i have a linux server runnig oracle applications. i need to access this server from putty using ssh through internet. i did by registering my static ip with the dnydns.org and i am able to connect to the server. but now there is no security to authenticate any user as any one knowing the password can login to it. i thought of configuring the firewall of linux server but the client ip`s are not static and they change continiously. so thought of keeping one more pc between the server and the router which will do the work of authenticating. but i am confuse as how to configure it to allow the packets coming from the internet after authenticating and to by pass the packets generated from internal LAN?
i have heared abut freeradius package but i am not sure will it work in my case?
I am currently trying to make my computer as secure as it can possibly be. I am configuring the firewall to be restrictive by default, but I have some programs that are still unable to connect to the internet.
1. Pidgin Internet Messenger (I use AIM and MSN) 2. Skype
I'm in the situation where I'm trying to create 2 private networks using ESX server, all behind a NAT router (static ips are used). I used an openSuse11 vm as a router and was able to configure it so that a machine on one private network was able to access the public network. The problem I have now it that I need to be able to access a machine on the private network from the public network using a different set of IP's.
So if a machine in the private network has an IP of 10.1.0.222 I should be able to ping it using 10.99.0.222 or some other IP. I have never done this before and after reading up on iptables and linux routing I feel more confused than before. Is it possible to add IPs to eth0 (public) and have them mapped to machines on a private network eth1 or eth
I have installed Ubuntu 10.04 Server on an older desktop with the intent of making it into a firewall box. What I would like to do is hook one nic into the modem, and the other nic into my router. I'm not sure if I want to setup the 2 nics as bridged.
Actually I need to install configure file of NRPE 2.12 for monitoring the SUSE machine from NAGIOS(Linux machine). But once I am trying to install configure file of the NRPE 2.12 its giving error "cannot find SSL headers". I downloaded libssl-dev files which are in the format of .deb but its not getting install on SUSE.
I am having an intel machine with linux' redhat 5.4 distro. It's superb when it comes to server making and other admin. kind of stuffs but it fails when it comes to multimedia for i am unable to configure the sound file (asound.rc), i tried various codes but it only gives sound output on 2 front speakers. i want to activate other two rear speakers and the center one as well. this is my card info Multimedia audio controller: VIA Technologies, Inc. VT8237 AC97 Audio Controller
this is what my sound files have /etc/asound.conf -------- #Generated by system-config-soundcard, do not edit by hand #SWCONF #DEV 0 defaults.pcm.card 1
correct settings for UFW on my Ubuntu Desktop 11.04 I am setting upo a webserver and want the security for hosting websites but I also need to login to the machine via my LAN computers. I am concerned about setting it up incorrectly and having people hack my machine.
Is there a way to auto run a script when a usb hard drive is plugged in without creating a udev rule or something similar. The idea is that no matter which computer I plug the drive into it runs the script automatically (I want to EXPORT some directories when the drive is plugged in)?
I could no handle/circumvent on the past week, despite of the several "googling" and documents reading. I will try to mention all needed bits... I'm managing a network with the following structure:
eth0: internal net eth1: DMZ eth2: 10 mbit/sec sync line with eight public /29 IP's + a /30 interconnection network. All public IP's must use the interconnection's network gateway. eth3: ADSL with ppoe with fixed IP (ppp0).
Now, a few extra info:
- All internal traffic is routed through ppp0 except when it's destined for DMZ and public IP's range. - DMZ traffic is routed either through ppp0 or eth2. This is done by source IP. - eth2 has on IP from the interconnection network, and six public IP's are also defined on eth2. Command: "ip addr add ...."
I suspect this is an initial configuration bug. All firewall logs seem to be going to all three files. That causes a lot of clutter in the log files, and makes it difficult to see whether there are any serious problems being logged.
I am learning to setup firewall in my home for that i have selected four system(sys1,sys2....sys4) for testing .I have configured sys2 to act as a firewall with two NIC. sys3 and sys4 are inside the firewall . sys1 is not connected to firewall for testing purpose.
the IP assignments are follows :
sys1 : ( fedora, not connected to firewall i am thinking, But i am not sure )
what happened is that sys1(not connected to firewall) can ssh to sys4(connected,inside firewall),since the rules are written not to ssh form sys1 to sys4..
then I came to know whatever the request I give, It directly goes as sys1 --> sys4. Not as sys1-----> sys2(firewall)---> sys4 .and the firewall is not filtering and processing anything for both inbound and outbound (i think it's my mistake some where). the requests are directly going inside without firewall.
