[CentOS] Firewall question

2021-11-09 Thread Jerry Geis
Hi - When updating my CentOS 7 - firewalld why does the virt-manager loose connections to all GUI's ? I just close the virt-manager main window - select the virt-manager from gnome side panel and re-run - and then they all come back after you click on them - but why is the connection to the GUI

[CentOS] firewall-cmd - bug or bad design

2020-12-02 Thread Jon LaBadie
In my firewall I use an ipset as a geographical blacklist. A single addresses can be entered into the blacklist using CIDR notation or not, i.e. 111.222.111.222/32 OR 111.222.111.222 while a block of IP addresses can be entered using CIDR notation: 111.222.111.0/24 Both the ipset

Re: [CentOS] firewall questions

2020-06-23 Thread tbuchanan
working on it. some other issues got in the way of testing. -- Ted Buchanan Computer/Network Analyst - Vincennes University tbucha...@vinu.edu From: "Jon LaBadie" To: "Jon LaBadie" Date: 06/22/2020 04:57 PM Subject: Re: [CentOS] firewall questions Sen

Re: [CentOS] firewall questions

2020-06-22 Thread Jon LaBadie
On Sun, Jun 21, 2020 at 02:33:18PM -0500, Chuck Campbell wrote: > I'm running Centos 7.8.2003, with firewalld. > > I was getting huge numbers of ssh attempts per day from a few specific ip > blocks. > > The offenders are 45.0.0.0/24, 49.0.0.0/24, 51.0.0.0/24, 111.0.0.0/24 and > 118.0.0.0/24, and

Re: [CentOS] firewall questions

2020-06-21 Thread Erick Perez - Quadrian Enterprises
Please take a look at https://www.wireguard.com/quickstart/ we now reduced the attack vector to only the things offered to the public (https, smtp tls and imaps/s) On Sun, Jun 21, 2020 at 3:58 PM Pete Biggs wrote: > On Sun, 2020-06-21 at 16:47 -0400, mailist wrote: > > On 2020-06-21 15:33,

Re: [CentOS] firewall questions

2020-06-21 Thread Pete Biggs
On Sun, 2020-06-21 at 16:47 -0400, mailist wrote: > On 2020-06-21 15:33, Chuck Campbell wrote: > > I'm running Centos 7.8.2003, with firewalld. > > > > I was getting huge numbers of ssh attempts per day from a few specific > > ip blocks. > > If you can control the ssh clients, switch your port

Re: [CentOS] firewall questions

2020-06-21 Thread mailist
On 2020-06-21 15:33, Chuck Campbell wrote: I'm running Centos 7.8.2003, with firewalld. I was getting huge numbers of ssh attempts per day from a few specific ip blocks. If you can control the ssh clients, switch your port number to a non-standard port. Pick one in /etc/services that does

Re: [CentOS] firewall questions

2020-06-21 Thread Pete Biggs
On Sun, 2020-06-21 at 14:33 -0500, Chuck Campbell wrote: > I'm running Centos 7.8.2003, with firewalld. > > I was getting huge numbers of ssh attempts per day from a few specific > ip blocks. > > The offenders are 45.0.0.0/24, 49.0.0.0/24, 51.0.0.0/24, 111.0.0.0/24 > and 118.0.0.0/24, and they

Re: [CentOS] firewall questions

2020-06-21 Thread John Pierce
On Sun, Jun 21, 2020 at 12:33 PM Chuck Campbell wrote: > I'm running Centos 7.8.2003, with firewalld. > > I was getting huge numbers of ssh attempts per day from a few specific > ip blocks. > > The offenders are 45.0.0.0/24, 49.0.0.0/24, 51.0.0.0/24, 111.0.0.0/24 > and 118.0.0.0/24, > so just

[CentOS] firewall questions

2020-06-21 Thread Chuck Campbell
I'm running Centos 7.8.2003, with firewalld. I was getting huge numbers of ssh attempts per day from a few specific ip blocks. The offenders are 45.0.0.0/24, 49.0.0.0/24, 51.0.0.0/24, 111.0.0.0/24 and 118.0.0.0/24, and they amounted to a multiple thousands of attempts per day. I installed

Re: [CentOS] firewall help request

2020-06-17 Thread Tony Mountifield
In article , Paul Heinlein wrote: > On Tue, 16 Jun 2020, Leroy Tennison wrote: > > > I have a gateway machine (currently Centos 7 with IPV4 only) with two > > NICs. One is connected to the internet, the other to an internal > > network (10.0.0.0/24) of mixed hardware (windows7, android tablets,

Re: [CentOS] firewall help request (solved)

2020-06-17 Thread Simon Matter via CentOS
> At 03:47 PM 6/16/2020, Kenneth Porter wrote: >>The rule is in the wrong chain. The INPUT chain affects packets that >>terminate at the same machine. You want to block packets that will >>be passed on to the Internet, so your rule needs to be in the >>FORWARD chain. (The OUTPUT chain affects

