similar to: PostgreSQL port accessible even though it should be blocked by firewall

On 10/29/2018 08:43 PM, Keith Keller wrote: > On 2018-10-29, Frank Thommen <list.centos at drosera.ch> wrote: >> >> PostgreSQL is running in a docker container: >> >> $ docker ps >> CONTAINER ID IMAGE COMMAND >> CREATED STATUS PORTS NAMES >> 6f11fc41d2f0 postgres

On 10/29/2018 08:18 PM, Alexander Dalloz wrote: > Am 29.10.2018 um 20:03 schrieb Frank Thommen: >> PostgreSQL is running in a docker container: >> >> $ docker ps >> CONTAINER ID??????? IMAGE???????????????????????? COMMAND >> CREATED???????????? STATUS????????????? PORTS??????????????????? NAMES >> 6f11fc41d2f0??????? postgres?????????????????

On 2018-10-29, Frank Thommen <list.centos at drosera.ch> wrote: > > PostgreSQL is running in a docker container: > > $ docker ps > CONTAINER ID IMAGE COMMAND > CREATED STATUS PORTS NAMES > 6f11fc41d2f0 postgres "docker-entrypoint..." 4 > days ago

Am 29.10.2018 um 20:03 schrieb Frank Thommen: > PostgreSQL is running in a docker container: > > $ docker ps > CONTAINER ID??????? IMAGE???????????????????????? COMMAND > CREATED???????????? STATUS????????????? PORTS??????????????????? NAMES > 6f11fc41d2f0??????? postgres????????????????? "docker-entrypoint..."?? 4 > days ago????????? Up 4 days??????????

Hello, I have started playing around with docker (https://www.docker.io/) and am having trouble to integrate the "docker0" bridge it creates on the fly into my shorewall setup (version 4.5.16.1) on debian testing. IP forwarding is on and I have defined a "doc" ipv4 zone and the interfaces has an entry like so, > doc docker0

On 10/30/18 8:31 AM, Frank Thommen wrote: > I am still puzzled that it is possible to circumvent firewalld so > easily.? Basically it means, that firewalld is not to be trusted as > soon as containers with port forwarding are running on a system. It's hard to see this as a security or trust problem.? The root user can modify the firewall, which is provided by the kernel.

Hello, we are currently managing access permissions through classical user-group-others permissions on a multi-petabyte directory tree with partially very deep and broad directories. Projects are represented by directory trees and mapped through GIDs. Lately we had lots of "singular" permission request (one single user needs access to a single dataset but should not be able to

I recently updated to OpenOffice 3.2 and I noticed that it, and the latest Evolution, seem to be incredibly slow for some operations. E.g., in OO, about half the time when I'm editing something, it takes anywhere from 10-30 seconds for OO to respond to a click on one of the icons or menu items, and Evo is taking forever to format messages. During these times the gnome-system-monitor icon on

Hi, On Mon, May 15, 2017 at 03:04:03PM +0200, Frank Thommen wrote: > This problem still bites us. I've tried to play around with DHCP > settings (rd.net.timeout.dhcp, rd.net.dhcp.retry) to no avail. > > I'm happy about /any/ hint. 1) ip route seems ok, but what does your /etc/resolv.conf looks like? 2) could you try with 7.3.1611, 7.2.1511 is no longer supported. Tru >

Thank you. Basically our problem are not the ACLs or their support per se, but that we have to manage a huge number of individual ACLS (several hundred users in more than hundred projects) in multi-petabyte filesystem and still have to keep overview and control. Our problem is more the management side. Effectively we are looking for a tool that helps us manage these permissions and we

Hi all, I have installed Centos Atomic Host (latest, release: CentOS-Atomic-Host-7.1609-Installer.iso) in my KVM host laptop (RHEL 7.3 fully patched). But after install it a lot of problems appears. a/ Keyboard: I have selected spanish keyboard during install, but after first boot, keyboard is keymapped to us. Why? I have tried to change it via command line, without luck. Executing

On Mon, 15 May 2017 at 20:05 zulu, Frank Thommen wrote: > lustre driver https://downloads.hpdd.intel.com/public/lustre/latest-feature-release/el7.3.1611/

Hi folks. postgresql fresh install, roles, users, databases, all done. I can log in after I SSH to the box. I entered my user (myself) in pg_hba.conf: host all rich 192.168.1.4 255.255.255.255 md5 When I nmap the CentOS box, I can?t see that port open. I?ve turned off SELinux, so I?m not sure why I can?t see the open port 5432. What am I missing? It has to be something

Hi, I've been able to get tinc setup when I flush all my iptables, but after enabling iptables and a delay I get a "Destination Net Unknown". I have three host (HOME10.0.3.2, MASTER 10.0.3.1, WEB 10.0.3.3) MASTER and WEB are in Digital ocean in the same data centre. HOME <---> MASTER <---> WEB I've tried multiple forwarding/masquerading/etc rules and

> On 15/05/2020 07:10 Plutocrat <plutocrat at gmail.com> wrote: > > > On 15/05/2020 10.56, Gregory Sloop wrote: > > IMAP sync looks better and better. I'm a little puzzled why I don't just give up walking on the broken glass and use it - but it just bugs the heck out of me. > > If you can get the dovecot native sync to work, it seems to be a better option,

Dear all, I?m working as a data scientist in a major tech company. I have been using R for almost 20 years now and there?s one issue that?s been bugging me of late. I apologize in advance if this has been discussed before. R has traditionally been used for running short scripts or data analysis notebooks, but there?s recently been a growing interest in developing full applications in the

Hi, I am having problem in configuring iptables for PostgreSQL server. I added following rule to iptables to allow connections to default PostgreSQL port (5432): {{{ sudo /sbin/iptables -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -s 10.0.0.0/24 --dport 5432 -j ACCEPT }}} After this I can't connect using telnet or psql (postgres client). Following error is received from telnet

Hi All, Does anyone have experience successfully installing and loading the R package ?ggbreak? in a Docker container? I ask because I have successfully used the ?ggbreak? package in a script outside the Docker container (on my local computer), but for some reason, I get the following error message when trying to load it using library(ggbreak) or library(?ggbreak?) inside the same script that

Can you post your Tinc configuration too? El lun., 30 ene. 2017 a las 11:42, Dave Albert (<dave.albert at gmail.com>) escribió: > Here is an extract of my current iptables that are not working: > > iptables -L -n -v > > Chain INPUT (policy DROP 8 packets, 1120 bytes) > pkts bytes target prot opt in out source > destination > 0 0

Hi, I've decided to use these summer holidays to wrap my head around Docker and its quirks. Spent the last couple weeks working through a Udemy tutorial and a thick book about Docker, and I have Docker CE installed on two machines: * my workstation running OpenSUSE Leap 15.1 * a public sandbox server running CentOS 7 I'm currently fiddling with custom networks and container