GnomeMeeting and firewalls...

2003-08-27 Thread Marc Boorshtein
Is there any way to setup iptables to work with GnomeMeeting/NetMeeting? Thanks Marc Boorshtein -- Marc Boorshtein <[EMAIL PROTECTED]> -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list

Re: kickstart and firewalls

2003-08-21 Thread jurvis lasalle
I tried your line Mr. Dixon, but to no avail. It only opened holes for dhcp and ssh. Thank you for suggesting it though (I appreciate your time). The kickstart file I started with was generated by the installer after a manual install and placed in /root/anaconda-ks.cfg. There seems to be

Re: kickstart and firewalls

2003-08-20 Thread Jason Dixon
On Wed, 2003-08-20 at 17:42, jurvis lasalle wrote: > i'm kickstarting some computers and need to open up ports 111 and 6000 > for NIS and x11. i have this line in my kickstart file: > firewall --medium --dhcp --port=111:tcp --port=6000:tcp --port=ssh:tcp > > this does open holes for dhcp and ssh

kickstart and firewalls

2003-08-20 Thread jurvis lasalle
i'm kickstarting some computers and need to open up ports 111 and 6000 for NIS and x11. i have this line in my kickstart file: firewall --medium --dhcp --port=111:tcp --port=6000:tcp --port=ssh:tcp this does open holes for dhcp and ssh, but not NIS or x11. i have replaced the 111 with sunrpc a

Re: Firewalls

2003-01-22 Thread Joshua Schmidlkofer
On Mon, 2003-01-20 at 10:34, Tibbetts, Ric wrote: > All; > I'll be building a new server soon, based on Redhat. What firewalling > software is good these days? I've heard good things about firestarter. > Is it worth looking into, or is there something better/easier. > > Thanks! > > Ric h

Re: Firewalls

2003-01-21 Thread papapep
www.shorewall.net And the Bering release of LEAF (leaf.sourceforge.net) includes the Shorewall package. I'm taking a look at it and it looks great !!! Josep Sànchez [papapep] -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/ma

Re: Firewalls

2003-01-20 Thread Bret Hughes
On Mon, 2003-01-20 at 13:13, gabriel wrote: > On January 20, 2003 01:34 pm, Tibbetts, Ric wrote: > > All; > > I'll be building a new server soon, based on Redhat. What firewalling > > software is good these days? I've heard good things about firestarter. > > Is it worth looking into, or is there so

Re: Firewalls

2003-01-20 Thread gabriel
On January 20, 2003 01:34 pm, Tibbetts, Ric wrote: > All; > I'll be building a new server soon, based on Redhat. What firewalling > software is good these days? I've heard good things about firestarter. > Is it worth looking into, or is there something better/easier. i did it the hard way and buil

RE: Firewalls

2003-01-20 Thread Burke, Thomas G.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I still use ipchains... Check out http://tomii.dnsalias.com/firewall.txt - -Original Message- From: Tibbetts, Ric [mailto:[EMAIL PROTECTED]] Sent: Monday, January 20, 2003 1:35 PM To: Redhat List Subject: Firewalls All; I'll be bui

RE: Firewalls

2003-01-20 Thread Ferguson, Michael
giptables works well for me. found at openna.com -Original Message- From: Tibbetts, Ric [mailto:[EMAIL PROTECTED]] Sent: Monday, January 20, 2003 1:35 PM To: Redhat List Subject: Firewalls All; I'll be building a new server soon, based on Redhat. What firewalling software is

Firewalls

2003-01-20 Thread Tibbetts, Ric
All; I'll be building a new server soon, based on Redhat. What firewalling software is good these days? I've heard good things about firestarter. Is it worth looking into, or is there something better/easier. Thanks! Ric -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subje

Re: firewalls - iptables and emails III

2003-01-06 Thread William Warren
On Mon, Jan 06, 2003 at 01:51:23PM +0100, Jorge Luis Hernández Valdivia wrote: > --- William Warren <[EMAIL PROTECTED]> > escribió: > On Sat, Jan 04, 2003 at 09:05:21PM +0100, > Jorge Luis Hernández Valdivia wrote: > > > > > > The answer for Bill's questions: [snip] > > > > 2. Do you want to se

firewalls - iptables and emails III

2003-01-06 Thread Jorge Luis Hernández Valdivia
--- William Warren <[EMAIL PROTECTED]> escribió: > On Sat, Jan 04, 2003 at 09:05:21PM +0100, Jorge Luis > Hernández Valdivia wrote: > > > > The answer for Bill's questions: > > > > > 1. Is the Linux Firewall being used for mail > *now*, > > > or are you > > >setting up an MTA for the first