Re: [CentOS] firewall help request (solved)

2020-06-16 Thread Kenneth Porter
--On Tuesday, June 16, 2020 5:20 PM -0700 david wrote: If someone can suggest a firewall-cmd equivalent, it would be nice. Alas, firewalld is targeted at end nodes and doesn't really provide much facility for routers. Its big advantage there is in setting up a reasonable default firewall

Re: [CentOS] firewall help request (solved)

2020-06-16 Thread david
At 03:47 PM 6/16/2020, Kenneth Porter wrote: The rule is in the wrong chain. The INPUT chain affects packets that terminate at the same machine. You want to block packets that will be passed on to the Internet, so your rule needs to be in the FORWARD chain. (The OUTPUT chain affects packets

Re: [CentOS] firewall help request

2020-06-16 Thread Kenneth Porter
The rule is in the wrong chain. The INPUT chain affects packets that terminate at the same machine. You want to block packets that will be passed on to the Internet, so your rule needs to be in the FORWARD chain. (The OUTPUT chain affects packets that originate at your machine.) Here's a nice

Re: [CentOS] firewall help request

2020-06-16 Thread Paul Heinlein
On Tue, 16 Jun 2020, Leroy Tennison wrote: I have a gateway machine (currently Centos 7 with IPV4 only) with two NICs. One is connected to the internet, the other to an internal network (10.0.0.0/24) of mixed hardware (windows7, android tablets, android phones, linux boxes) using NAT. I wish

Re: [CentOS] firewall help request

2020-06-16 Thread John Pierce
On Tue, Jun 16, 2020 at 1:26 PM david wrote: > > ... I'm assuming > that your advice about LAN represents the internal network because on > most routers, it is, and WAN is the internet connection. > > > yeah, LAN == Local Area Network, WAN == Wide Area Network, generally meaning the internet.

Re: [CentOS] firewall help request

2020-06-16 Thread david
At 12:30 PM 6/16/2020, John Pierce wrote: On Tue, Jun 16, 2020 at 12:26 PM david wrote: > > Examples of what I've tried, and then tested. None of them stopped > an outgoing SSH from an internal system. > >iptables -I INPUT -p tcp --dport 22 -s 10.0.0.0/24 -j DROP >iptables -I INPUT -p

[CentOS] firewall help request

2020-06-16 Thread Leroy Tennison
entries will likely be an order of magnitude greater than the actual packet count. From: CentOS on behalf of david Sent: Tuesday, June 16, 2020 2:21 PM To: CentOS mailing list Subject: [EXTERNAL] [CentOS] firewall help request CAUTION: This email originated from

Re: [CentOS] firewall help request

2020-06-16 Thread John Pierce
On Tue, Jun 16, 2020 at 12:26 PM david wrote: > > Examples of what I've tried, and then tested. None of them stopped > an outgoing SSH from an internal system. > >iptables -I INPUT -p tcp --dport 22 -s 10.0.0.0/24 -j DROP >iptables -I INPUT -p tcp --dport 22 -s 10.0.0.0/24 -j DROP > > >

[CentOS] firewall help request

2020-06-16 Thread david
Folks I'm struggling with my firewall settings, and would appreciate some help. I have a gateway machine (currently Centos 7 with IPV4 only) with two NICs. One is connected to the internet, the other to an internal network (10.0.0.0/24) of mixed hardware (windows7, android tablets, android

Re: [CentOS] Firewall trouble with Kickstart

2018-09-24 Thread Patrick Begou
Damned! I do not know how many time I check this line without finding my error! Thanks Mark :-) Mark Milhollan wrote: On Fri, 21 Sep 2018, Patrick Begou wrote: firewall --enabled --ssh --service=nfs --port=111:tcp,111:upd,875:tcp,875:upd udp not upd. /mark

Re: [CentOS] Firewall trouble with Kickstart

2018-09-21 Thread Mark Milhollan
On Fri, 21 Sep 2018, Patrick Begou wrote: > firewall --enabled --ssh --service=nfs --port=111:tcp,111:upd,875:tcp,875:upd udp not upd. /mark ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] firewall-config not functional

2016-06-08 Thread Jonathan Billings
On Jun 8, 2016, at 6:48 AM, Steve Clark wrote: > I must be missing something here, so the system comes up, ip(s) are assigned > to the interface, routes, etc then sometime later the switch comes up and you > ssh in. Never been a problem for me. Even with static

Re: [CentOS] firewall-config not functional

2016-06-08 Thread Steve Clark
On 06/07/2016 04:46 PM, Jonathan Billings wrote: On Jun 7, 2016, at 13:03, Emmett Culley wrote: I can see no use case for NetwortManager on our systems. All network connections are static. There are a couple reasons I still use NetworkManager on servers, but one

