similar to: DNAT Issue

Perhaps someone can help me understand why this is happening. I''m trying to write a script using ''shorewall iprange'' to parse some ip ranges into subnets so that i can place them into the blocklist. I keep getting an error when i run the script though. Here is the script: #!/bin/csh foreach i (`cat ipranges`) shorewall iprange $i >>

Hi, I'm trying a VPN via ssh between Linux (Suse 10.3, 5.0) and OpenBSD (4.2, 4.7). But it doesn't work... On Linux: sudo ssh -v -f -w 0:1 $OPENBSD true sudo /sbin/ifconfig tun0 10.1.1.1 10.1.1.2 sudo /sbin/route add -net 192.168.17.0 netmask 255.255.255.0 dev tun0 On OBSD: sudo ifconfig tun1 10.1.1.2 10.1.1.1 netmask 255.255.255.0 sudo /sbin/route add 10.0.3.0/24 10.1.1.1 And add a

Help, I'm using: Operating System: SUSE Linux Enterprise Server 10 (i586) VERSION = 10 PATCHLEVEL = 1 Upgraded Samba to: Samba version 3.0.26a-SerNet-SuSE On a windows machine the user can see the directories and files. They can access the files in say excel but when they go to save the changes it gives them a message of Disk Full. New Files they can save, no problem. If they pull

Am 02.03.2015 um 18:56 schrieb Robert Schetterer: > perhaps and i mean really "perhaps" go this way > > https://sys4.de/de/blog/2014/03/27/fighting-smtp-auth-brute-force-attacks/ > > https://sys4.de/de/blog/2012/12/28/botnets-mit-rsyslog-und-iptables-recent-modul-abwehren/ > > 45K+ IPs will work in a recent table > i have them too but for smtp only like > >

Hello. I am trying to get multi paths running, i.e I want to specify 2 paths from a particular node to another. To test this, I am setting up the following scenario: I create 2 tap devices tap0 = 10.1.1.1/32 netmask 255.255.255.0 tap1 = 10.2.2.2/32 netmask 255.255.255.0 I then issue the route command: ip route add 10.3.3.3/32 nexthop via 10.1.1.2 nexthop via 10.2.2.3 The route table

I have * box on machine with external ip address and internal one I'm tring to register to it from to machines - one from innternet ( everything is ok - in sip.conf nat=yes)\ and the other one is in the internal network (in sip.conf - nat=no ) and it say 403 Forbidden? Any Ideas ? here are the logs and configs From the external SIP Client whic registers.

Recently I wrote about this problem, but it still exist and I can't dial my Xlite SIP Phone So here is the Notice Jul 5 17:14:07 NOTICE[65541]: chan_sip.c:6731 handle_request: Registration from 'Damian Minkov <sip:damian@10.1.1.2>' failed for '10.1.1.11' The * box(10.1.1.2) and the PC(10.1.1.11) on which is the XLite are in the same network Here is part from sip

As per my problem yesterday with the Cisco 7960 and getting it talking to Asterisk on a different subnet, I gave up trying and just put the Asterisk box back on the internal subnet. However, I made two changes: - the external IP address is set on an ethernet alias eth0:0 - the main Linux router will change outgoing requests from 10.1.1.2 to the external IP (rather than the default behaviour of

Dear list, I am having a problem with openvpn. I have the following arrangement, running two instances of openvpn on "home fw". I want to protect my WLAN in back of the home fw and that works fine. I can see "Peer connection initiated with 192.168.1.3:5000" in daemon.log on homefw. Nothing gets initiated with officefw, nor can I ping the other end of the tunnel at officefw.

I'm working from modified 5.0p1 codebase. What I'm looking for is a mechanism to limit the number of simultaneous connections on a per-user/IP basis. That is, disallow multiple simultaneous logins/authentication of the same user from different IP addresses. e.g.: fred from 10.1.1.1 - accept fred from 10.1.1.2 -- reject while fred is still connected from 10.1.1.1 fred from 10.1.1.1 - OK

Hello, 1) fs acl support I use XFS I did the tests ( https://wiki.samba.org/index.php/File_System_Support ) and no errors [root at dc1ucp ~]# setfattr -n user.test -v test test.txt [root at dc1ucp ~]# setfattr -n security.test -v test2 test.txt [root at dc1ucp ~]# getfattr -d test.txt # file: test.txt user.test="test" [root at dc1ucp ~]# getfattr -n security.test -d test.txt # file:

http://bugzilla.netfilter.org/show_bug.cgi?id=727 Summary: Open your firewall by a simple typo Product: iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: major Priority: P2 Component: iptables AssignedTo: netfilter-buglog at lists.netfilter.org ReportedBy:

a nice example about dns islanding. http://retrohack.com/a-word-or-two-about-dns-islanding/ and with only 2 dc's setup the resolv.confs like : DC01 Primary DNS 10.1.1.2 Secondary DNS 127.0.0.1 DC02 Primary DNS 10.1.1.1 Secondary DNS 127.0.0.1 http://technet.microsoft.com/en-us/library/ff807362%28v=ws.10%29.aspx says: If the loopback IP address is the first entry in the list of

I'm trying to call from XLite phone to PSTN (I've tried this from internet and from local network the same) The Xlite doesn't write that it is connected but receives excelent audio. At the other end comes only noise. Some times only for a second you can here the caller voice , but this was only one time :) I saw with ethereal that UDP packets are coming and going to the asterisk

hi all I've been reading this thread with interest. As a rather novice programmer. I'm not being humble here, I really am not very good, I can do stuff, but it takes a LONG time. My spaghetti code even has meatballs in it ! Not being a great programmer I'm not really able to code something up, but it occurred to me something could be scripted, are the other posters suggesting

We are running dovecot 1.1.8 and are currently running it with 4 master processes (one for each of the protocols: imap, imaps, pop3, pop3s). The idea was to spread out the load so as to not overwhelm any one master. This has worked well. To take it further, we're contemplating running masters across multiple IP addresses, where the host/service name DNS records would be something like this:

We have a WAN with subnets and our remote SAMBA Hosts vanish after about a month from the WINS server. We have mixed SAMBA versions from 2.0.7 to 2.2.1a. NT (wins) 10.1.1.1 SAMBA 1 10.1.1.2 | | | SAMBA 2 10.2.2.2 All SAMBA hosts are set up to use the NT WINS server and after a SAMBA start they are there. But they 'fade away' in time. Is there a setting I am missing? Or do I

Dear Expert, I'm very newbie with rsync and i just installed RSYNC in both of my servers. Let say the server is ServerA (10.1.1.1) and ServerB (10.1.1.2). Rsync daemon runs in server A. The rsycnd.conf is like this (i save this file in /etc/rsyncd.conf): uid = rsync gid = rsync use chroot = no max connections = 4 syslog facility = local5 auth users = root

We have the requirement to provide SSL on some IP addresses, but not others on our servers. Providing SSL is the easy part and we're able to use multiple SSL certificates now. (thanks Timo!) All is working ok, but we several IP hosts that do not require SSL and do not have valid certificates. While we can limit access via a firewall ACL to TLS connect ports (993/995) we can't do so on

Continuation/rework of: https://www.redhat.com/archives/libguestfs/2020-May/msg00020.html This is my approach, as I explained here: https://bugzilla.redhat.com/show_bug.cgi?id=1828952#c4 https://www.redhat.com/archives/libguestfs/2020-May/msg00035.html IOW: do not attempt to relabel if the guest is not enforcing, as it is either useless or may fail; few words more are in the comments of patch #3.