Re: firewalls - iptables and emails

2003-01-05 Thread Ian P. Thomas
> On Saturday, January 4, 2003, at 11:52 AM, Jorge Luis Hernández > Valdivia wrote: > > > Hi > > > > I got a couple of lans joins by a firewall in linux, > > something like this: > > > > -- --- -- > > |Lan 0 |---|Firewall|--|Lan 1|--|Fire

Re: firewalls - iptables and emails II

2003-01-05 Thread William Warren
On Sat, Jan 04, 2003 at 09:05:21PM +0100, Jorge Luis Hernández Valdivia wrote: > > The answer for Bill's questions: > > > 1. Is the Linux Firewall being used for mail *now*, > > or are you > >setting up an MTA for the first time? > > It has never been used for email before, it's the > firs

Re: firewalls - iptables and emails

2003-01-05 Thread Jason Costomiris
On Saturday, January 4, 2003, at 11:52 AM, Jorge Luis Hernández Valdivia wrote: Hi I got a couple of lans joins by a firewall in linux, something like this: -- --- -- |Lan 0 |---|Firewall|--|Lan 1|--|Firewall| | Linux |

firewalls - iptables and emails II

2003-01-04 Thread Jorge Luis Hernández Valdivia
The answer for Bill's questions: > 1. Is the Linux Firewall being used for mail *now*, > or are you >setting up an MTA for the first time? It has never been used for email before, it's the first time. > 2. Do you want to send the file *in* the email body, > or as an >attachment, or d

Re: firewalls - iptables and emails

2003-01-04 Thread William Warren
On Sat, Jan 04, 2003 at 05:52:21PM +0100, Jorge Luis Hernández Valdivia wrote: > Hi > > I got a couple of lans joins by a firewall in linux, > something like this: > > -- --- -- > |Lan 0 |---|Firewall|--|Lan 1|--|Firewall| >

firewalls - iptables and emails

2003-01-04 Thread Jorge Luis Hernández Valdivia
Hi I got a couple of lans joins by a firewall in linux, something like this: -- --- -- |Lan 0 |---|Firewall|--|Lan 1|--|Firewall| | Linux | --- | Windows| -- --

RE: ntp behind firewalls (need to open ports?)

2002-11-01 Thread Cowles, Steve
> -Original Message- > From: Anthony E. Greene > Subject: Re: ntp behind firewalls (need to open ports?) > > > > >What program do you use so that Windows syncs to Linux? > > If you have Win2k or older, you can put a batch file in the > Startup folder

Re: ntp behind firewalls (need to open ports?)

2002-11-01 Thread Anthony E. Greene
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 31-Oct-2002/15:42 -0600, Gary <[EMAIL PROTECTED]> wrote: >On Thu, Oct 31, 2002 at 02:46:11PM -0600 or thereabouts, Ed Wilts wrote: >> On Wed, Oct 30, 2002 at 10:44:12PM -0600, christopher j bottaro wrote: >> The short answer is no. I've got my Linu

Re: ntp behind firewalls (need to open ports?)

2002-10-31 Thread Bret Hughes
> On Wed, Oct 30, 2002 at 10:44:12PM -0600, christopher j bottaro wrote: > > ok, i got a couple computers behind a linksys cable router. the way i setup > > ntp is really simple. on each computer, i set the step-ticker to > > clock.via.net in /etc/ntp/step-tickers. then i just had the service

Re: ntp behind firewalls (need to open ports?)

2002-10-31 Thread Ed Wilts
On Thu, Oct 31, 2002 at 03:42:00PM -0600, Gary wrote: > > What program do you use so that Windows syncs to Linux? http://nettime.sourceforge.net/ With XP, there's a built-in time sync. It's accessed through the date/time control panel. .../Ed -- Ed Wilts, Mounds View, MN, USA mailto:

Re: ntp behind firewalls (need to open ports?)