Re: [CentOS] firewall-config not functional

2016-06-07 Thread Emmett Culley
On 06/07/2016 01:46 PM, Jonathan Billings wrote: > On Jun 7, 2016, at 13:03, Emmett Culley wrote: >> >> I can see no use case for NetwortManager on our systems. All network >> connections are static. > > There are a couple reasons I still use NetworkManager on

Re: [CentOS] firewall-config not functional

2016-06-07 Thread m . roth
Frank Cox wrote: > On Tue, 7 Jun 2016 17:20:23 -0400 > m.r...@5-cent.us wrote: > >> Um, huh? ssh server;service network restart is certainly faster than a >> reboot. > > By what magical incantation will you ssh into a server with no current > network connection? > Plugging in my

Re: [CentOS] firewall-config not functional

2016-06-07 Thread Frank Cox
On Tue, 7 Jun 2016 17:20:23 -0400 m.r...@5-cent.us wrote: > Um, huh? ssh server;service network restart is certainly faster than a > reboot. By what magical incantation will you ssh into a server with no current network connection? -- MELVILLE THEATRE ~ Real D 3D Digital Cinema ~

Re: [CentOS] firewall-config not functional

2016-06-07 Thread m . roth
Jonathan Billings wrote: > On Jun 7, 2016, at 13:03, Emmett Culley > wrote: >> >> I can see no use case for NetwortManager on our systems. All network >> connections are static. > > There are a couple reasons I still use NetworkManager on servers, but one > big one is

Re: [CentOS] firewall-config not functional

2016-06-07 Thread Jonathan Billings
On Jun 7, 2016, at 13:03, Emmett Culley wrote: > > I can see no use case for NetwortManager on our systems. All network > connections are static. There are a couple reasons I still use NetworkManager on servers, but one big one is that the 'network' service runs

Re: [CentOS] firewall-config not functional

2016-06-07 Thread cpolish
On 2016-06-07 10:03, Emmett Culley wrote: > On 06/07/2016 05:05 AM, James Hogarth wrote: > > On 7 Jun 2016 12:44, "Emmett Culley" wrote: > >> > >> I have a number of machines (hardware and VMs) running CentOS 7. I all > > cases firewall-config is not functional. Just

Re: [CentOS] firewall-config not functional

2016-06-07 Thread Emmett Culley
On 06/07/2016 05:05 AM, James Hogarth wrote: > On 7 Jun 2016 12:44, "Emmett Culley" wrote: >> >> I have a number of machines (hardware and VMs) running CentOS 7. I all > cases firewall-config is not functional. >> >> First, the service check boxes are not functional.

Re: [CentOS] firewall-config not functional

2016-06-07 Thread James Hogarth
On 7 Jun 2016 12:44, "Emmett Culley" wrote: > > I have a number of machines (hardware and VMs) running CentOS 7. I all cases firewall-config is not functional. > > First, the service check boxes are not functional. When you click on one, it don't change to

[CentOS] firewall-config not functional

2016-06-07 Thread Emmett Culley
I have a number of machines (hardware and VMs) running CentOS 7. I all cases firewall-config is not functional. First, the service check boxes are not functional. When you click on one, it don't change to "checked", and nothing changes on the firewall. However you do see a "Changes

[CentOS] Firewall-config NetworkManager Problem (Centos-7( 1))

2015-04-06 Thread Günther J . Niederwimmer
Hello I installed the Firewall-config on a new system and have bad Errors The firewall-config brake with a error line 53 can't load NetworkManager and on a reboot I have this Message. ABRT hat 1 Fehler festgestellt. (Für weitere Informationen: abrt-cli list -- since 1428305986) [root@ipa1 ~]#

Re: [CentOS] Firewall question

2014-06-30 Thread Deno Sayangda Dangpaliw
Hi, There's something weird happening to my CentOS VMs, cannot switch back to GUI. Black screen with a single underscore character at top left of the screen. Ok so I have ESXI 5.1 host, with 3 VM all running CentOS. I rebooted the esxi host yesterday for a power maintenance. All went well...

