similar to: CentOS 6.X, iptables 1.47 and GeoLite2 Country Database

On Mon, Jan 14, 2019 at 07:29:45AM +0000, Phil Perry (pperry at elrepo.org) wrote: > On 14/01/2019 07:09, Jobst Schmalenbach wrote: > > Hi > I use ipdeny's aggregated country lists to do the same thing: > > http://www.ipdeny.com/ipblocks/data/aggregated/ > > I just feed this data directly into ipset/iptables via a script running on > my firewall (not a C6 box).

On 14/01/2019 07:09, Jobst Schmalenbach wrote: > Hi > > Specs in subject line: CentOS 6.X all latest patches), iptables 1.47, Apache2.2 > > I use the Geolite legacy databases together with iptables 1.47 to filter traffic for a variety of ports and only allow .AU traffic to have access. > I use ipdeny's aggregated country lists to do the same thing:

On Tue, Jan 15, 2019 at 07:43:02AM +0000, Phil Perry (pperry at elrepo.org) wrote: > On 15/01/2019 01:29, Jobst Schmalenbach wrote: > > On Mon, Jan 14, 2019 at 07:29:45AM +0000, Phil Perry (pperry at elrepo.org) wrote: > > > On 14/01/2019 07:09, Jobst Schmalenbach wrote: > Below is my script for creating/updating an ipset to block my top 10 > Hope that helps Thanks, it

On 15/01/2019 01:29, Jobst Schmalenbach wrote: > > On Mon, Jan 14, 2019 at 07:29:45AM +0000, Phil Perry (pperry at elrepo.org) wrote: >> On 14/01/2019 07:09, Jobst Schmalenbach wrote: >>> Hi >> I use ipdeny's aggregated country lists to do the same thing: >> >> http://www.ipdeny.com/ipblocks/data/aggregated/ >> >> I just feed this data

Thanks Benny. I should've said I saw AllowNets but in researching it looked like it expected a smaller comma separated list, not hundreds of IP blocks. Is that what you are using to accomplish this? Thanks, -Terry iPhone says Hello World! > On Sep 16, 2015, at 6:31 PM, Benny Pedersen <me at junc.eu> wrote: > > Terry Barnum skrev den 2015-09-17 02:32: > >> I've

Kevin Larsen <kevin.larsen at pioneerballoon.com> schrieb: > Based on SIP packets coming in from IP addresses you don't recognize, > while you may not be hacked, you would seem to have people probing your I think, too, it's someone probing my IP... > system. One thing you can do at the firewall level is restrict inbound sip > communications to only those from your

Hi Tobi, it should just work, but depends on the OS version. ./configure ?help tells you all the configure options, including: --with-maxminddb-includedir path to maxminddb include directory [default=auto] --with-maxminddb-libdir path to maxminddb library directory [default=auto] Neil > On 14 May 2019, at 17:44, Tobi via dovecot <dovecot at dovecot.org>

Hi Tobi, This looks like you haven?t included the libmaxmind libraries before running configure. GeoIP support is only compiled in if it finds the right libs. This would be libmaxminddb-dev on Ubuntu for example. Neil >> Hi list >> >> hope it's okay to ask weakforced questions here as well, but I could not >> find a dedicated mailinglist for wforce. >>

Hi. I am trying to find "something" (php prefered) that I can stick onto a Centos apache server that would allow me to browse a selected file system by employees through a web-browser "explorer like" interface. I know I can do this through WinSCP (and have done so), but my problem is I have Linux, Windows and MAC clients and my knowledge of MAC's is rather limited. I

Hi. I am getting loads of errors "no backend defined for idmap config MYDOMAIN" after I upgraded from 3.5 -> 3.6 a couple of days ago. I read http://wiki.samba.org/index.php/Samba_3.6_Features_added/changed and did what man smb.conf suggested: idmap config MYDOMAIN : backend = tdb idmap config MYDOMAIN : range = 500-1999999 yet I still receive those errors. I used

Hi Not sure whether this is the correct list to ask ... if it's not please direct me to the correct one. Is it possible on to log a bit more detail when auth failure occurs when using saslauthd? saslauthd[2119]: do_auth : auth failure: [user=DELETED] [service=smtp] [realm=DELETED] [mech=pam] [reason=PAM auth error] What I want is the IP address and if possible the incorrect password

Hi. Is there any way to limit access to dovecot by domains. I only need to give access to a well known set of domains, all from Australia and all networks are known and used either from people at home or mobile access (phones, laptops etc). iptables is not possible as e.g. OPTUS does not give away all of the networks mobile phones are connected to. I know some, but not all. It would be much

Whether I like it or not I need to get a version of PHP that is greater than 5.2.1 as the latest SugarCRM version require this and as I am a module developer I need to have one of the later versions of PHP on my machines. Does anyone know of a reliable and good archive for PHP that provides higher versions than the ones supplied by the upstream provider? Thanks Jobst -- 'Two things

On Thu, Oct 05, 2017 at 02:57:18PM +1300, Clint Dilks (clintd at scms.waikato.ac.nz) wrote: > On Thu, Oct 5, 2017 at 2:41 PM, Jobst Schmalenbach <jobst at barrett.com.au> > wrote: > [snip] > Hi, > > Are you sure that your issue isn't related to the mirror that your > systems are selecting ? If they are using different mirrors I would try > using the

Hi. I am stuck with this one and I do not know where and how to search for this problem nor do I know how to fix it. When I reboot one of our servers (CentOS 6.7, selinux target, yum fully updated) the http server loads fine (no erros) but when accessing one of the server's websites it displays "Forbidden", restarting the httpd server (command line) will give full access and all is

Hi. Apologies to the list for sending this twice as I forgot to enter a proper subject line, I wanted to write the content first and then make up the subject line ;-) -------------------------------------------------------------------- I am trying to configure sendmail that is looks up the users credentials to allow them to send email via that server via an imap server on the same machine

Hi. IMHO there is a bug in the latest updater for clamav: * it places a freshclam script into /etc/cron.daily that uses a hardcoded datadir not defined in /etc/clamd.conf its never done that before in the last 5 years or so, and I have a script running from cron.d * its overwrites the permissions of existing directories (lib and log) to another new clamav user, although one already exist

Hi I have two different IP addresses (in a block of /29), one is on port 0 and the other is on port 2 of a Ciso 888. I am doing this so I can have two different certs with two different ip addresses. I have tried: 1) one machine, two real interfaces, two cables (eth0 and eth2) 2) one machine, one real interface eth0 and one virtual interface eth0:1, one network cable Using number 2) I can

Hi. Are there any places I can download older versions of Samba working with CentOS 7? Reason: I have been upgrading all of my servers from 6.X to 7.X. This alone is a massive task for me as I am a one man band. Samba made massive changes not allowing NT style domains anymore in the 4.10 branch. If I can find older samba RPM's for CentOS 7 than I can finish all upgrades of the OS, then

On Thu, Feb 28, 2019 at 05:19:49PM +0100, Nicolas Kovacs (info at microlinux.fr) wrote: > Le 28/02/2019 ? 04:12, Jobst Schmalenbach a ?crit?: > > I want to lock in the SDA/SDB/SDC for my drives > > In short : use UUIDs or labels instead of hardcoding /dev/sdX. I **KNOW** how to use UUID's ... this is NOT the reason why I am doing this! I *NEED* the order of the disks to be