2002-10-31 Thread Gary
On Thu, Oct 31, 2002 at 02:46:11PM -0600 or thereabouts, Ed Wilts wrote: > On Wed, Oct 30, 2002 at 10:44:12PM -0600, christopher j bottaro wrote: > The short answer is no. I've got my Linux server behind a Linksys > firewall and have no ports open. The Linux system initiates the > connection to t

Re: ntp behind firewalls (need to open ports?)

2002-10-31 Thread Ed Wilts
On Wed, Oct 30, 2002 at 10:44:12PM -0600, christopher j bottaro wrote: > ok, i got a couple computers behind a linksys cable router. the way i setup > ntp is really simple. on each computer, i set the step-ticker to > clock.via.net in /etc/ntp/step-tickers. then i just had the service startup

Re: ntp behind firewalls (need to open ports?)

2002-10-31 Thread christopher j bottaro
On Thursday 31 October 2002 01:55 pm, Cowles, Steve wrote: > I really have not followed this thread, but based on the above, it sounds > like ntpd is not synchronizing with your defined stratum server. > > Couple of things to try: > > 1) Have you run "ntpq" to see if ntpd is synchronizing with your

RE: ntp behind firewalls (need to open ports?)

2002-10-31 Thread Cowles, Steve
> -Original Message- > From: christopher j bottaro > Subject: Re: ntp behind firewalls (need to open ports?) > > > thanks for your help, guys. i guess how i'm doing is it > fine. i have 2 computers behind my firewall/router that > are running ntp, but he

Re: ntp behind firewalls (need to open ports?)

2002-10-31 Thread christopher j bottaro
On Thursday 31 October 2002 08:21 am, Anthony E. Greene wrote: > Generally, each network has one box that syncs with an external source > and all other local boxes sync from that one. The minimizes the load on > public time servers and makes for a flexible system. *nix boxes can sync > to the local

Re: ntp behind firewalls (need to open ports?)

2002-10-31 Thread Anthony E. Greene
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 30-Oct-2002/22:44 -0600, christopher j bottaro <[EMAIL PROTECTED]> wrote: >ok, i got a couple computers behind a linksys cable router. the way i >setup ntp is really simple. on each computer, i set the step-ticker to >clock.via.net in /etc/ntp/ste

RE: ntp behind firewalls (need to open ports?)

2002-10-31 Thread Joe Polk
require a port to be forwarded. Ports can only be forwarded to a single host, however. <> -- Original Message --- From: Chad & Doria Skinner <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Sent: Wed, 30 Oct 2002 23:17:01 -0600 Subject: RE: ntp behind firewalls (need to ope

RE: ntp behind firewalls (need to open ports?)

2002-10-30 Thread Chad & Doria Skinner
admin@;redhat.com]On Behalf Of christopher j bottaro Sent: Wednesday, October 30, 2002 10:44 PM To: [EMAIL PROTECTED] Subject: ntp behind firewalls (need to open ports?) ok, i got a couple computers behind a linksys cable router. the way i setup ntp is really simple. on each computer, i set the

ntp behind firewalls (need to open ports?)

2002-10-30 Thread christopher j bottaro
ok, i got a couple computers behind a linksys cable router. the way i setup ntp is really simple. on each computer, i set the step-ticker to clock.via.net in /etc/ntp/step-tickers. then i just had the service startup at boot time by using redhat's setup utility. my question is do i have to

Firewalls, recommend Re: AW: Tripwire (Re: Tonight I got hacked.)

2002-10-18 Thread [EMAIL PROTECTED]
Please recommend a excellent firewall . On Friday, October 18, 2002, at 03:25 PM, Mitchell Wright wrote: On 10/18/02 4:31 PM, "Javier Gostling" <[EMAIL PROTECTED]> wrote: On Fri, Oct 18, 2002 at 09:53:29PM +0200, linux power wrote: I'am new to tripwire so I dont know exactly how to use it