[CentOS] Firewall question

2014-06-26 Thread Jerry Geis
I have a firewall rule to drop packets from certain addresses: (email spam) my /etc/sysconfig/iptables begins as: # Generated by iptables-save v1.4.7 on Thu Jun 26 09:11:09 2014 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [1:148] -A INPUT -m pkttype --pkt-type multicast -j

Re: [CentOS] Firewall question

2014-06-26 Thread Steve Clark
On 06/26/2014 09:18 AM, Jerry Geis wrote: I have a firewall rule to drop packets from certain addresses: (email spam) my /etc/sysconfig/iptables begins as: # Generated by iptables-save v1.4.7 on Thu Jun 26 09:11:09 2014 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT

Re: [CentOS] Firewall question

2014-06-26 Thread Jerry Geis
yes I am seeing it hit. iptables --list -n -v | grep 198.101 8 416 DROP all -- * * 198.101.11.0/24 0.0.0.0/0 Jerry ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Firewall question

2014-06-26 Thread Private Sender
Try watch iptables -nvL INPUT Do you see anything? Also try moving your ACCEPT statements below all of your drops. Iptables operates in sequential order, from the top down. ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] Firewall question

2014-06-26 Thread Jerry Geis
Actually I think I was wrong... Somehow the mail is landing on my box (from an address I am not blocking) and this particular email is requesting going OUT of my box. Seems the firewall operating fine. I just looked at it incorrectly. Jerry ___ CentOS

Re: [CentOS] Firewall/Gateway Hardware Question

2013-10-16 Thread Steve Clark
with Atom processors but I'll look in to it. Thanks for the info. -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of SilverTip257 Sent: Tuesday, October 15, 2013 12:36 PM To: CentOS mailing list Subject: Re: [CentOS] Firewall/Gateway

Re: [CentOS] Firewall/Gateway Hardware Question

2013-10-16 Thread Mihamina RKTMB
On 10/15/2013 07:29 PM, Terre Porter wrote: I can get this for AMD FX-8120 Zambezi 3.1GHz Socket AM3+ 125W Eight-Core Desktop Processor for under $120 (it's on sale), would it work ? Except for HTTP cache, my opinion is an OpenWRT box will do it. If you need an HDD, I would go for a Lanner

[CentOS] Firewall/Gateway Hardware Question

2013-10-15 Thread Terre Porter
I've given up on getting the other machine to work so I'm looking at building a new one. The machine will be a firewall/gateway running NAT, Web Proxy with Dansguardian, DHCP, DNS, NTP and VPN (~6 clients). I read so much about VPN encryption and the processor needs, now I am unsure if this

Re: [CentOS] Firewall/Gateway Hardware Question

2013-10-15 Thread SilverTip257
On Tue, Oct 15, 2013 at 12:29 PM, Terre Porter tpor...@webpage-builders.com wrote: I've given up on getting the other machine to work so I'm looking at building a new one. The machine will be a firewall/gateway running NAT, Web Proxy with Dansguardian, DHCP, DNS, NTP and VPN (~6 clients).

Re: [CentOS] Firewall/Gateway Hardware Question

2013-10-15 Thread Terre Porter
I've not worked with Atom processors but I'll look in to it. Thanks for the info. -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of SilverTip257 Sent: Tuesday, October 15, 2013 12:36 PM To: CentOS mailing list Subject: Re: [CentOS

Re: [CentOS] Firewall/Gateway Hardware Question

2013-10-15 Thread Steve Clark
[mailto:centos-boun...@centos.org] On Behalf Of SilverTip257 Sent: Tuesday, October 15, 2013 12:36 PM To: CentOS mailing list Subject: Re: [CentOS] Firewall/Gateway Hardware Question On Tue, Oct 15, 2013 at 12:29 PM, Terre Porter tpor...@webpage-builders.com wrote: I've given up on getting

Re: [CentOS] Firewall/Gateway Hardware Question

2013-10-15 Thread Fred Smith
On Tue, Oct 15, 2013 at 02:31:03PM -0400, Steve Clark wrote: Hi, we are running 51 ipsec vpns on an Atom D510 at 1.66ghz and the load average is .07. HTH, Steve Some years back I used to run Smoothwall/GPL as a home firewall/router on things such as 90 MHz pentiums (with 64 or even 128

Re: [CentOS] Firewall/Gateway Hardware Question

2013-10-15 Thread SilverTip257
...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of SilverTip257 Sent: Tuesday, October 15, 2013 12:36 PM To: CentOS mailing list Subject: Re: [CentOS] Firewall/Gateway Hardware Question On Tue, Oct 15, 2013 at 12:29 PM, Terre Porter tpor...@webpage-builders.com wrote: I've given

Re: [CentOS] Firewall/Gateway Hardware Question

2013-10-15 Thread S.Tindall
On Tue, 2013-10-15 at 18:05 -0400, SilverTip257 wrote: @Steve: Based on your statement, I figure you do not have a crypto accelerator and the CPU is handling all the crypto. Correct? @Terre: I don't know how VIA C7 CPUs stack up against the Intel Atom CPUs in terms of performance, but

Re: [CentOS] Firewall/Gateway Hardware Question

2013-10-15 Thread Terre Porter
Interesting looking hardware... thanks for the info -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of S.Tindall Sent: Tuesday, October 15, 2013 8:29 PM To: CentOS mailing list Subject: Re: [CentOS] Firewall/Gateway Hardware Question

