similar to: shorewall ( and everything else) quit logging

I am trying to rate limit a particular user/ip''s news traffic and have added the line ACCEPT loc:10.5.75.253 net tcp 119 - - 1/sec:2 While this has slowed down the traffic, it has not throttled it to the point I would like. Yet with a sniffer I can see around 15 packets a second going thru. My T1 is close to saturation, and I would like to

I am unable to "make" ulogd on any of my redhat 8 machines (error 1), has anybody used shorewall with any of the other logging daemon packages out there? Steve Postma System Admin Travizon

I would like to cut down on packets logged from "loc2net". I have modified my policy file so that the logging for loc2net is "err" but dns packets and smtp are still being logged. Is it possible to filter these out? On a separate note, if I define ULOG in policy, I get an error on shorewall startup "ULOG not defined" or something of that nature. Sorry about being

I have shorewall 1.3.12 installed on a redhat 8 fully patched machine with three nicks. Eth0 has 10 IP''s bound to it and has been succsessfully routing web traffic to servers on the dmz. This morning I added another server to the DMZ, configured my network with the correct IP, configured dnat in "rules" and restarted both. From a standalone machine that is on the same segment

The ''firewall'' and ''functions'' file in CVS together produce a 30%+ speedup of ''shorewall restart'' on my firewall when compared to 1.3.11a. Please test with these files -- I don''t anticipate making any more performance changes for 1.3.12 and I want to be sure that I didn''t break anything. -Tom -- Tom Eastep \ Shorewall

Soumya, its [root at mseas-data2 ~]# glusterfs --version glusterfs 3.7.11 built on Apr 27 2016 14:09:20 Repository revision: git://git.gluster.com/glusterfs.git Copyright (c) 2006-2013 Red Hat, Inc. <http://www.redhat.com/> GlusterFS comes with ABSOLUTELY NO WARRANTY. It is licensed to you under your choice of the GNU Lesser General Public License, version 3 or any later version (LGPLv3

Hi Soumya, We just had the opportunity to try the option of disabling the kernel-NFS and restarting glusterd to start gNFS. However the gluster demon crashes immediately on startup. What additional information besides what we provide below would help debugging this? Thanks, Pat -------- Forwarded Message -------- Subject: gluster-nfs crashing on start Date: Mon, 7 Aug 2017 16:05:09

----- Original Message ----- > From: "Pat Haley" <phaley at mit.edu> > To: "Soumya Koduri" <skoduri at redhat.com>, gluster-users at gluster.org, "Pranith Kumar Karampuri" <pkarampu at redhat.com> > Cc: "Ben Turner" <bturner at redhat.com>, "Ravishankar N" <ravishankar at redhat.com>, "Raghavendra

Hello People, I am trying to get one LAN-computer access an remote VPN. 10.0.66.x->my-firewall->----internet----<-remote-firewall<-customer-comp-with-officialIP http://www.shorewall.net/ports.htm does suggest to put "IPSEC" at the protocol field. though IPSEC is not recognized by /etc/protocols nothing bad, just a useless hint as u need to put "ESP" or

The ''firewall'' script currently in the /Shorewall CVS project: a) Is approximately 15% faster starting/restarting on my configuration -- please report your experiences with it. b) Reloads Traffic Control/Shaping as part of "shorewall refresh" c) Turns off the shell trace after an error has occured (except when the command being traced is "stop" or

apt-get sources are available at http://security.dsi.unimi.it/~lorenzo/debian.html. Thanks, Lorenzo! -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://shorewall.sf.net ICQ: #60745924 \ teastep@shorewall.net

I have a 3 nic setup with shorewall 1.4.8-1 running on redhat 9. My eth2 (dmz zone)has 7 secondary address attached to it. I can ping a machine in each subnet, dmz to net rules seem to be working fine on all machines.. I have my policy set as dmz to dmz accept. If I try to ping between subnets I get Nov 21 12:18:45 kbeewall kernel: Shorewall:FORWARD:REJECT:IN=eth2 OUT=eth2 SRC=172.17.0.2

Just a quick note for a few new features/fixes available on the Mongrel pre-release and a new document that covers nearly all the big features and configurations for Mongrel. First, the document is http://mongrel.rubyforge.org/docs/howto.html and it covers: * All the start command options including the fresh -G option to generate a config for -C. * The format and usage of the MIME type file (-m

I''ve been unable to check the svn repository for a week or more, I get "Can''t connect to host ''svn.davebalmain.com'': Connection refused". Anyone know what''s going on? -- Posted via http://www.ruby-forum.com/.

I have seen people on the list say you can yum groupinstall everything yet when I tried their method, it didn't work Is there actually a way other than making a script with all the info in it? - rh

I realize that the @everything packages option is now gone in CentOS 5.0 (ix86 and x86_64), but my experiments to date don't show how to practically simulate the same effect (and I have a good reason for doing so). I want all packages, all languages. If one installs from CD, and selects all packages and options, the resulting anaconda-ks.cfg file does not have a complete package list. For

Is it possible to somehow limit webrick access log (:AccessLog in HTTPServer). But I don''t want to log access to certain URL, which is served by specific servlet. To be clearer - I have a simple servlet, that just response hello and username of authenticated user, mounted on [server]/hello. This URL is used to monitor if the server is alive, so it''s accessed every five

We are considering moving our app to a "vendor everything" model: http://errtheblog.com/posts/50-vendor-everything I''m able to get the application to work fine this way, but, rake tasks don''t work unless I have the gems installed. Some of our rake tasks use the same libraries that the app does. What I''d like is a way to do "vendor everything" that

Hi Group Like others before me have posted to the group, I am trying to implement routes that have language as the first part of the path, without having to rewrite just about every url generating statement across the codebase (my own, plugins, tests, etc). Let''s start with an example: map.login ''/:lang/login'', :controller => ''sessions'', :action

Good morning, We recently fell back to the most recent build of asterisk 1.8 down from 11.3 and I believe we've crossed some sort of limit for 1.8. Our dialplan is 515723 entries long with 6263 distinct contexts. Both are loaded realtime via odbc (mysql). Previously at the end of a dialplan reload we would get a summary of how long it took to reload everything. Now it just shows the last line