similar to: DROPPED SYN Packets

Hi, I got a server which is web, mail, firewall, squid and bind dns server. The server is behind a router. The domain internal is the same as on the internet. I created a split dns so: www and webmail are pointed to the external ipadress of my router. The server internal ipadress is 10.0.0.1 and external ipadress is 192.168.0.80 The webserver is listening on 10.0.0.1 I created two

Dear member, When I run a code on a computer B from a computer A through shh using for example: system("ssh login at IPadress \"R -e 'print(1)'\"") [Note that I don't need indicate password because ~/.ssh/authorized_keys is used] I get a warning: During startup - Warning message: Setting LC_CTYPE failed, using "C" The code is working (it prints 1)

I am testing BDD 2007 and WDS on a Windows 2003 Server. I have a PXE Server with tftpd32 and pxelinux boot. Is it possible to have a menu entry that chain the first pxe booting(pxelinux) to the WDS Server which is on a different computer because I can't install WDS on the TFTP pxelinux. I have testing this entry: LABEL TEST WDS kernel ipadress::pxeboot.0 but the first server always respond

Hi all, I want to two sip clients connect through Asterisk in local network for testing. My sip.conf file looks like this [general] context=internal allowguest=no allowoverlap=no bindport=5060 bindaddr=0.0.0.0 srvlookup=no disallow=all allow=ulaw alwaysauthreject=yes canreinvite=no nat=yes session-timers=refuse localnet=192.168.1.0/255.255.255.0 [7001] type=friend host=dynamic

Hi, I''m using the XEN 3.4.1-pre4 Hypervisor in Routet Mode and I''m facing some problems when I start the DomU. In detail, it means that the DomU IP-Adress will not be implemented in the Kernel routing table after starting the domU via "xm create /<path +configfle>" After making a "netstat -nr" it will not show the IPadress bound to the

Is is possible to... Restrict all traffic two and from an internal ip address on a specific port? (ie, no port 80 outbound from 192.168.6.50, and block all returning packets to that same ip) Restrict all traffic out to an external ip address on a speicific port? (ie, no port 80 outbound to www.example.com [or its ip]) -- Landy J. Bible The University of Tulsa Computer Science Student IS

Hi, I have a Debian based NAT router. How can I manage upstream egress bandwidth based on the LAN ipadress in the network below? My goal is that host1 get a minumum of 10Mbit up/down and host2 gets a minimum of 90Mbit up/down, both max 100Mbit up/down? targethost 172.16.255.254 | | 172.16.0.1 natrouter

We''re using the ListenAddress directive in our sshd_config to tell which interface sshd is supposed to listen on. Normally it''s the address for eth1, but it might be the address for eth0 if there is none for eth1, and it might be both.. So, could someone help me with the erb template for my sshd_config: ListenAddress <%= sshd_listen_address %> The priority should

I use Samba 3.0.2rc2 on Suse 9.0 (heimdal 0.6-68) as a Domainmember for File -and Printservices (about 100 Users). The Linuxbox ist added to the ADS, the User are mapped through winbindd. Everything works.. The I upgraded to Samba 3.0.2 and if I start the daemon, after a while follow Error occured if a Domainclient will connect to the Sambabox: [2004/02/13 13:33:43, 1]

hi guys ! I have following problem (using pxelinux) I can't boot from my harddrive (netboot works just fine) i conwert my IPadress (with gethostip) and create a configfile like this: -----------C0A80001(192.168.0.1)---------- localboot 0 ----------------------end----------------------- at first te client looks for MAC and then for C0A80001 then i get following: Could not find kernel image:

Hi all, -------- I have a Asterisk at a public Network (official IP address). In the local network I have isntalled a Snom 200 IP phone and in my home network (behind NAT) a Snom 100 device. I can dial the Snom200 device from my home location without any problems but the Snom200 can not dial me. It always gets a "we do not rely". I tried to forward the SIP Port (5060) UDP via UPnP

Hi all, I am trying hard to configure samba, but I can not achieve my goals. Other than standard man pages, I have seen also many posts/documents samba with multiple nics, but I couldn' find any relevant to me. So, please, let me explain my settings and what I am looking to set up. First of all, my desktop runs ubuntu 8.04 with samba 3.0.28a On the pc I have 2 nics, eth0 and eth1. eth1 has

Hi Tom, Many thanks for that, that''s really helped. Netfilter is indeed dropping the packets as invalid. Thanks and regards, Frances -----Original Message----- From: Tom Eastep [mailto:teastep@shorewall.net] Sent: 23 March 2007 18:05 To: Shorewall Users Subject: Re: [Shorewall-users] Expected handling of [SYN] when expecting[SYN, ACK]? Frances Flood wrote: > Basically, if the

Hi, I''ve been developing a peer-to-peer application, and have recently been trying to add STUNT (http://www.cis.nctu.edu.tw/~gis87577/xDreaming/XSTUNT/Docs/XSTUNT%20Ref erence.htm) to allow firewall/NAT traversal. I got a box with Shorewall to use for testing, and am now trying to work out whether Shorewall is actually designed to prevent such connections? I notice in the FAQs that

All, Have already got Samba 3 and W2K Ad intergrating working in production without any problems. I have set up a test domain to test W2K3 and Samba3 on a Red Hat 8 server. I did the following: * Have set up the NTP Daemon to synchronize time with the W2K3 domain controller. * installed the latest Kerberos packages for Red Hat 8, maid sure that krb5-workstation is installed. * installed the

Hi, I''m interested in prioritizing all packets with the SYN bit on, both with and without the ACK bit on (but specially the SYN ACKS). I am checking is the use of Diffserv. From a paper I read I understood that when Diffserv is on, all "Control Traffic", including TCP SYN-ACKs, gets by default into "band 0" of Diffserv, the highest priority out of 16 bands. If true,

I'm about ready to pull my teeth out over this. I just installed Red Hat 8.0, have not used Linux much in the past, which is why I went with Red Hat, sposeto be easier, more support etc. The network the Linux box resides in has 2 WinXP-home computers, and a Win200 Pro computer. They are all sharing all files, no passwords, no domain, just a workgroup called "ESR". I just want the

Hello, when I execute "shorewall hits" command I find this stats: HITS IP DATE ---- --------------- ------ 92099 192.168.0.2 Nov 24 7764 59.104.107.85 Nov 23 3997 192.168.1.77 Nov 24 337 181.50.93.89 Nov 23 331 59.104.156.68 Nov 23 315 99.109.157.73 Nov 23 301 190.225.157.40 Nov 23 275 179.153.183.53 Nov 23 268

I have just finished a patch to linux 2.0.29 that provides the SYN cookies protection against SYN flood attacks. You can grab it from my home page at: http://www.dna.lth.se/~erics/software/tcp-syncookies-patch-1.gz You can also follow the pointers from my home page (see the signature) to get a very short blurb about this patch. Quick synopsys: This implements the SYN cookie defense against SYN

Hallo Group, i want to implement a syn Flood Protection on our linux Router. on our Cisco we have this Access-list and rat-limit rate-limit input access-group 190 128000 128000 128000 conform-action transmit exceed-action drop access-list 190 deny tcp any any established access-list 190 permit tcp any any access-list 190 deny ip any any now i was trying to wrote the same config with