Re: [CentOS] Firewall/Gateway Hardware Question

2013-10-15 Thread Terre Porter
PM To: CentOS mailing list Subject: Re: [CentOS] Firewall/Gateway Hardware Question On Tue, Oct 15, 2013 at 2:31 PM, Steve Clark scl...@netwolves.com wrote: Hi, we are running 51 ipsec vpns on an Atom D510 at 1.66ghz and the load average is .07. @Steve: Based on your statement, I figure you

Re: [CentOS] Firewall/Gateway Hardware Question

2013-10-15 Thread John R Pierce
On 10/15/2013 3:05 PM, SilverTip257 wrote: I don't know how VIA C7 CPUs stack up against the Intel Atom CPUs in terms of performance, but they're low power consuming x86 processors. And there's the VIA Padlock [0] security/encryption engine. I think the Atoms pretty much beat the living

[CentOS] Firewall will not disable - stumped!

2013-07-07 Thread Bob Metelsky
very perplexed here - I need to turn off iptables. Ive tried service iptables save service iptables stop chkconfig iptables off service ip6tables save service ip6tables stop chkconfig ip6tables off edited OPGX280 ~ # cat /etc/sysconfig/system-config-firewall # Configuration file for

Re: [CentOS] Firewall will not disable - stumped!

2013-07-07 Thread Earl A Ramirez
On 7 July 2013 20:57, Bob Metelsky bob.metel...@gmail.com wrote: very perplexed here - I need to turn off iptables. Ive tried service iptables save service iptables stop chkconfig iptables off service ip6tables save service ip6tables stop chkconfig ip6tables off edited OPGX280 ~ # cat

Re: [CentOS] Firewall will not disable - stumped!

2013-07-07 Thread Bob Metelsky
this is very strange I ran your flush command.. worked untill reboot I came across this article http://www.thegeekstuff.com/2011/01/redhat-iptables-flush/ Basically tell me how to save a wide open rules file - I did this and behaved like the doc describes This is what I have now OPGX280

Re: [CentOS] Firewall will not disable - stumped!

2013-07-07 Thread Alexander Dalloz
Am 07.07.2013 14:57, schrieb Bob Metelsky: very perplexed here - I need to turn off iptables. Ive tried Why do you have to turn off the local firewall? service iptables save service iptables stop chkconfig iptables off service ip6tables save service ip6tables stop chkconfig ip6tables

Re: [CentOS] Firewall will not disable - stumped!

2013-07-07 Thread Markus Falb
On 07.Jul.2013, at 14:57, Bob Metelsky wrote: very perplexed here - I need to turn off iptables. Ive tried … Yet - when I reboot iptables gets started - if I run ... Note -- 192.168.122.0/24 is NOT my network This could be the default network from libvirt. The kvm host does NAT from

Re: [CentOS] Firewall will not disable - stumped!

2013-07-07 Thread Bob Metelsky
On Sun, Jul 7, 2013 at 9:38 AM, Alexander Dalloz ad+li...@uni-x.org wrote: Am 07.07.2013 14:57, schrieb Bob Metelsky: very perplexed here - I need to turn off iptables. Ive tried Why do you have to turn off the local firewall? OPGX280 ~ :( # cat /etc/selinux/config SELINUX=disabled

Re: [CentOS] Centos Firewall - router with virtual IP

2011-11-05 Thread me
On Fri, 4 Nov 2011, Fajar Priyanto wrote: On Fri, Nov 4, 2011 at 10:15 AM, KevinO ke...@kevino.org wrote: anyways, whatever, yes, you can do it with iptables, but not all off the shelf firewall script generators will support multiple LAN subnets.   I usually write my own iptables rulesets. I

Re: [CentOS] Centos Firewall - router with virtual IP

2011-11-05 Thread Fajar Priyanto
On Sat, Nov 5, 2011 at 11:19 PM, m...@tdiehl.org wrote: Does fwbuilder have that function? Fwbuilder does indeed have time objects in it, although I have never used them. The docs at http://fwbuilder.org are pretty extensive and the devs hang out on the mailing lists and regularly answer

Re: [CentOS] Centos Firewall - router with virtual IP

2011-11-03 Thread News
Il 03/11/2011 3.34, Fajar Priyanto ha scritto: Hi all, I haven't found anything in Google about this. I'm creating a firewall router with Centos with few virtual IP using iptables. May I ask for your experience? Is there any pitfall or bad side of using virtual IP for this purpose? I'm

Re: [CentOS] Centos Firewall - router with virtual IP

2011-11-03 Thread Lorenzo Martínez Rodríguez
El 03/11/11 11:16, News escribió: Il 03/11/2011 3.34, Fajar Priyanto ha scritto: Hi all, I haven't found anything in Google about this. I'm creating a firewall router with Centos with few virtual IP using iptables. May I ask for your experience? Is there any pitfall or bad side of using

