similar to: combining rules

Hello All, I have a strange problem regarding samba 3.0.37 I have samba server installed in the local network behind NAT, the router iptables are configured as follows: #samba $IPT -t nat -A PREROUTING -i $INET_IFACE -p udp -d $INET_IP -m multiport --dports 137,138 -j DNAT --to-destination $FILESERV $IPT -t nat -A PREROUTING -i $INET_IFACE -p tcp -d $INET_IP -m multiport

Hi Folks: I am either using the multiport of the -m or --match option of iptables in correctly or there is a bug with it. Is anyone else using it with no problem? This is the way I am trying to use it: my_ports=21,25,80 iptables -t nat -A PREROUTING -i $wan_addr -p tcp -m multiport --dports $my_ports -j DNAT --to $my_internal_address I have used this in the past successfully but that was a

when multiport is off, virtio console invokes config access from irq context, config access is blocking on s390. Fix this up by scheduling work from config irq - similar to what we do for multiport configs. Signed-off-by: Michael S. Tsirkin <mst at redhat.com> --- Applies on top of "virtio_console: init work unconditionally" that I sent previously. drivers/char/virtio_console.c

when multiport is off, virtio console invokes config access from irq context, config access is blocking on s390. Fix this up by scheduling work from config irq - similar to what we do for multiport configs. Signed-off-by: Michael S. Tsirkin <mst at redhat.com> --- Applies on top of "virtio_console: init work unconditionally" that I sent previously. drivers/char/virtio_console.c

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=451 Summary: ip6tables port range support in multiport modules is broken Product: iptables Version: unspecified Platform: i386 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P2 Component: ip6tables

Rowland, OK. Should I delete these lines? diff yours mine 63d62 yours# -A ufw-after-logging-output -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW ALLOW] " 85,87d83 yours# -A ufw-before-logging-forward -m conntrack --ctstate NEW -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW AUDIT] " yours# -A ufw-before-logging-input -m conntrack

Unfortunately there proved to be at least one bug which requires an ABI change, so we're best off not introducing multiport support until 2.6.35. While I generally left the multiport code paths intact, I really wanted to remove the ABI defines from the header, which meant some quite deep cuts. Signed-off-by: Rusty Russell <rusty at rustcorp.com.au> To: Amit Shah <amit.shah at

Unfortunately there proved to be at least one bug which requires an ABI change, so we're best off not introducing multiport support until 2.6.35. While I generally left the multiport code paths intact, I really wanted to remove the ABI defines from the header, which meant some quite deep cuts. Signed-off-by: Rusty Russell <rusty at rustcorp.com.au> To: Amit Shah <amit.shah at

On Thu, Mar 27, 2014 at 07:43:34PM +0100, Kay Sievers wrote: > On Thu, Mar 27, 2014 at 6:30 PM, Michael S. Tsirkin <mst at redhat.com> wrote: > > > If the virtio device is a PCI device, it is really best to > > treat it like you treat any other PCI function (I guess you mean > > function and not device, right? We support multifunction > > devices and some

On Thu, Mar 27, 2014 at 07:43:34PM +0100, Kay Sievers wrote: > On Thu, Mar 27, 2014 at 6:30 PM, Michael S. Tsirkin <mst at redhat.com> wrote: > > > If the virtio device is a PCI device, it is really best to > > treat it like you treat any other PCI function (I guess you mean > > function and not device, right? We support multifunction > > devices and some

Does the voicetronix card work with Asterisk? -----Original Message----- From: asterisk-users-admin@lists.digium.com [mailto:asterisk-users-admin@lists.digium.com] On Behalf Of woody+asterisk@solutionsfirst.com.au Sent: Monday, February 02, 2004 11:06 PM To: asterisk-users@lists.digium.com Subject: RE: [Asterisk-Users] Pictures of new multiport FXO/FXS from digum > -----Original Message-----

When do you know you need the "-m multiport" option? I see examples with -dport xx:xxx for example that sometimes use it and sometimes don't? I have read the man page and see what "-m multiport" requires, but don't see the requirement involving its use. Thanks! jlc

Hello everybody. I''m running linux 2.6.19 with nth match to alternatively snat outgoing connections to two different ip addresses for load balancing between two adsl lines: Here is: $IPTABLES -t nat -A POSTROUTING -s my_ip --protocol tcp -m multiport --dports 80,443 -m statistic --mode nth --every 2 -j SNAT --to adslA $IPTABLES -t nat -A POSTROUTING -s my_ip --protocol tcp -m multiport

Hello, This series reworks the ABI to allow port discovery (only) via the control queue and enable multiport again. In addition, it adds support for non-blocking write() support, which means no spinning. This works fine with the recent patches that are on qemu-devel. Also included is removal of hvc_remove() as removing one such console port causes other console ports (registered with hvc) to

Hello, This series reworks the ABI to allow port discovery (only) via the control queue and enable multiport again. In addition, it adds support for non-blocking write() support, which means no spinning. This works fine with the recent patches that are on qemu-devel. Also included is removal of hvc_remove() as removing one such console port causes other console ports (registered with hvc) to

On Thu, Mar 27, 2014 at 08:06:15PM +0100, Kay Sievers wrote: > On Thu, Mar 27, 2014 at 7:59 PM, Michael S. Tsirkin <mst at redhat.com> wrote: > > On Thu, Mar 27, 2014 at 07:43:34PM +0100, Kay Sievers wrote: > >> On Thu, Mar 27, 2014 at 6:30 PM, Michael S. Tsirkin <mst at redhat.com> wrote: > >> > >> > If the virtio device is a PCI device, it is

On Thu, Mar 27, 2014 at 08:06:15PM +0100, Kay Sievers wrote: > On Thu, Mar 27, 2014 at 7:59 PM, Michael S. Tsirkin <mst at redhat.com> wrote: > > On Thu, Mar 27, 2014 at 07:43:34PM +0100, Kay Sievers wrote: > >> On Thu, Mar 27, 2014 at 6:30 PM, Michael S. Tsirkin <mst at redhat.com> wrote: > >> > >> > If the virtio device is a PCI device, it is

From: Sjur Br?ndeland <sjur.brandeland at stericsson.com> Add a simple serial connection driver called VIRTIO_ID_RPROC_SERIAL (0xB) for communicating with a remote processor in an asymmetric multi-processing configuration. This implementation reuses the existing virtio_console implementation, and adds support for DMA allocation of data buffers and disables use of tty console and the virtio

From: Sjur Br?ndeland <sjur.brandeland at stericsson.com> Add a simple serial connection driver called VIRTIO_ID_RPROC_SERIAL (0xB) for communicating with a remote processor in an asymmetric multi-processing configuration. This implementation reuses the existing virtio_console implementation, and adds support for DMA allocation of data buffers and disables use of tty console and the virtio

Tonight I added fail2ban to one of my webservers to test it out. Here is my step by step, as best as I could figure it out...documentation a bit sketchy. feel free to add anything to it or suggest changes. I tried to set it up to deal with ssh, http authentication, dovecot, ftp, and postfix I could find no working example for centos 6 and there is no fail2ban book available to peruse. So,