similar to: Allow - disallow bug?

Hi Tom, Thanks for the feedback about my Shorewall evaluation I''ve published a blog today covering general things I''ve observed about the way to combine Shorewall with strongSwan: http://danielpocock.com/practical-linux-vpns-with-strongswan-shorewall-and-openwrt Please let me know if anything is inaccurate or if there is anything substantial that I missed and I''ll

Hi all I need to create following rule (described): All connections from any zone going to server 80.1.1.1 on port 210 in zone DMZ should be redirected to that same IP in same zone but on port 200 So basically for all zones I want to redirect requests for port on server to different port on same server. None of the examples i found in documentation, FAQ or mailing list cover this particular

Hi all We are planning to upgrade Dovecot from production version 1.0.10 to latest version 1.2.9 Users are using maildir style mailboxes with ~20 GB of messages on SLES10 server. Upgrade will be done by installing new server and then migrating mailboxes from old on new server. Since dovecot-uidlist file have new format and index files have changed in v1.1, what must be done to have new

Hi all Hi everyone Shorewall 3.2.6 and OpenSWAN 2.4.4-18.2 are on SLES10 machine with public fixed IP address on Internet interface. I am trying to establish IPSEC VPN tunnel to network behind D-Link DI-804HV VPN router who is on dynamic IP address. For this I am using dyndns.org alias on DI804 side. Shorewall is stopping all packets comming from DI804 whey trying to establish tunnel. Log on

To: All I'm trying to run /_Click'N Design 3D Afterburner_/. an application for CD labels and jacket design. It installs fine and it seems most of it runs OK except when it has to access template files - files with *.tpl extension. Those files contain the page layouts and paper sizes and are crucial to the application functioning. When trying to access a template the only

Hello, I run samba 3.0.4 on a RHL9 server. Samba is a domain member of a W2k3 ADS and I use CUPS as printing mechanism; therefore Samba is compiled with Kerberos 1.3.1-7 and cups-devel. 3.0.4 runs pretty good, printing via CUPS runs well too, only the following messages I see constantly (this flooding my logs) while using 3.0.4: winbindd.log ========= [2004/07/27 16:07:04, 1]

Hi all I have succesfully set up PPTP VPN access to my company using PoPToP/pppd (thank you Tom for excellent documentation), everything works fine so far. Problem is security. As I understand it, since PPTP ports trough tunnel are opened to whole Internet (have to be), access verification is now based only on username/password combination. Can level of security be raised with MAC verification?

Dear list, I have a question how you configure Samba (configured as a W2k3 domain member) to failover to a secondary AD domain controller when the connection to the primary domain controller fails. First some info: - Windows 2003 Active directory (native mode), currently running with 2 domain controllers. - Samba (version 3.0.9) running on a RHL9 server (updated with kerberos 1.3.1-7),

Hello, I'm using samba 3.0.4 (on RHL9) as a W2k3 domain member in an ADS realm. For printing I'm using CUPS of RHL9. The XP clients get the CUPS printers (CUPS redirects the printjob to the JetDirect card of the printer) and the appropriate PCL drivers installed via the "Point 'n Print" mechanism. The clients get their printers installed via de AD login script and the there

Gerald Carter wrote: >| every time I access a printer my logs flood with messages >| like to those below. It seems I can set printer >| properites, etc... but when I print the jobs seem to go >| to never-never land (still researching where the jobs go). >| >| [2004/08/20 08:46:27, 0] lib/util_str.c:safe_strcpy_fn(600) >| ERROR: string overflow by 1 (32 - 31) in

Hello, I've been having a few troubles with samba 3. I can only get 4MB/sec writing to the FreeBSD server that it is running on. As its on a 100Mbit network I was expecting at least 6-7MB/sec. I've included the smb.conf below is there anything obvious that I have missed from the config that can be seen as a performance gain or does anyone have any ideas for non samba items that can

Hello Everyone, I have disallow=all and allow=g729 set in sip.conf however, it seems that asterisk still thinks it support other codecs: Capabilities: us - 0x80000008000e (gsm|ulaw|alaw|h263|testlaw). How can I disable gsm,ulaw,alaw..... Thanks in Advance, Nick.

If a domain has PCI devices then we can''t safely save or migrate it. At least one user has had system crashes due to this, and the way the xendomains script automatically saves and restores domains on reboot. Since there''s no sensible semantics for it at the moment, we should disallow it and return an appropriate error message to xm. The first attached patch prevents the

The code currently only supports one virtio-rng device at a time. Invoking guests with multiple devices causes the guest to blow up. Check if we've already registered and initialised the driver. Also cleanup in case of registration errors or hot-unplug so that a new device can be used. Reported-by: Peter Krempa <pkrempa at redhat.com> Reported-by: <yunzheng at redhat.com>

The code currently only supports one virtio-rng device at a time. Invoking guests with multiple devices causes the guest to blow up. Check if we've already registered and initialised the driver. Also cleanup in case of registration errors or hot-unplug so that a new device can be used. Reported-by: Peter Krempa <pkrempa at redhat.com> Reported-by: <yunzheng at redhat.com>

For virtio-1 devices, the driver must not attempt to set feature bits after it set FEATURES_OK in the device status. Simply reject it in that case. Signed-off-by: Cornelia Huck <cornelia.huck at de.ibm.com> --- hw/virtio/virtio.c | 16 ++++++++++++++-- include/hw/virtio/virtio.h | 2 ++ 2 files changed, 16 insertions(+), 2 deletions(-) diff --git a/hw/virtio/virtio.c

On Fri, 12 Dec 2014 11:55:38 +0100 Thomas Huth <thuth at linux.vnet.ibm.com> wrote: > On Thu, 11 Dec 2014 14:25:14 +0100 > Cornelia Huck <cornelia.huck at de.ibm.com> wrote: > > > For virtio-1 devices, the driver must not attempt to set feature bits > > after it set FEATURES_OK in the device status. Simply reject it in > > that case. > > > >

-- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones New in Fedora 11: Fedora Windows cross-compiler. Compile Windows programs, test, and build Windows installers. Over 70 libraries supprt'd http://fedoraproject.org/wiki/MinGW http://www.annexia.org/fedora_mingw -------------- next part -------------- >From aaf03a51a26ee501f5dbf2720bbb8a5e3b4e1e6b Mon Sep 17

For virtio-1 devices, the driver must not attempt to set feature bits after it set FEATURES_OK in the device status. Simply reject it in that case. Signed-off-by: Cornelia Huck <cornelia.huck at de.ibm.com> --- hw/virtio/virtio.c | 16 ++++++++++++++-- include/hw/virtio/virtio.h | 2 ++ 2 files changed, 16 insertions(+), 2 deletions(-) diff --git a/hw/virtio/virtio.c

On Fri, 12 Dec 2014 11:55:38 +0100 Thomas Huth <thuth at linux.vnet.ibm.com> wrote: > On Thu, 11 Dec 2014 14:25:14 +0100 > Cornelia Huck <cornelia.huck at de.ibm.com> wrote: > > > For virtio-1 devices, the driver must not attempt to set feature bits > > after it set FEATURES_OK in the device status. Simply reject it in > > that case. > > > >