Re: [CentOS] Centos Firewall - router with virtual IP

2011-11-03 Thread Ljubomir Ljubojevic
Vreme: 11/03/2011 11:16 AM, News piše: Il 03/11/2011 3.34, Fajar Priyanto ha scritto: Hi all, I haven't found anything in Google about this. I'm creating a firewall router with Centos with few virtual IP using iptables. May I ask for your experience? Is there any pitfall or bad side of

Re: [CentOS] Centos Firewall - router with virtual IP

2011-11-03 Thread me
On Thu, 3 Nov 2011, Lorenzo Martínez Rodríguez wrote: El 03/11/11 11:16, News escribió: Hi all, I haven't found anything in Google about this. I'm creating a firewall router with Centos with few virtual IP using iptables. May I ask for your experience? Is there any pitfall or bad side of

Re: [CentOS] Centos Firewall - router with virtual IP

2011-11-03 Thread John R Pierce
On 11/02/11 7:34 PM, Fajar Priyanto wrote: I'm creating a firewall router with Centos with few virtual IP using iptables. May I ask for your experience? Is there any pitfall or bad side of using virtual IP for this purpose? I'm using few virtual IP to accommodate few subnets that go through

Re: [CentOS] Centos Firewall - router with virtual IP

2011-11-03 Thread Fajar Priyanto
On Fri, Nov 4, 2011 at 6:59 AM, John R Pierce pie...@hogranch.com wrote: On 11/02/11 7:34 PM, Fajar Priyanto wrote: I'm creating a firewall router with Centos with few virtual IP using iptables. May I ask for your experience? Is there any pitfall or bad side of using virtual IP for this

Re: [CentOS] Centos Firewall - router with virtual IP

2011-11-03 Thread John R Pierce
On 11/03/11 5:43 PM, Fajar Priyanto wrote: Now, I'm adding some virtual interface eth1:0, eth1:1... so on to accommodate new subnets created in the LAN. whats the point of having multiple subnets on the same physical LAN segment ? if you want to isolate separate local networks, you really

Re: [CentOS] Centos Firewall - router with virtual IP

2011-11-03 Thread KevinO
On 11/03/2011 06:54 PM, John R Pierce wrote: On 11/03/11 5:43 PM, Fajar Priyanto wrote: Now, I'm adding some virtual interface eth1:0, eth1:1... so on to accommodate new subnets created in the LAN. whats the point of having multiple subnets on the same physical LAN segment ? if you want

Re: [CentOS] Centos Firewall - router with virtual IP

2011-11-03 Thread Fajar Priyanto
On Fri, Nov 4, 2011 at 10:15 AM, KevinO ke...@kevino.org wrote: anyways, whatever, yes, you can do it with iptables, but not all off the shelf firewall script generators will support multiple LAN subnets.   I usually write my own iptables rulesets. I can say first hand that fwbuilder easily

Re: [CentOS] Centos Firewall - router with virtual IP

2011-11-03 Thread KevinO
On 11/03/2011 08:03 PM, Fajar Priyanto wrote: On Fri, Nov 4, 2011 at 10:15 AM, KevinO ke...@kevino.org wrote: anyways, whatever, yes, you can do it with iptables, but not all off the shelf firewall script generators will support multiple LAN subnets. I usually write my own iptables rulesets.

[CentOS] Centos Firewall - router with virtual IP

2011-11-02 Thread Fajar Priyanto
Hi all, I haven't found anything in Google about this. I'm creating a firewall router with Centos with few virtual IP using iptables. May I ask for your experience? Is there any pitfall or bad side of using virtual IP for this purpose? I'm using few virtual IP to accommodate few subnets that go

Re: [CentOS] 2 questions on CentOS firewall

2011-07-21 Thread Timothy Murphy
Ljubomir Ljubojevic wrote: I take a look at Billion manual. It seams that you have to use it's firewall to add an allow rule for protocol icmp? and source IP 0.0.0.0. Destination might be also 0.0.0.0, haven't had the time to study it. This should allow pings from outside. Thanks very much.

Re: [CentOS] firewall?

2011-07-20 Thread John Hodrien
On Wed, 20 Jul 2011, hadi motamedi wrote: If we cannot find the exact application name for centos, say MATLAB for centos does not exist, so we must search for 'Mathematics laboratory for centos' ? Or if Pspice for centos does not exist so we must search for 'Electronics circuit schematics

Re: [CentOS] firewall?

2011-07-20 Thread hadi motamedi
On 7/20/11, John Hodrien j.h.hodr...@leeds.ac.uk wrote: On Wed, 20 Jul 2011, hadi motamedi wrote: If we cannot find the exact application name for centos, say MATLAB for centos does not exist, so we must search for 'Mathematics laboratory for centos' ? Or if Pspice for centos does not exist

Re: [CentOS] firewall?

