similar to: OpenVPN ifconfig

Are shorewall-shell and shorewall-common required at compile time even if one only wishes to use shorewall-perl (4.0.9)? ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

Does anyone know of a script that can act as a "helper" for Shorewall''s dynamic blacklist capabilities? Briefly said, I''d like to know if someone already wrote a script/program that, e.g., parses log files (/var/log/messages, etc) and picks up for example all IP addresses that failed SSH login more than X times and then executes a command such as shorewall drop

Hi, I followed the instructions in the section "Squid (transparent) Running on the Firewall" on http://www.shorewall.net/Shorewall_Squid_Usage.html to setup Squid transparently on a Linux gateway. My net is as follows: loc subnet --- fw Linux Gateway --- ADSL router 192.168.1.0/24 192.168.1.92 (eth1) WAN.WAN.WAN.2 (gw = WAN.WAN.WAN.WAN (eth0) 192.168.1.92) (gw =

Yes: # getent group GROUP group:x:17573: # getent group group2 group2:x:11010: # getent group GROUP3 group3:x:21178: # wbinfo --group-info GROUP group:x:17573: # wbinfo -n GROUP S-1-5-21-948789634-15155995-928725530-7573 SID_DOM_GROUP (2)

In my peculiar setup I need my shorewall router to do one-to-one NAT with RFC1918 addresses. The "external" addresses are 10.215.0.0 and the internal addresses are 192.168.0.0. I can ping, vnc, http, smb from 10.215.144.48 to 10.215.145.237 which is 192.168.44.237 internally. >From 192.168.44.237 I can do http, rdp, ping to 10.215.0.0 hosts. So all seems fine except for the fact

Hello, I''m reading this guide on ipv6 (really just getting my "feet wet"): http://www.shorewall.net/6to4.htm In the section "Configuring IPv6 using my script" I can read that the IPv6 interfaces are: INTERFACES="eth2 eth4" and that correlates fine with the first diagram/figure. However, further down I read "You will notice that sit1, eth0 and eth2

I'm trying to use the txfax application based on spandsp in Asterisk 1.2. It seems to be working but I would need a way to reliably check whether the fax has been completely transferred or not. I'm using a mail2fax system (as with email2fax and .call files) but I can't seem to get it working. If I use "Application" and "Data" in the .call file, there doesn't

Hi, I followed the guide here below to add my Samba client to an AD PDC (rid backend): https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member The end result is that commands such as: # wbinfo -g # wbinfo -u work fine in that I get a domain group and user listing. Also, computers in the domain network can transparently authenticate (Windows) to the newly-added (joined) Linux

Sorry, "encrypt passwords" was added by mistake. I see it is deprecated now. In any case, even without removing it, I decided to remove the member from the domain and added it again as I saw other posts with similar issues. I ran a "net ads leave" followed by a "net ads join" again, and after the message that it had joined successfully, now wbinfo -t and the likes

OK, interesting debate, but I still can't convert to SID. I still get messages such as this one: AUTH-PAM: BACKGROUND: my_conv[0] query='Cannot convert group GROUP to sid, please contact your administrator to see if group GROUP is valid.' style=4 # wbinfo -t checking the trust secret for domain DOMAIN via RPC calls succeeded # wbinfo --ping-dc checking the NETLOGON for

It's Gentoo Linux. System uname: Linux-5.4.38-gentoo-x86_64-x86_64-AMD_EPYC_7272_12-Core_Processor-with-gentoo-2.6 KiB Mem: 32746472 total, 27513712 free KiB Swap: 37005244 total, 37005244 free Timestamp of repository gentoo: Fri, 29 May 2020 00:45:01 +0000 Head commit of repository gentoo: 9e5f0b894af4ad7780998a137656d0835b73213e sh bash 5.0_p17 ld GNU ld (Gentoo 2.33.1 p2) 2.33.1

Nice call. It almost worked except for a small error in 'man pam_winbind' -- DOMAIN\\GROUP should actually be DOMAIN\GROUP in the pam.d file. Now, I'm a bit confused. The pam module 'pam_winbind' is from the Samba suite. OpenVPN is just passing on the authentication decision to Samba. However, I was expecting to just use the group name without the domain name since I have

OK for the DC. I noticed that converting users and groups to sid with the example below seems to work fine: # wbinfo -n DOMAIN\\user S-1-5-21-948789634-15155995-928725530-6864 SID_USER (1) # wbinfo -n DOMAIN\\group S-1-5-21-948789634-15155995-928725530-11178 SID_DOM_GROUP (2) However, applications using PAM and winbind seem to fail when trying to convert to sid. For instance, just to name one,

Hi, this is my first post to the list. I have googled a lot, and still cannot find a proper solution. I hope someone here will be able to shed some light on my doubts. I have set up a firewall using kernel 2.6.15 (Debian) that does NAT for 100 clients, and uses two different ISPs, using the howto found at http://lartc.org/howto/lartc.rpdb.multiple-links.html. I have *not*

Hello, I have set up a multipath gateway. System is a linux 2.4.29 kernel, iproute 20010824, iptables 1.2.11. here is the setup: firewall:/# ip rule 0: from all lookup local 100: from all lookup main 152: from all fwmark 10 lookup wan1 153: from all fwmark 20 lookup wan2 201: from 213.223.96.121 lookup wan1 202: from 82.236.230.217 lookup wan2 1000: from

Dearl all, I have to fit a function y = f(x1, x2) to data experiemntal data describing the measured behavior of y. x1 and x2 are the independent variables. Could you suggest me wich R package can I use for this purpose? Thanks, Paola. -- *Paola Lecca, PhD* *The Microsoft Research - University of Trento* *Centre for Computational and Systems Biology* *Piazza Manci 17 38123 Povo/Trento,

Hi, I have a linux box which balances load between two interfaces ( say WAN1 and WAN2). I have masquerading on for any request coming from LAN to the outside world. The setup is in such a way that WAN1 drops packets with source ip belonging to WAN2''s network and viceversa. For some strange reason, I find that packet coming out from the WAN interface has source address of WAN2 and

Hi everybidy Does anybody knows the code in R relate to MANCOVA???I saw somewhere lm(Y`...) but ma not so sure.. Thanks in advance!! Paola -- View this message in context: http://r.789695.n4.nabble.com/MANCOVA-tp4647735.html Sent from the R help mailing list archive at Nabble.com.

Dear all, I tried to use nls, but I got the following error Error in numericDeriv(form[[3L]], names(ind), env) : Missing value or an infinity produced when evaluating the model Any suggestion? Thanks, Paola. The code I wrote is Data_pp2_mrna <- data.frame( p1 = protein_1, p6 = protein_6, pp2_mrna

Hi, I''ve been working the past 8 hrs combatting DDoS attacks on websites and dedicated servers I host for clients. They''re hitting one specific IP address, but coming from thousands of external IP addresses. I use: shorewall-4.0.10-3.noarch How can I tackle this? I''ve blocked many subnets in the blacklist file but it''s made very little difference. If