similar to: Two ISP and routing.

I''m having another little problem with my new firewall. I want outgoing port 25 from my mail server to appear on the address 65.223.121.227 so I created the file masq: eth2 192.168.124.18 65.223.121.227 tcp 25 eth1 eth5 eth1 eth3 eth1 eth4 eth1 == net0 == 209.189.103.196/27 eth2 == net1 == 65.223.121.237/28 eth3 == dmz0 eth4 == dmz1 eth5 == loc ==

I have registered a project with Sourceforge to produced a Webmin module for Shorewall. http://sourceforge.net/projects/webmin-shorewal/ Anyone interested in participating please email me at enemyofthestate at users.sourceforge.net I am still learning the interface but I think I need your Sourceforge Nym to add you as a developer. -- Stephen Carville Unix and Network Adminstrator

I have a pretty straightforward shorewall (v 2.0.12) setup in my Phoenix office. IP addresses on the firewall eth0 172.16.10.249 eth1 12.47.198.100 eth1:1 12.47.198.108 eth1:2 12.47.198.101 eth2 172.16.11.249 interfaces: loc eth0 detect net eth1 detect blacklist dmz eth2 detect vpn1 tun1 192.168.124.255 zones net Net

I am using Samba 3.0.20a with winbindd on FC3 and all the shares except one are working. I keep getting a permison denied error for non-local users in certain directories. The permissions on the directory are # ls -ld . drwxr-xr-x 11 procman users 4096 Aug 3 15:35 . # ls -l drwxrwx--- 12 procman admin 4096 Aug 2 15:47 administration drwxrwx--- 5 procman data-entry 4096 Nov 16

I am trying to use rsync to move backup file from a cople of Oracle servers to another machine where they will be backed up to tape. The command is run from a script launched by cron and looks like: /usr/local/bin/rsync --recursive --delete --verbose $BACKUP_DIR/* \ euphrates::tigris/logarch/. Rsync is running from inetd on euphrates which has the following defined in /etc/rsyncd.conf:

look in the smb.conf man page for "disable sspool" I think thats the right option. It needs to go in your global section ie disable sspool = yes Cheers ------------- Kristyan Osborne IT Technician Longhill High School 01273 391672 ------ Computers are like airconditioners: They stop working properly if you open windows. Win95: A 32-bit patch for a 16-bit GUI shell

I would like to add a rule allowing only the address 192.168.150.20 and the range of addresses from 192.169.150.100 to 192.168.150.150 in zone dmz0 to connect to two terminal servers in the local zone. Is there a syntax that can specify a range of addresses in the rules file? Do I have to enter each one separately? -- Stephen Carville Unix and Network Adminstrator DPSI 6033 W.Century Blvd.

I have a setup with two Internet providers. One circuit (net0 == eth1) is used primarily for employees and tunnels to other sites. The other (net1 == eth2) is for the production machines that customers access. Everythung works in teh sense that packets get to where they are sent (mostly) but I recently I had a sniffer on the system and noticed a problem I cannot solve. traffic coming in

I am considering replacing my old checkpoint and watchguard firewalls witha single Linux box using iptables and shorewall. I have two ISP''s (with separate routing tables), two DMZ''s, at least one VPN to a remote office, and a local trusted network. The configuration will look like: +----------------+ | | net0 ----------+ eth1

I am migrating from my "old" 2.2.7 samba server to a newer server runnig 3.0.20a and everythig is working except the [homes] share. The server (FILE-CABINET) is a member of the domain, security is set to ADS and, as far as I can tell, kerberos is working. The program wbinfo returns a list of users and groups like it should. getent passwd returns first my local passwd file and then

Hi I have 2nic firewall . I had to open some ranges of udp and tcp ports . I faced a problem that although all the ports are open Some functionality was not working . Any body used shorewall with H323 Voip traffic DNATed . Any help is appretiated . Thanks ----- Original Message ----- From: <shorewall-users-request@lists.shorewall.net> To: <shorewall-users@lists.shorewall.net> Sent:

I have an FC3 intallation with samba-3.0.10-1. I cannot get it to accept a login with server=DOMAIN. I can join the domain with no problem: # net rpc join member -U scarville passwd: Joined domain TOTALFLOOD. I can browse the shares: $ smbclient -L amazon added interface ip=192.168.124.230 bcast=192.168.124.255 nmask=255.255.255.0 Password: Anonymous login successful Domain=[TOTALFLOOD]

The network/proint controller keeps rebooting. Is this user fixable or do I have to call call service. -- Stephen Carville UNIX and Network Administrator DPSI 310-342-3602 stephen@totalflood.com -- If you have been voting for politicians who promise to give you goodies at someone else's expense, then you have no right to complain when they take your money and give it to someone else,

Hi, I've got Samba 2.0.2 and a server NT4 SP3 with Seagate BackupExec 7.0. When I want to backup Samba with Seagate BackupExec, I get a message saying "Unable to connect to server, <F5> to retry", and then another one saying "A device specific error occured". I've read all the Samba archive about that subject, but I do not find any solution. I don't

on i have a small question we have a linux box with a windows 2003 server well we natted all the ports and mail is working remote desktop is working web is working the only thing that does not work is vpn how can i foward vpn traffic to this server i checked the site and searched for foward vpn and got nothen can somone please enlight me where to start Marshal McInnis Tech / Web

I have the following interfaces loc eth0 net0 eth1 net1 eth2 (net0 and net1 are the two ISP networks) policy loc net0 ACCEPT loc net1 ACCEPT net0 all DROP info proxyarp 209.189.103.204 eth0 eth1 no no params Pellucidar=192.168.124.232 rules DNAT net0 loc:$Pellucidar tcp 22,80,1950,50005 - 209.189.103.204 ACCEPT all all icmp

Is it possible to allow two Linux computers to browse each other in a manner similar to the way a winbox and browse a Linux box with Samba? Ya know, like the network neighborhood thing, not the smbclient get put thing? Thanks

After considerable experimentation I'm forced to accept that Samba 3 has problems with the combination of being a domain member, the 2.6 kernel, and Dell 2850 hardware. It works fine on the 2.4 kernels but fails on all the 2.6 versions I have avaialble for testing. I have one machine that I really prefer could stay at 2.6 so my last resort there is to try a downgrade to samba 2.X In the

Robin Lynn Frank wrote: > I have an entire /8 blacklisted. The problem is there is a single IP in > it I want to exempt from this. Searching the web site, I note there > used to be (circa version 1.3) a whitelist feature, but I couldn''t find > a simple solution to what I want to do. > > What would be the bes/easiest way to accomplish this? I can''t think of a

I was able to get public folders to work with a dedicated account for the hierarchy and ACL's for individual users. I have location defined so that each user has a local index and control files location = maildir:/usr/mail/public/cs/mail:CONTROL=~/Maildir/CS:INDEX=~/Maildir/CS Now i am seeing the folliwing error in the logs. dovecot: IMAP(stephen): fchown() failed with file