similar to: Block internet access for some users on the LAN ?

On Wed, November 12, 2014 15:50, g wrote: > > > On 11/12/2014 10:13 AM, Les Mikesell wrote: > >> >> Well, no. Per the headers: >> >> Authentication-Results: mx.google.com; spf=neutral (google.com: >> centos-bounces at centos.org does not designate permitted sender hosts) >> smtp.mail=centos-bounces at centos.org; dkim=neutral (body hash did not

On Fri, May 8, 2015 07:59, Timothy Murphy wrote: > Sorin Srbu wrote: >> Yeah, well, but it's free. >> I'm not sure you can complain too much in that case. 8-) > > I find this comment, often made, completely unacceptable. > The implication is that inferior code is OK > if the developer is not being paid. > > (Actually, the premise is probably nonsense, >

The way to do this is with ACL's. Access Control Lists IPtables can perform this function, or an internet gateway router can also be used. The ISR 4000 Series Cisco router family is where I would start, especially if you're in the need for a blade server in the same chassis. -----Original Message----- From: CentOS [mailto:centos-bounces at centos.org] On Behalf Of Nicolas Kovacs Sent:

On 9/18/2017 10:03 AM, Nicolas Kovacs wrote: > This year the school's director wants to completely block Internet > access for all the student's personal devices. MAC addresses can easily be forged, IP addresses can easily be changed, none of that is secure if its on the same network segment The student's personal devices should be on a completely different 'guest'

On 09/18/2017 12:23 PM, John R Pierce wrote: > On 9/18/2017 10:03 AM, Nicolas Kovacs wrote: >> This year the school's director wants to completely block Internet >> access for all the student's personal devices. > > MAC addresses can easily be forged, IP addresses can easily be changed, > none of that is secure if its on the same network segment > > The

Chase, Brian E. wrote: > The way to do this is with ACL's. Access Control Lists > IPtables can perform this function, or an internet gateway router can also > be used. > The ISR 4000 Series Cisco router family is where I would start, especially > if you're in the need for a blade server in the same chassis. > > -----Original Message----- > From: CentOS

I am trying to replicate a samba-4.3 DC [192.168.8.65] to a newly joined samba-4.10 DC. I am using rsync as described in the samba wiki, excepting that I am using a remote shell (ssh) with the root user and password-less logins. When I run the command below from the 4.10 DC I get acl errors as shown below. rsync -XAavz --delete-after --rsh='ssh' [192.168.8.65]:/var/db/samba4/sysvol

Hit reply instead of reply all. This is for the list. -------------------------- Original Message -------------------------- Subject: Re: [CentOS] Can one construct an IPTables rule to block on NS records? From: "James B. Byrne" <byrnejb at harte-lyne.ca> Date: Wed, October 7, 2015 08:52 To: "John R Pierce" <pierce at hogranch.com>

I changed the entries in smb4.conf (smb.conf) to this: [global] . . . dns update command = /usr/local/sbin/samba_dnsupdate nsupdate command = /usr/local/bin/samba-nsupdate -d -g And this is what results when I run: samba_dnsupdate --verbose -d8 --all-names . . . update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.brockley.harte-lyne.ca

This is all the diagnostic information I can think of at the moment: [root at smb4-1 ~ (master)]# klist Credentials cache: FILE:/tmp/krb5cc_0 Principal: administrator at BROCKLEY.HARTE-LYNE.CA Issued Expires Principal Jul 2 10:35:11 2020 Jul 2 20:35:11 2020 krbtgt/BROCKLEY.HARTE-LYNE.CA at BROCKLEY.HARTE-LYNE.CA [root at smb4-1 ~ (master)]# grep nsup

> Could be because you added the wrong line to your smb4.conf (why does > freebsd call it smb4.conf ?), Why does freebsd put these things in /usr/local/etc/? Some questions have answers that are not worth the effort to know. > try: > nsupdate command = /usr/local/sbin/nsupdate -g I did catch that error earlier. But it makes no difference. samba_dnsupdate does not give any

Thank you for your patience. On Tue, June 30, 2020 16:48, Rowland penny wrote: > > From 'man smb.conf': > > nsupdate command (G) > > This option sets the path to the nsupdate command which is used for > GSS-TSIG dynamic DNS updates. > > Default: nsupdate command = /usr/bin/nsupdate -g > > dns update command (G) > > This

I am testing DC administration using samba-4.10.15 on FreeBSD-12.1p6 and have run across this: [root at smb4-2 ~ (master)]# samba-tool domain join BROCKLEY.HARTE-LYNE.CA DC -U"BROCKLEY\administrator" INFO 2020-06-25 14:26:10,692 pid:47306 /usr/local/lib/python3.7/site-packages/samba/join.py #104: Finding a writeable DC for domain 'BROCKLEY.HARTE-LYNE.CA' INFO 2020-06-25

I have introduced some error in my dns resolution and I would like some help fixing it as I cannot seem to detect what I have done wrong. Briefly the setup is this: name servers: DNS01 - 216.185.71.33 DNS02 - 209.47.176.33 DNS03 - 216.185.71.34 DNS04 - 209.47.176.34 - offline DNS01 is a master DNS02-04 are slaves of 216.185.71.33 All are listed as authoritative for the zone test.com The

CentOS-5.4 i86_64 I have a calculator applet on my desktop (superbcalc.jar). When I double click on it I get no response. If I right click and select open with java I get no response. If I open a terminal window and cd to Desktop and type java -jar superbcalc.jar then the applet opens. Does anyone have any idea why I am seeing this behaviour? There are no messages in the syslog file relating

i86_64 CentOS-6.5 Samba-4.1.4-7 (sernet) MS-Win2000 Advanced Server AD DC I am following the HowTo provided at https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC. I am at this point: ---> In this case, 737506d0-bfe6-40c8-815d-08c3dff7a67f is the objectGUID of the new DC, we'll query with the following command: # host -t CNAME

[root at smb4-1 ~ (master)]# samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca ALL -U administrator Password for [BROCKLEY\administrator]: Name=, Records=4, Children=0 SOA: serial=3, refresh=900, retry=600, expire=86400, minttl=3600, ns=SMB4-1.brockley.harte-lyne.ca., email=hostmaster.brockley.harte-lyne.ca. (flags=600000f0, serial=110, ttl=3600) NS:

Previously, when I did this: >> samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca >> ALL -U administrator Then I saw this: >> Password for [BROCKLEY\administrator]: Now I see this: >> samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca >> ALL -U administrator >> Cannot do GSSAPI to an IP address >>

On Tue, June 2, 2020 11:13, Rowland penny wrote: > On 02/06/2020 16:03, James B. Byrne via samba wrote: >> Samba-4.11.8 on FreeBSd-12.1p5 >> >> How does one list all of the actual DNS records for Samba administered zones, >> forward and reverse? >> > Try: > > samba-tool dns query localhost brockley.harte-lyne.ca > brockley.harte-lyne.ca ALL -U

I have this on the DC smb4-1.brockley.harte-lyne.ca: samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca ALL -U administrator Password for [BROCKLEY\administrator]: Name=, Records=6, Children=0 SOA: serial=7, refresh=900, retry=600, expire=86400, minttl=3600, ns=SMB4-1.brockley.harte-lyne.ca., email=support.harte-lyne.ca. (flags=600000f0, serial=110, ttl=3600)