Re: about firewalls

2002-03-20 Thread Anthony E. Greene
y default and I think the syntax is a little simpler. It depends on what you need. I generally use ipchains on host-based firewalls because it is good enough and I can set it up relatively quickly. Iptables is not much harder, but the syntax is a different enough that I have to keep the man page ha

about firewalls

2002-03-20 Thread ramzez
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi... I'm new in internet with linux; but I wonder how do a firewall for my linux RedHat 7.2... what's iptables, ipchains? what's better?? thanks - -- Linux User Registered #232544 http://counter.li.org/ my GnuPG-key at www.keyserver.net - --- r

SEMI-OT: Possible bug in Ziegler's "Linux Firewalls" script

2001-12-30 Thread Jeff Muse
Hi, all - There's been a couple mentions of Zieglar's "Linux Firewalls" on this list recently, and I think that maybe I've found a bug in his scripts relating to the relationship of his mangle policies and the loopback interface. Both a script that I wrote (very

ICQ chat through 2 masquerading firewalls

2001-03-31 Thread Leonard den Ottolander
Hi! I am trying to get ICQ chat to work through two masquerading firewalls. I guess I need some auto-/portforwarding rules, but I am not sure of the ports. Usual ICQ works fine through 2 masquearading firewalls, and even ICQ chat works as long as there is only one

Re: Firewalls and samba

2000-09-30 Thread Mikkel L. Ellertson
On Sat, 30 Sep 2000, linda hanigan wrote: > Hi all, > Someone else asked this question but I never saw an > answer on the list. > If I set up a firewall on my Linux computer do I really > still need to disable print and file sharing on the windows > boxes when I connect to the internet. I use a d

Firewalls and samba

2000-09-30 Thread linda hanigan
Hi all, Someone else asked this question but I never saw an answer on the list. If I set up a firewall on my Linux computer do I really still need to disable print and file sharing on the windows boxes when I connect to the internet. I use a dial up connection. My linux box provides print service

Re: monitoring firewalls

2000-07-19 Thread Alan Mead
At 02:01 AM 7/19/00 , Mark Ivey <[EMAIL PROTECTED]> wrote: >Hi, > >I keep seeing comments similar to "someone port-scanned my firewall today, >and here is who they were..." and I was wondering how you manage to get >this information (both the fact that someone scanned you, and then the >info on th

Re: monitoring firewalls

2000-07-19 Thread Bret Hughes
Mark Ivey wrote: > Hi, > > I keep seeing comments similar to "someone port-scanned my firewall today, > and here is who they were..." and I was wondering how you manage to get > this information (both the fact that someone scanned you, and then the > info on the originating system). Thanks... >

Re: monitoring firewalls

2000-07-19 Thread jack wallen jr
the first place to always look is /var/log/secure and /var/log/messages see what you said. :Hi, : :I keep seeing comments similar to "someone port-scanned my firewall today, :and here is who they were..." and I was wondering how you manage to get :this informati

monitoring firewalls

2000-07-19 Thread Mark Ivey
Hi, I keep seeing comments similar to "someone port-scanned my firewall today, and here is who they were..." and I was wondering how you manage to get this information (both the fact that someone scanned you, and then the info on the originating system). Thanks... -Mark- -- To unsubscribe:

Re: SSH, VPN's, and firewalls

2000-05-31 Thread Gordon Messmer
Three replies in one: Bret Hughes wrote: > Found it. Bug in script. needed to add fi at the end of the last if > construct. Confirmed. Thank you. > message when forwarding is not on suggests to the user that he do the old echo > "1" > ../ip_forward deal. As this is deprecated in the Red

Re: SSH, VPN's, and firewalls

2000-05-31 Thread Bret Hughes
Gordon Messmer wrote: > I feel somewhat productive today. :) > > I've written a few new scripts (and improved an old one) that I'd like > some feedback on. Some of you might find them very useful. > OK Gordon, you asked for it :-) First off, I've got the vnp working but had a little problem wi

Re: SSH, VPN's, and firewalls

2000-05-30 Thread Bret Hughes
Bret Hughes wrote: > Bret Hughes wrote: > I keep getting the following errors when running ifup vpn0. I am getting > > Sorry about not mentining the script in the last post. /etc/ppp/vpn-start is > the culprit. > > Pretty sure I checked the orig. to make sure that I did not do it and don't > re

