How can I configure proFTPd to deny all unless:User is part of group: ftpguysClient IP matches either: 1.1.1.1 or 2.2.2.2 or 3.3.3.3I already have the config file (proftpd.conf) setup to only allow users who are part of the group ftpguys. To do that I use this:
Code:
<Limit LOGIN>
AllowGroup ftpguys
[code]...
I'm trying to use Squid to restrict web access on the computers of my LAN. All of the computers are using static IP address and we use our firewall to deny all HTTP access except for the proxy machine so everyone needs to go through the proxy to access the web.
Most of of the computers have access to websites that are listed on a white list that I called "goodsites". I have a range of IP address that I listed in a file called "super_users". These IP adresses are able to access everything except sites that I have put in a black list called "badsites".
I would like to restrict the use of audio/video streaming for all the IP adresses including the super_users. So far I have been able to effectively block streaming for all the IP addresses except the super_users that are able to bypass this restriction.
Here is the transcript of my squid.conf file:
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 10.0.0.0/8# RFC1918 possible internal network
[Code]....
I am trying to setup a system that will only allow root access to the DVD drive and no other users.
View 8 Replies View RelatedI have setup Denyhosts to run on my server, and have been using it succesfully for the last few weeks, to allow me to ssh into my server from my home dev machine.
This morning, I accidentally typed my password incorrectly three times - and ended up being locked out of the system (tghat was ok, because that was what was supposed to happen). I logged into the server via another way and took the following actions (in the order given)
/etc/init.d/ssh stop
/etc/init.d/denyhosts stop
removed my IP address from /etc/hosts.deny
/etc/init.d/ssh start
[Code].....
I am attempting to configure my sudoers file, and have quite a few questions.If you can answer any/all of them, I would be grateful.
-Is there a way to set it up so that root gets notified if a user tries to use a command they are not allowed to?
-If something like this already exists on my system, how do I set it up/use it/ read root's messages?
-I see a lecture=always default exists, but can I customize this lecture?
-Is there an easy way to explicitly deny a user sudo permission?
-I see there is an ALL wildcard. Is there something similar to a NONE wildcard?
I created 2nd root (root2) by running useradd -o -u 0 root2 is it possible to deny root2 to change password of original root?
View 11 Replies View RelatedI have just installed Squid proxy. i also use WPAD to deploy policies for all client. Both works well together. Now i want to configure firewall Juniper SSG140 will be deny all request from client to access internet and redirect to Squid. I mean deny HTTP & HTTPS except Squid (port 3128), even i want to all access to internet have to through Squid proxy. I don't expert about the firewall Juniper. May i know step by step configure it.
[URL]
Clients are not able to access FTP thru browser: ftp://IP.When you open it thru browser, it does not ask for a usename or password but shows a PUB diretory instead. I tried to telnet port 21 and shows that it is using VSFTP instead of Plesk's ProFtp.
View 1 Replies View RelatedThe command cat /proc/PID/maps shows the memory map (virtual addresses) of the process. How these address are actually mapped?
View 3 Replies View RelatedI have my email on a separate partition so that my email doesn't get destroyed when I do new linux installs (I have emails from 5 years ago now). I also keep my sylpheed email addressbooks. This partition is writable by anybody and I have also made my user the owner of this partition during each linux install (media/email). When I set up sylpheed I tell it that my email is in /media/email and then it is able to write incoming messages to that location. The problem I am having is that I make symbolic links for my addressbooks from ~/.sylpheed* to /media/email using this:cd ~/.sylpheed*rm addrbook-000001.xmlln -s /media/email/addrbook-000001.xml addrbook-000001.xmlSylpheed finds my addressbook ok on my email partition but changes that symbolic link to a file on ~ when it writes new addresses. What am I doing wrong...I want it to write new addresses to my email partition?
View 4 Replies View RelatedIn school, use SUSE Server and made it by DHCP but in my hand I changed many rules. All are OK at the start but now they requested that they who are principal, and vice principals are want to use the Internet without filtering.
So I've made new rules by using Webmin software to control the SUSE Server. 1st I've gave static IP from LAN x.x.x.40 to x.x.x.45. 2nd IP is x.x.x.12 to x.x.x.15.
At First, there's nothing happen but now I've got problems because Server gave DHCP so that Server gives IP itself and conflict with static IPs. And also I can't find in Webmin software how to disable the DHCP Assign.
I almost never boot windows anymore - but there is one thing I miss
In msword I was able to print addresses on envelopes and/or labels
I have not found that capacity on fedora 13 with Abiword and Open Office writer
Is it there seomwhere?
