similar to: Publics IPs in a loc zone

Hi to everybody, I write because I have just configure a shorewall to be used as firewall, proxy(with squid) and gateway to 2 internet connections, and it looks to work properly but now I''d like to add a new feature: I would to redirect some specific traffic (emule''s one) only to one of those links. This is my diagram:

Hello, I''ve setuped an ethernet bridge on a debian sarge 3.1 with l7-filter + ipp2 shapper rules The server is a supermicro p4sci + celeron pentium 4 base 3ghz + 512Mb + 2 ethernet e1000 One interface is connected to a cisco catalyst switch The other interface is connected directly to a CMTS (a sort of router for cable modem) configured as bridge too. More than 20Mbps of bandwith

Chase, Brian E. wrote: > The way to do this is with ACL's. Access Control Lists > IPtables can perform this function, or an internet gateway router can also > be used. > The ISR 4000 Series Cisco router family is where I would start, especially > if you're in the need for a blade server in the same chassis. > > -----Original Message----- > From: CentOS

Unless the bridge keeps stateful inspection data and can reply back to the session''s origin, not it route then its fine. The only way I can see this working is either putting the FTP/.. DMZ behind the firewall giving true firewall protection for all services involved, or if you just want to kludge the current solution, you can perform a DNAT/SNAT interface bounce like the following: #

Mark Haney wrote: > On 06/08/2017 09:12 AM, Andrew Holway wrote: >> I think we had enough of Systemd flaming last month. Please stop >> polluting my inbox and find an operating system compatible with your >> worldview. It is really tiresome to keep on hearing about it. >> > Huh. Okay, though I'm not sure when you became arbiter of this list. If > you don't

Hi, I''d like to do a "find_by_sql" without a model (e.g. <model name>.find_by_sql("...")) as the results I get back are a once off special, and I''m happy to handle them as an array. How do I do this? "ActiveRecord::Base.find_by_sql(...)" does not seem to work? Background - At the moment I''m doing within a model <model_name>,

I have a recently installed Mellanox VPI interface in my server. This is an InfiniBand interface, which, through the use of adapters, can also do 10GbE over fiber. I have one of the adapter's two ports configured for 10GbE in this way, with a point to point link to a Mac workstation with a Myricom 10GbE card. I've configured this interface on the Linux box (eth2) using

Hi, I'm kickstarting a vm in ESXi 5.1. ks.cfg is on floppy, install media is ISO file. This works great as long as I don't add an additional repo, in our case it is vmware tools on one of our webservers. If I add the repo line, anaconda asks then for the used network card and indeed, switching to console the interfaces are still unconfigured. Chosing eth0 in gui continues the

Hi, I tried to establish NCS call b/w 2 endpoints of same PacketCable MTA using asterisk-10.0.0. I observed that MDCX sent to aaln/1 contains its own SDP. Some I observed with aaln/2. So voice path is not established b/w aaln/1 and aaln/2. My Configurations: mgcp.cong: [mta84.globaledgesoft.com] host = mta84.globaledgesoft.com wcardep = aaln/* callwaiting = 1 ;canreinvite = 1 dtmfmode

Dear Doc Admins, My name is Earl Ramirez and I have a particular interest with the 'hardening' SIG, therefore I will like to know if its possible for me to have write access to the hardening SIG page [0]. My goal is to kick off the draft and as we come together to decide the goals and direction of the SIG I will update the content accordingly. [0]

I did some looking on the mailing list archives and can''t seem to find exactly what I need, I''m also having troubles figuring this out on my own, so if anyone has any advice, tips, whatever, that would be great. I''ve got a machine with 3 network cards in it, one for a DMZ (with 3 machines on a switch each with a real IP address), one for the local network on a

Should the URL match the word used in the subject? [0] [0] http://wiki.centos.org/SpecialInterestGroup/Hardening jerry On Wed, Apr 29, 2015 at 8:45 AM, Alan Bartlett <ajb at elrepo.org> wrote: > On 29 April 2015 at 14:23, Earl A Ramirez <earlaramirez at gmail.com> wrote: >> Dear Doc Admins, >> >> My name is Earl Ramirez and I have a particular interest with the

Dear All I have been working on a custom ISO with kickstart and a couple of post installation scripts and would like to have the script run before the login prompt. The custom ISO works; however, the scripts fails because some of the services, e.g. mariadb does not start before the server installation has been completed and rebooted; therefore, I have been putting the scripts in /etc/profile.d/

Dear All, About a week ago; I posted a proposal over on the centos-devel mailing list, the proposal is for a SIG 'CentOS hardening', there were a few of the members of the community who are also interested in this. Therefore, I am extending that email to this community; where there is a larger community. Some things that we will like to achieve are as follows: SSH: disable root

Hello, everyone. Could anyone explain me how does ringback detection works in asterisk. Sometimes, when making a call, my asterisk box doesn't detect a ringback and I just hear silence until the other party picks up the phone. I've checked the SIP messages and they are ok (I'm getting 183 "session in progress"), so I guess I should be debugging the RTP packets. From then on

Hello, everyone. I'm having a small problem when using asterisk with GUI. For every provider I create I have to set "insecure=invite,port" in users.conf. Is there a way to make it a default setting? Thanks in advance.

Hello everybody. I could not find an answer to my problem in the archive. (But that may just be me :-) ) I have a problem with proxy arp and connection from loc (localnet) and from the firewall. Works fine from internet to dmz / proxy arp and vise versa. I have a feeling the solution is simple, but I''m no guru in Linux routing etc. The problem seems to be the routing setup. loc -

I have a three interface network (net,loc,dmz). The internet interface (eth0) has a static IP. Windows machine in the local network (eth1) use DHCP to get IPs from the 192.168.10.0/24 netblock. The Debian machine in the DMZ (eth2) gets a fixed IP through DHCP in the 192.168.11.0/24 netblock. The DHCP server is running on the firewall machine (not ideal, I know, but that''s the way

Buenos días, estoy realizando análisis de texto con Twitter y tengo un problema con unos carácteres que no logro quitar. Són cadenas de letras con forma similar a *xaexdfxdeaxoa*. Creo que surgen de la códificación de los emojis. Yo suelo utilizar, más o menos el siguiente codigo con gsub para limpiar texto, pero no me sirve # remove rt x = gsub("rt", "", x) # remove at x =

On Wed, Dec 16, 2015 at 4:47 PM, Earl A Ramirez <earlaramirez at gmail.com> wrote: > I don't see 'System' in any of the CentOS 7.2.1511 boxes or VMs that were > recently upgraded: > ?Hi Earl, Have you tried a new install?? I agree, upgraded installations do not seem to be affected.