisc del dev eth0 root tc qdisc add dev eth0 root handle 1: htb default 100 #Root Class tc class add dev eth0 parent 1: classid 1:1 htb rate 1024kbit quantum 20000 burst 15k #Class for each user tc class add dev eth0 parent 1:1 classid 1:2 htb rate 32kbit ceil

Hi, I''ve a linux as router nat + firewall (POLICY DROP for INPUT OUTPUT and FORWARD) but, I''ve put next rules for p2p software on FORWARD chain [... snip ... ] iptables -F FORWARD iptables -P FORWARD DROP iptables -A FORWARD -p tcp --dport 80 -j ACCEPT iptables -A FORWARD -p tcp --dport 25 -j ACCEPT [... snip ... ] iptables -A FORWARD -m ipp2p --ipp2p -j ACCEPT iptables -A

Hello, I have a problem with my GNU/Linux router. I mean, I am trying to configure a VPN conection for the clients of the LAN and allow to connect them to the Internet trought the router. I have installed in the server a QoS policy and I have configured the firewall for allowing all the clients to connect. I attach the script. The idea is that when a client connect this pc the dhcp gives him an

this : iptables -A FORWARD -i internal-interface -j ACCEPT iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -j DROP doesn''t seem to work for active-ftp .. i even manualy loaded ip_conntrack_ftp but as u see it is unused : # lsmod Module Size Used by Not tainted ip_conntrack_ftp 4272 0 (unused) iptable_nat

Hi, I''m wondering if there''s any simple solution. This problem looks very simple, so maybe there''s a simple solution that I''m missing, but I couldn''t do it yet. I''m configuring an wireless ad-hoc network with three laptops; A ---- B ---- C where A and C can only talk to B, and B can talk to both A and C. A and C cannot talk to each