I have a webserver setup for myself with two domains. Both need ssl. I am running fedora 10 Apache/mod_ssl. I am trying to configure ssl.conf to recognize two different IP addresses, one for each domain.
Each has their own Vhost containers (NamedVirtualHHost)
<VirtualHost 192.xxx xxx x01 :443>
blabla
blabla
</VirtualHost>
<VirtualHost 192.xxx xxx x02 :443>
blabla
blabla
</VirtualHost>
I call https... first site works ok. I call https....second site it calls the first ssl cert (bad cert). Apache does not separate the two. My question, how do I get apache to deliver https..domain_one and domain_two correctly?
I'm using the mail command and I am able to send mail to my gmail account with out any problems. However when I send mail to deco -at- mycompany.com I nothing happens and no mail ever arrives in my mailbox. It might be worth mentioned that my centos5 is a virtual machine on the same server as the company exchange mail server.
View 1 Replies View RelatedGet the list of virtual addresses being accessed by any application during its execution time. I don't want the complete memory map but just the pages which were accessed during an application's execution?
View 2 Replies View RelatedIs there somewhere in WHM where I can allow and disallow various ip addresses to login using PuTTY for SSH.OpenSSH Server, is not running (for security reasons).If OpenSSH is not running, is there a way to allow certain ip addresses only to use ssh.
View 9 Replies View Relatedwe have a tool called trace which takes a memory address as input and gives the function name corresponding to that as output.I have a file which has around 200 addresses, which needs to be given as input to this trace tool.I can start the tool in this way.There is another file called address.txt from which I need to feed these addresses to this tool.Manually it takes lot of time to give the addresses which are in other file one by one. I have idea about some basic awk one liners.
View 3 Replies View RelatedI have sendmail setup and it works fine sending emails to outside email addresses. When I try and send email to our internal groupwise server the mail never gets there and I get an error message in the log user unknown.
View 1 Replies View RelatedCould you tell me what two IP addresses could never be assigned to any host computer?
View 2 Replies View RelatedIs there any tool for generating logical memory addresses accessed by any application in linux ?
View 2 Replies View RelatedAs I understand it, setting /proc/sys/vm/overcommit_memory to 1 is supposed to make sure malloc always succeeds, and set the OOM killer loose if there's an actual memory problem.
I'm wondering what happens when you've malloc'd so much memory that you've exhausted the address space for your process? Does it return NULL despite the overcommit_memory setting, or does your process get a signal? Or something else entirely?
How to get the list of virtual addresses being accessed by any application during its execution time. I don't want the complete memory map but just the pages which were accessed during an application's execution?
View 2 Replies View RelatedIs there some traceroute-like tool that shows ports as well as IP addresses? This is more for seeing how NAT works (on my home network) than for a practical need.
View 5 Replies View RelatedI was assigned to write a bash script in backtrack which will reveal the active IP Addresses on a /30 network. Normally I would not have a problem with this, but I just dont understand because would you not need the entire prefix (ex: 192.168.1) in order to ping sweep for a certain IP range?basically what I'm asking is...How do I nmap a list of IP's for a "/30 network" as that's all that we're given.
View 3 Replies View RelatedI have proftpd set up on my linux home server. As I have a dynamic IP at home, I am using DynDns.org to provide a hostname for me. I have told proftpd to use this address as the MasqueradeAddress, to allow passive FTP connections through my NAT router.
However, whenever I boot my server, proftpd fails to start saying it cannot resolve this address. I assume this is due to the boot order, as something network or DNS related hasn't started up by then and it can't find the address. How should I deal with this problem? Can I get proftpd to do its checking for the address later on? Or can I change the startup order so that proftpd is started as the final item in the boot sequence?
Quite often sites limit download speed per ip address or identified user.
Is it possible to use a tool such as wget in order to overcome this limitation?
I come from more of a programming background but have been giving the task of sending backup results from a linux box in an email to external email addresses, I have spent days looking trough google for info but cant seem to find anything simple, I have looked at postfix but because I don't understand networks, hosts, nameservers etc. What I need to do to allow mail get sent from the linux box to external mail address. I have outlook connected to an exchange server on windows and I can ping the linux box from my windows command so surely it cant be to much involved.
View 5 Replies View RelatedI just want to allow only some udp ports and deny all tcp access as my script below:
Code:
# Generated by iptables-save v1.3.5 on Sun May 8 17:33:16 2011
*filter
[code]....
how to display status of assigned & free ip addresses in a DHCP range assuming that i am working on a DHCP server ?
View 1 Replies View Relatedi need to write a c code to ping IP addresses which are read from a text file and need to log the response time in another text file.
View 4 Replies View Related