similar to: configuring dhcp-relay / Shorewall

I made the following adjustments to /etc/shorewall/common.def (1.3.13 with all relevant patches). ############################################################################ # Shorewall 1.3 -- /etc/shorewall/common.def # # This file defines the rules that are applied before a policy of # DROP or REJECT is applied. In addition to the rules defined in this file, # the firewall will also define a

hi everybody in my libvirtd I use bridge with route forward mode, Problem for me is dhcrelay.service on host which is starting before libvirtd thus not listening on libvirt interface. OS is RHEL7. I wonder if you know how to fix it, besides restarting dhcrelay that is. many thanks

hi everybody I'm looking at my setup and got stuck I have a box with two NICs on the same subnet, and another box similar, also two NICs on one subnet, all four NICs are on the same subnet. Now, that second box has also a virtual NIC (libvirtd's bridge route mode) and VMs guests are using it, traffic to that virtual net is routed via 1st real NIC. This second box dhcrelays to the

Evening all, First: Obligatory thanks to Tom. Shorewall is GREAT! I''ve got it on 3 machines now and love it. (Just because they are obligatory does not mean they are not heart-felt.) On my main web server, I am constantly scanning my log files for worm-signs. Requests for default.ida, any .exe, there are several others, you probably have your favorite. I got tired of doing it by hand

In our company's W2K-domain we decided to put all roaming profiles on Samba-servers (RH 9.0 / samba 2.2.8) The Samba-servers are configured for using DOMAIN-security. Part of our /etc/smb.conf look like [Profiles] path = /usr/local/samba/profiles comment = Profile-share browseable = no writeable = yes create mode = 0600 directory mode = 0700 We simply copied al the "old"

Having some major troubles with smb and making it a PDC For 2 weeks now I have been testing, and retesting. At one point I had it all working except for password changing. Has anyone goten Samba 3.0.4 to work correctly as a PDC with an smbpasswd back ground (not pam or ldap). If so could you please send me a working copy of your SMB file (only core components needed, no need for shares or

Hy there, i have a centos (4.?) Box with nightly yum update enabled. Last night, it did an upgrade to 4.7 leading to several problem i.e. not respawning the dhcrelay, which is needed on this box. Can I control the update policy not to upgrade to new releases in the nightly updates? I would like do to nightly updates, but make release upgrades manual (I get a new kernel, so I have to reboot

I have just set up Samba 3.0.4 from scratch, I am running Mandrake 10, and did not install its default 3.0.2a. When I try and jpoin a domain, everything works right up to the add user portion. >From the XP machine I am able to complete the following steps 1. Enter windws username and domain information 2. Add the machine name to the domain (it is created on the linux box, and entered into

I'm running across the same weirdness mentioned in the "pxe weirdness" thread in the archives: http://syslinux.zytor.com/archives/2003-July/002229.html I couldn't find any followups to the issue. Was it a misconfiguration error? My setup is similar to James': I'm attempting to do a PXE install using DHCP sent via dhcrelay. I get the right IP, netmask, etc. but get

Hello Every One! I need some advices with a problem i have. I''m working in a room from a department where the connection to the Internet is given by a NAT router and the IPs are given by a DHCP server. There are no firewall in the department so i''m trying to make a Firewall and a traffic shaper for all the PCs in my room. Because i don''t have access to the DHCP

Petr, It works perfectly! But I still have a question; I have fit the following data; x,y,z 1,10,11 2,11,15 3,12,21 4,13,29 5,14,39 6,15,51 7,16,65 8,17,81 9,18,99 10,19,119 >dat.lm <- lm(z~I(x^2)+y, data=dat) >dat.lm Call: lm(formula = z ~ I(x^2) + y, data = dat) Coefficients: (Intercept) I(x^2) y 1.841e-14 1.000e+00 1.000e+00 How do I create the

Dear r heper, How can I change the strip text, for example (16,23] in the following example, to other more informative text such as "high level" on the fly? library(effects) Cowles$ex2 <- cut(Cowles$extraversion,3) mod.cowles <- glm(volunteer ~ sex+neuroticism*ex2,data=Cowles, family=binomial) eff.cowles <- allEffects(mod.cowles) plot(eff.cowles,

I know that this is not a pxelinux/syslinux question (yet), but I am having a weird issue with a HP ML370. It is using HP UNDI PXE 2.1 (build 082) v 3.1.15 I successfully get an IP address from my DHCP server, but the machine fails when it attempts to make it's TFTP connection with: "PXE-E32 - TFTP Open timeout" It never gets the pxelinux.0 file. The odd thing I noticed was

I'm trying to join a Samba 3.0.4 (compiled from source on Debian) to an Active Directory as a member server. I believe Kerberos is configured correctly as kinit creates a ticket for the realm. Executables appear to have support for Kerberos and LDAP (smbd -b | grep KRB and grep LDAP) return OK. When I try to join the AD with net ads join -U myadminusername I'm prompted for my

How would I use Big Brother with Shorewall and my loc and dmz zones to monitor hosts in both zones? If Big Brother''s server is on my LAN (loc) is it "safe" to forward the bb port from the dmz to the LAN? What would the security risks of this be? Common sense says that it may not be a good idea to forward stuff from the dmz to the LAN, but I''m inexperienced and unsure

Okay. I may be missing something; from what you explicitly write about subnets, it sounds like you only have one, but if you don't have two subnets, why do you need a DHCP relay? SO. Assuming you have two subnets: * It sounds as if your DHCP request is generating an ACK. * I'm 99% sure your ACK has to traverse the DHCP helper and wend its way back to the originating host. So

I understand that I need to have a (in this case) square matrix with all the data. But the question now is; - can the contourplot not interpolate the missing values or alternatively - I have fit a model to the z data (z = 100 + 0.5x + 0.5y). How can I make from this model a "square" matrix z to make a contour plot? Kind regards, Darius Blaszijk ----- Original Message ----- From:

I have a process where I am creating a effects plot similar to the cowles effect example. I would like to add the point estimates to the effects plot, can someone show me the correct syntax. I have included the "R" effects example, so you can show me the correct syntax. Thanks mod.cowles <- glm(volunteer ~ sex + neuroticism*extraversion, data=Cowles, family=binomial)

Although the parameterized samples have allowed people to get a firewall up and running quickly, they have unfortunately set the wrong level of expectation among those who have used them. I am therefore withdrawing support for the samples and I am recommending that they not be used in new Shorewall installations. -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \

Hi, I''m setting up a router (linux, debian-sarge), which shall relay dhcp requests from all subnets to a central DHCP server. The general stuff is solved, i.e. I can ping from any connected machine to any other including the NICs of the router itself. All firewall tables (including nat and mangle) are set to ACCEPT and flushed. On my model system I have the NIC 172.16.1.121 (eth1),