2011-07-20 Thread Keith Roberts
On Wed, 20 Jul 2011, hadi motamedi wrote: *snip* So you've installed Octave but it's not as powerful as MATLAB on windows. I know this is crazy talk, but have you tried MATLAB on CentOS? There is no one-to-one relationship between applications on one OS and on another. Hi Hadi. If you are

Re: [CentOS] firewall?

2011-07-20 Thread John Hodrien
On Wed, 20 Jul 2011, hadi motamedi wrote: You are right. But here, people use windows more than Linux. So hearing about MATLAB for windows comes natural. I need to switch completely to my centos so I need to do everything with my centos as I did them on my windows. It sounds a little bit hard

Re: [CentOS] 2 questions on CentOS firewall

2011-07-20 Thread Timothy Murphy
MicroServer attached to the modem/router? I don't see any reference to ICMP on the modem web-page. On the other hand the CentOS firewall seems to allow ICMP unless explicitly rejected (which I haven't done). Surely it would be slightly odd for a modem/router to reject pings by default? Is there any

Re: [CentOS] 2 questions on CentOS firewall

2011-07-20 Thread Ljubomir Ljubojevic
). If you need to be able to ping CemtOS system and not Billion, then you should set modem to bridge mode and pass public IP to CentOS. But caveat is that this would mean that if you turn on CentOS firewall or set it improperly you would be wide open, and that you will not be able to willfully bypass

Re: [CentOS] 2 questions on CentOS firewall

2011-07-20 Thread Markus Falb
On 20.7.2011 12:51, Timothy Murphy wrote: Further to my question, how can I determine if it is the Billion 5200S modem/router that is preventing pings, or if it is the CentOS-6 MicroServer attached to the modem/router? ... Is there any simple way, short of using something like ethereal, of

Re: [CentOS] 2 questions on CentOS firewall

2011-07-20 Thread Always Learning
On Wed, 2011-07-20 at 14:21 +0200, Ljubomir Ljubojevic wrote: Ljubomir Ljubojevic (Love is in the Air) Congratulations. Are you planning to invite us to the wedding :-) -- With best regards, Paul. England, EU. ___ CentOS mailing list

Re: [CentOS] firewall?

2011-07-20 Thread Marko Vojinovic
On Wednesday 20 July 2011 05:07:23 hadi motamedi wrote: If we cannot find the exact application name for centos, say MATLAB for centos does not exist, so we must search for 'Mathematics laboratory for centos' ? MATLAB stands for *matrix* laboratory, not mathematics. See

Re: [CentOS] firewall?

2011-07-20 Thread m . roth
Marko Vojinovic wrote: On Wednesday 20 July 2011 05:07:23 hadi motamedi wrote: If we cannot find the exact application name for centos, say MATLAB for centos does not exist, so we must search for 'Mathematics laboratory for centos' ? MATLAB stands for *matrix* laboratory, not mathematics.

Re: [CentOS] 2 questions on CentOS firewall

2011-07-20 Thread Les Mikesell
. On the other hand the CentOS firewall seems to allow ICMP unless explicitly rejected (which I haven't done). Surely it would be slightly odd for a modem/router to reject pings by default? Do you only have one public IP? This sort of router is generally configured to do one-many source nat for a private

Re: [CentOS] 2 questions on CentOS firewall

2011-07-20 Thread Ljubomir Ljubojevic
Always Learning wrote: On Wed, 2011-07-20 at 14:21 +0200, Ljubomir Ljubojevic wrote: Ljubomir Ljubojevic (Love is in the Air) Congratulations. Are you planning to invite us to the wedding :-) Hehehehe, no. My first name (Ljubomir) is old Slavic name that means He who loves peace,

Re: [CentOS] firewall?

2011-07-20 Thread Ljubomir Ljubojevic
Les Mikesell wrote: The biggest searchable, up to date collection of open source software project descriptions is probably http://freshmeat.net, but once you locate an interesting project you might want to see if you can find an RPM-packaged version at EPEL, rpmforge, etc. for easy

Re: [CentOS] firewall?

2011-07-20 Thread m . roth
Ljubomir Ljubojevic wrote: Les Mikesell wrote: snip I use http://rpm.pbone.net/ to search for CentOS/RHEL and Fedora packages. It says that there is matlab 7.4.0 rpm for Fedora 5 and 10-15. snip Couple problems: first, it *is* COTS, and if you live in a country that cares, you could be in

Re: [CentOS] firewall?

