similar to: CentOS based router dropping connections

Hello, I am looking for some advice on a way to update some packages to newer releases than are available in the standard CentOS repositories. Specifically, I am trying to update apache and PHP to conform to "Scanalert"'s "Hacker Safe" website security scan, and the required versions do not exist in the CentOS repositories. I'm using CentOS 5. I wish to stay

Hi Folks, This is my first post here, and unfortunately it's to ask for help in figuring out a kernel panic I am running into. The machine in question has run fine without problem for quite some time, running as a database/web server. It has an identical (hardware) twin that performs essentially the same functions, but which has not had any kernel panics. The only recent change I've

Thankyou the information provided was informative to say the most. Quote "Shorewall Masqurading made simple ?" I will not comment any futher about my simple question as I see nothing but backtracking information. Maybe all the usless information is somthing to do with the below, Linux how it works! First you must remember that 98% of linux programmers are kids or they have been

Hi, my ip_conntrack table is filling up and now my server is dropping packets. I'm running CentOS release 4.4 (Final) on a fairly busy webserver. The table is full of various connections, including a lot of "ESTABLISHED" tcp connections from my webserver (the src is my webserver ip), and some other random connections to my webserver, and many "ASSURED" connections. So why

Hi, I've been searching the web for days for an answer to this weird problem. I hope you guys can shed some light on this. A few months ago our office has changed internet provider, and hence we use a different router/DSL-modem: a ZyXEL P-2602H-D1A Ever since the change our nightly rsync from our office server to our external webserver, which runs an rsync daemon, refuses to work... at

Hi, I have a install of shorewall I have 2 interfaces(I think) ppp0[connection device] and eth0 [LAN device], I want to allow all traffic from the the internet in or aleast port 80 and CVS and webmin and mail and everything normal to the main machine with shorewall on it. I changed to policy file but it just gave me errors as to double interfaces. I also what still to alow connection sharing

Hello list. I''m trying to set up traffic shaping on a (web) server which is also a router(NAT) for my LAN. It is connected to the LAN via Ethernet and also has PPP Internet connection on another interface. I need traffic shaping to make sure that the upstream is fully available to the web-server when it''s active so when a LAN client is bulk downloading the web-server clients

Hi All ! Using Samba Version 4.1.12, updated from source from 4.0beta1 I've created a user, let say kerbuser, for a web server to authenticate with kerberos and provide SSO to the end-users. In my example, my domain is MYDOMAIN.LOCAL, the apache server is webserver.mydomain.local and the AD user is kerbuser I've added a principal on the user and exported everything in a keytab so

I''m not a subscribed user, so please cc me on any replies (fier0@bigfoot.com). I know this has been asked a few times, but i have not been able to find a direct answer. I was using shorewall with 2 nics, and it worked fine, except if that linux box went down then nobody could get out to the internet (and the wife would kick my ass). I''ve now started to use my linksys

I asked on IRC but no one responded. Suppose the following: class basenode { include users include security class webserver { include apache, php } } node web1a { include basenode::webserver } Does node web1a imply including users and security specified under class basenode as well? Similarly, does this mean the same thing? class basenode { include users include security }

I am running ferret (0.11.4) and acts_as_ferret (stable from svn) in a rails 1.2.3 app in production using the DRb server. I recently upgraded my configuration and the method with which I start and stop the server no longer works: Here is the command I would like to use (and have used in the past) to start the aaf server: $ /Library/WebServer/rails/ccdb/current/script/runner -e production

Hello, I am trying to work out the best way to issue SSH certificates in such way that they only allow access to specific usernames *and* only to specific groups of host. As a concrete example: I want Alice to be able to login as "alice" and "www" to machines in group "webserver" (only). Also, I want Bob to be able to login as "bob" and

I''m trying to set up a system in which the web devs can deploy new websites via puppet kick. I''m not having a problem with puppet kick itself, but rather figuring out how to make my "webserver::sitelist" class *only* get deployed via puppet kick, and not have it regularly evaluated in the nodes.pp file. I don''t want webserver::sitelist to ever get

I just upgraded to 0.22.0 from 0.18.4 and I''m running into what I think are problems due to changes in scope rules. In my site.pp manifest, I have the following: import "classes/*" node nfsserver { include nfsserver } node webserver { include webserver } class cluster1_sites { website { "example.com": ...; "example2.com": ...; } } node

Hi, What is the best way for you to simulate a provider behavior in modules ? For exemple if you have an webserver module and want to have a apache2, lighthttpd prividers. How would you do so the call to the modules functions stay like: webserver::addvhost { ... } and not webserver::apache2::addvhost Any best practices you can share ? I know that conditional include would not work

First off, I want to say that everyone on this list is great. So heres what I want to do..I have a maclist setup with all my users (roughly 400). There are constantly people leaving (deleting their accounts which removes their MAC address) and registering for internet access ( I have a php webserver that registers them, adds them to the maclist, and allows them on the net). Is there a way to

Hello All I just recently was told our small company needed a webserver. Well.. I need help. No I am not a newbie to computers just to Linux and samba. For the webserver I went with Mandrake 10 for ease of installing all web packages. By default it installs apache with mysql ssl and the whole bit. Now I have worked with Linux before but still really new to it. But I managed to install the samba

I just got a refurb Sipura SPA-2000 and was able to assign it an IP address with DHCP and ping the device, but then I ran the firmware upgrade utility to bring it up to spa2k-2.0.13g which seemed to work just fine, but after it rebooted I cannot connect to its webserver for configuration. I can still ping the unit. When I use the built in voice menu it reads back the right IP address, webserver

Hi, I am trying to allow certain nodes to override variables in inherited classes. Here''s an example: node ''my.server.com'' inherits webserver {} node ''other.server.com'' inherits webserver { $var = "newvalue" } node webserver { $var = "value" include snmp, dns, classx } In this example classx ends up using

Distro: debian unstable Xen version: 4.0.0-2 This is the config: #HVM #still no qemu-dm in debian #kernel = "/usr/lib/xen-4.0/boot/hvmloader" #builder = ''hvm'' #memory = 2048 #name = "webserver" #vif = [''bridge=eth0''] #disk = [''tap:tapdisk:aio:/srv/xen/webserver.img,xvda,w'',''phy:/dev/cdrom,xvdb:cdrom,r'']