Re: SSH, VPN's, and firewalls

2000-05-30 Thread Bret Hughes
Bret Hughes wrote: I keep getting the following errors when running ifup vpn0. I am getting Sorry about not mentining the script in the last post. /etc/ppp/vpn-start is the culprit. Pretty sure I checked the orig. to make sure that I did not do it and don't really have time to verifiy it now s

Re: SSH, VPN's, and firewalls

2000-05-30 Thread Bret Hughes
Bret Hughes wrote: > > I keep getting the following errors when running ifup vpn0. I am getting > the ssh session but don't know what it the problem with this. I suspect it > is a configuration issue on my machin but I am stumped. Found it. Bug in script. needed to add fi at the end of the l

Re: SSH, VPN's, and firewalls

2000-05-30 Thread Gordon Messmer
Bret Hughes wrote: > I keep getting the following errors when running ifup vpn0. I am getting > the ssh session but don't know what it the problem with this. I suspect it > is a configuration issue on my machin but I am stumped. > > [root@bretdell_linux network-scripts]# ifup vpn0 > Failed to o

Re: SSH, VPN's, and firewalls

2000-05-30 Thread Bret Hughes
Gordon Messmer wrote: > > I would REALLY like feedback on these scripts. Is the documentation > sufficient/accurate? Does it work for you? How can they be made > better/easier to use/more secure? (I've really tried for the best > security possible). If you think that you could benefit from t

SSH, VPN's, and firewalls

2000-05-21 Thread Gordon Messmer
I feel somewhat productive today. :) I've written a few new scripts (and improved an old one) that I'd like some feedback on. Some of you might find them very useful. The old script is init.firewall. This sh script should make it relatively easy to configure your linux firewall (using ipchains

Re: security list? [Now: firewalls]

2000-02-22 Thread Gordon Messmer
Gustav Schaffter wrote: > Did you compare the results by using DENY instead of REJECT? Yes. With DENY, the remote machine sent connection requests until it timed out. With REJECT, the remote machine sent the connection requests, and was told (in some way) that the port was unavailable. It didn

Re: security list? [Now: firewalls]

2000-02-22 Thread David Filion
bject of firewalls, I have a question that I'd > like to ask: > > If I have a linux box with no firewalling rules, and I attempt to > connect from : to :, where dest is > my unprotected linux box, and the port I'm trying to connect to is not > open, I see the following traf

Re: security list? [Now: firewalls]

2000-02-22 Thread Gustav Schaffter
not allowed to connect, but DENY to indicate that the port "doesn't exist" or is not listening. If you were already fully aware of that, then please ignore. :-) Best regards Gustav Gordon Messmer wrote: > > As long as we're on the subject of firewalls, I have a question that

Re: security list? [Now: firewalls]

2000-02-21 Thread Michael H. Warfield
On Mon, Feb 21, 2000 at 05:52:13PM -0800, Gordon Messmer wrote: > As long as we're on the subject of firewalls, I have a question that I'd > like to ask: > If I have a linux box with no firewalling rules, and I attempt to > connect from : to :, where dest is > my unpro

Re: security list? [Now: firewalls]

2000-02-21 Thread Gordon Messmer
As long as we're on the subject of firewalls, I have a question that I'd like to ask: If I have a linux box with no firewalling rules, and I attempt to connect from : to :, where dest is my unprotected linux box, and the port I'm trying to connect to is not open, I see the fo

Re: Firewalls

1998-05-13 Thread John D. Hardin
> Any better information out there for configuring RH5 for Firewalling and > IP masquerading than the HOWTO? > > -Paul Take a look at http://www.wolfenet.com/~jhardin/ipfwadm.html -- John Hardin KA7OHZ [EMAIL PROTECTED] pgpk -a finger://gonzo.wolfenet.com/jhardin

Re: Firewalls

1998-05-13 Thread Ed Jaeger
Is there a specific problem you are having? I set up ours with just the HOWTOs and one additional piece of information (set the MTU on the dialup connection to 1500). -- Ed Jaeger, CFO, Bohlender Graebener Corporation [EMAIL PROTECTED] http://www.bgcorp.com Paul Fontenot wrote: > > Any better

Firewalls

1998-05-12 Thread Paul Fontenot
Any better information out there for configuring RH5 for Firewalling and IP masquerading than the HOWTO? -Paul -- PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES! http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists To unsubscribe: mail