2011-07-20 Thread John Hodrien
On Wed, 20 Jul 2011, Ljubomir Ljubojevic wrote: I use http://rpm.pbone.net/ to search for CentOS/RHEL and Fedora packages. Valid. It says that there is matlab 7.4.0 rpm for Fedora 5 and 10-15. Fedora 5 version should be good for CentOS 5 , and Fedora 12 package for CentOS 6. Link for

Re: [CentOS] firewall?

2011-07-20 Thread Ljubomir Ljubojevic
John Hodrien wrote: On Wed, 20 Jul 2011, Ljubomir Ljubojevic wrote: I use http://rpm.pbone.net/ to search for CentOS/RHEL and Fedora packages. Valid. It says that there is matlab 7.4.0 rpm for Fedora 5 and 10-15. Fedora 5 version should be good for CentOS 5 , and Fedora 12 package for

Re: [CentOS] firewall?

2011-07-20 Thread John Hodrien
On Wed, 20 Jul 2011, Ljubomir Ljubojevic wrote: OK. If it needs license, what would be the harm if you install (newer) version from rpm? Their source RPM is actually nosrc.rpm so they just package it for easier install. I was assuming this when I suggested the packages. What I meant was,

Re: [CentOS] 2 questions on CentOS firewall

2011-07-20 Thread Timothy Murphy
Markus Falb wrote: I would use tcpdump on the CentOS Server to be sure the icmp echo requests are arriving or not. tcpdump is something like ethereal but it could be as easy as $ tcpdump -l proto \\icmp or $ tcpdump -l proto \\icmp and host sourceip or $ tcpdump -li ethX proto \\icmp

Re: [CentOS] 2 questions on CentOS firewall

2011-07-20 Thread Ljubomir Ljubojevic
Timothy Murphy wrote: Markus Falb wrote: I would use tcpdump on the CentOS Server to be sure the icmp echo requests are arriving or not. tcpdump is something like ethereal but it could be as easy as $ tcpdump -l proto \\icmp or $ tcpdump -l proto \\icmp and host sourceip or $ tcpdump

Re: [CentOS] 2 questions on CentOS firewall

2011-07-20 Thread Timothy Murphy
it with set IP). If you need to be able to ping CemtOS system and not Billion, then you should set modem to bridge mode and pass public IP to CentOS. But caveat is that this would mean that if you turn on CentOS firewall or set it improperly you would be wide open, and that you will not be able

Re: [CentOS] 2 questions on CentOS firewall

2011-07-20 Thread Timothy Murphy
Timothy Murphy wrote: So I assume the modem is rejecting the ICMP packets. As I said, I don't see anything about this in the modem documentation or on the modem web-site. I suppose another possibility is that some site along the way rejects ICMP packets? traceroute seems to timeout in Milan:

Re: [CentOS] 2 questions on CentOS firewall

2011-07-20 Thread Ljubomir Ljubojevic
Timothy Murphy wrote: Timothy Murphy wrote: So I assume the modem is rejecting the ICMP packets. As I said, I don't see anything about this in the modem documentation or on the modem web-site. I suppose another possibility is that some site along the way rejects ICMP packets?

Re: [CentOS] firewall?

2011-07-19 Thread John Hodrien
On Sun, 17 Jul 2011, Always Learning wrote: If using SSH, FTP, phpmyadmin etc. etc. then DO NOT use the standard ports. Allocate a different IP address (if you have several) and use a non-web IP address for SSH and a different non-web IP address for phpmyadmin etc. WITH non-standard ports

Re: [CentOS] firewall?

2011-07-19 Thread hadi motamedi
On 7/19/11, John Hodrien j.h.hodr...@leeds.ac.uk wrote: On Sun, 17 Jul 2011, Always Learning wrote: If using SSH, FTP, phpmyadmin etc. etc. then DO NOT use the standard ports. Allocate a different IP address (if you have several) and use a non-web IP address for SSH and a different non-web IP

Re: [CentOS] firewall?

2011-07-19 Thread John Hodrien
On Tue, 19 Jul 2011, hadi motamedi wrote: Dear All With respect to the references you gave me, I figured out to add the following line to my /etc/sysconfig/iptables : -A RH-Firewall-1-INPUT -p udp -m udp --dport 53 -j ACCEPT Then I issued: #service iptables restart And now the windows

Re: [CentOS] firewall?

2011-07-19 Thread John Doe
From: hadi motamedi motamed...@gmail.com centos. Can you please let me know where powerful centos stuffs for various purposes can be selected and installed from the internet? Hum... powerful stuff for various purposes is usually mysterious secret knowledge handed from masters to disciples...

Re: [CentOS] firewall?

2011-07-19 Thread hadi motamedi
On 7/19/11, John Doe jd...@yahoo.com wrote: From: hadi motamedi motamed...@gmail.com centos. Can you please let me know where powerful centos stuffs for various purposes can be selected and installed from the internet? Hum... powerful stuff for various purposes is usually mysterious secret

  1   2   3   >