I successfully installed the virtual box on my fedora 8 system, and also created a virtual machine with windows xp OS, it works nicely, I try to configure the serial port of my virtual machine and try to configure the path for the port "screen shot are attached" it gives me the error message also the "screen shot are attached" for your review.Is kind of mistake is going on during the path setting, and how to set the path for configuring the serial port of my virtual machine so that I can use the hyper terminal tool of windows.
I'm trying to build firewall on Debian with 'Firewall Builder'. But it won't let me compile and run unless one interface is set as management. There are two interfaces on my computer: 'eth0' and 'lo'
I don't want to be able to configure firewall remotely, so could I use 'lo' as 'management interface'?
I have some file tools on a mint machine that I would rather not install on my mac laptop. Mainly because of the vastness of apt-get and the low risk of installation failure. Anyway, every so often I have a file that I want to process in place using some remote tool. Both machines can ssh right in to each other so I was figuring there must be some script or tool out there that would allow me to type out something like remote [file] [tool & args] to send my file to the other machine, get it processed, then get it back.
I'm know very little about Linux but decided to set up a machine running Drupal CMS on a Debian machine and it won't go. The folks at Drupal have tried to help but it seems the Debian OS won't do it's PHP thing for Drupal.
That means i'll have to start at the START I guess.
how to become a master of Linux if one is starting from ABC (I can add and subtract, that's what it feels like)
I'm the Administrating the computers in my office. I want to monitor the user's activity. How can i remote login without distrubing the user's activity on his computer? Any software need to be installed? (I don't want to use Terminal server client).
give the instructions to install and configure yum in SUSE 10. Is it necessary to install yum from CD and then do all the required configurations or ..we cant straight away download yum from internet and configure it....Many links are broken...i am not able to find the exact download path
i am running apache on ubuntu ibex - is there something that i have to setup to run cgi scripts on ubuntu? it runs ok from the command line - but i want to open it up in a web browser.
I installed Ubuntu 10.10on a Compaq via USB. Everything works fine except NO INTERNET. Even a simple LAN connection is not rcognized. What needs to be done?
I am trying to configure my wireless network on my laptop running Ubuntu 10.10 and am having a bit of difficulty. I am a complete Linux newb, but want to learn it, hence the reason I'm trying to set this up. Here's the vitals:It is a Gateway 600 YG2 laptop. It was previously running Windows XP, but I installed Ubuntu 10.10 in place of it (not a dual boot, I removed XP altogether).I have an old wireless card that I'm trying to resurrect. I haven't really used the card in a couple years, but it seems to still work, I just can't connect to my home's wireless network. The card is a Linksys WPC11 v2.5. When I plug it in, Ubuntu recognizes the network, but won't connect to it. My home network uses WPA encryption and the only connection type that Ubuntu's network manager is giving me is WEP and then it asks for a key -- I have no idea what that key should be.
So, basically, I'm asking, is there a way I can instead connect through WPA? I've tried creating a new connection in network manager, but that won't work, it keeps falling back to the WEP connection and asking me for a key. I have tried to install the XP driver using ndiswrapper but I don't know if that's working or not. Is there a way to tell if:A) the card is working as it shouldB) the correct drivers are installed (again, I installed the XP one using ndiswrapper NET8180.INF, but I'm not sure what to do next)
So I am a Microsoft ASP.NET developer during the day, but I've been growing fond of linux and had ubuntu at home until my computer exploded one day. True story, and it sucked.
I have rebuilt my computer and just got 3 drives today. I'm hoping RAID5 with mdadm will perform well enough to keep me happy.
I know it is possible to configure linux installations to save docs and stuff to a separate partition, but I don't actually know how, let alone with RAID5.
I am very fond of the idea of being able to wipe and install various distros of linux while maintaining all my docs and/or config settings (??).
I want to schedule a crontab for shutting down the oracle application services. I created crontab -e by login as oracleuser and added time and run-part(script path to execute the cron). But i unable to execute on the schedule time. exact procedure for creating and execution of cronjobs in RHEL-5.