i have some servers behind a server/router/firewall at [URL] that can be accessed using port forwarding. they are working quite well. [URL] gets you to the first server behind the server/router/firewall (the former link above).
i would want to make the server at the latter link accessible with its own domain name ie [URL]without having to add :<port> to the end of [URL] because ":" is disallowed for aliasing in the a and cname records at network solutions (my dns?). is port forwarding the best way to reach these servers behind my firewall? is it possible to assign them their own domain name? perhaps some method other than port forwarding should be used?
is there still a bug in qBittorent with portforwarding 6881? i forwarded it in my router and run nmap on localhost and shows its open yet it is always saying no direct connections on the bottom with that little yellow globe near the nodes
I am trying to forward all the incoming internet/LAN requests on port 80 to my local machine (running Apache), current iptables work (forward incoming internet traffic to my desktop, but if I try to access it from my local network it won't work. Interface connecting my Ubuntu server to the internet is ppp0 (dialed DSL connection through my router that is in bridge mode) which is connected to the eth0 and eth1 is connected to my internal LAN.
[Code]...
what i was able to gather so far (via logs), is that accessing external server ip directly from the LAN goes directly to eth1 which is understandable (i think). So what i need now (i guess) is an rule that will forward the LAN traffic on eth1 without interfering with the ppp0 prerouting rule (as forwarding all the incoming traffic on eth1 to my local machine will break the internet connection)
I have two CentOS servers on the same LAN. One is CentOS 4.7 the other 5.2 They both also have a WAN interface to the same remote network. On CentOS 4.7 I can ping the remote network through the CentOS 5.2 server. i.e. ping -I eth0 remotehost On CentOS 5.2 I can NOT force the ping to go out the CentOS 4.7 server without over riding my routing tables to make eth0 a more direct route than the eth1 route.
On 5.2 If I do the ping -I eth0 remotehost, and a tcpdump on eth0, the outbound ping will not be going out eth0, he overrides it and sends it out eth1. In fact, on CentOS 4.7 if I do not have a route to the remote network through the other server (turn proxy arp off on the 5.2 machine), I will get "Destination Host Unreachable". I would ideally like to get the 5.2 machine to behave the way the 4.7 machine does.
My real life application for this is that I have a CentOS server in a location that controls access to the Internet. There is another router on the netowrk that handles traffic back to our corporate office. the CentOS server also has the ability to get to the corporate office. I ping the corporate office through eth0 to find out if the link through the other router is indeed up and active. I want to make this a CentOS 5.2 server but alas, I can not tell if the other route is up or not.
I have a client that is using a windows based backup system called Retrospect and will be installing Linux to replace his windows server. Right now the way it works is on the XP pro workstation Norton 360 makes a backup to the server and then Retrospect make it backups every night. I want to add a linux based backup system that will give them a historical backup system that had XP pro client software that can backup open files and such I can do away with the Norton backup stuff and streamline this setup. I need it to have the capability to go back in time to restore something of an older date this historical. I was looking into:
[URL]
I have never used either one and was wondering what the linux community wold recommend between the two or if there is something better that has client software and free and does it have a GUI for my clients? I am leaning toward AMANDA after reading Jeremy's article:
I'm mentoring my local high school's IT club as they prepare to participate in a cyberdefense competition (see IT Olympics). Generally we are given four boxes and need to set up a network that provides certain services (which services change from year to year, but usually include a web server, email server, FTP server, and an application server of some sort) and support client PCs that connect from the WAN. The red team then tries to break into our network to steal "flags" from our servers and to set their own "flags" on our servers.
Generally we set up the firewall with two network interface cards (one to the WAN and one to our LAN), and connect the LAN NIC to a router, which then connects to the other three boxes. But we do have the option of installing additional NICs in the firewall and configuring it as a router. I can't shake the feeling that there is a security advantage to such a configuration, but I can't say what that advantage is. Perhaps something with configuring ipTables on the internal boxes to accept connections only from the firewall's NIC, and then only for the services we want that box to support (to prevent an intruder from connecting directly from one box to another)?
Network/IT teams often look for a monitoring tool in reaction to a problem they have on the network. They know they have a problem, but they dont know specifics. They cant see, for example, who is hogging bandwidth. So they seek a free or open source point solution to solve that one problem. But if they already know one problem is happening, it's possible theres a second or third problem which could be prevented if the IT staff knew about these issues. An alternative approach to reactive monitoring would be to implement a robust network monitoring system before a problem occurs. An NMS should enable IT staffs to identify potential problems early on and solve them before end users notice them. Is your organization using a network monitoring system? If no, why not?
I've noticed something strange in the behavior of how Ubuntu server obtains it's IP address versus Ubuntu desktop and other versions of linux and Windows. When Ubuntu desktop obtains an IP address from my router that address is retained from one bootup to the next, same behavior as Windows, SuSE, and pretty much any other OS. Ubuntu server on the other hand grabs a different IP address everytime it boots. At first I guessed it was a difference in /etc/dhcp3/dhclient.conf so I replaced it with the dhclient.conf from Ubuntu desktop but no dice, it still grabs a new address every time.
In /etc/network/interfaces Ubuntu server defines the loopback interface and primary network interface, just as it should but Ubuntu desktop does not define the network interface, only the loopback interface. I'm guessing something else controls does this. Desktop appears to be storing previous IP lease information in /var/lib/dhcp3/dhclient.eth0.leases but server doesn't, /var/lib/dhcp3/dhclient.leases is always empty and there's no other files in /var/lib/dhcp3/.
Apparently something isn't writing old lease info there. Without setting a static IP address, how can Ubuntu server be configured to retain the same IP address between boots like Ubuntu desktop?I'm using Ubuntu server 8.04LTS, Ubuntu desktop 9.10 & 9.04, SuSE 11.0, Linux Mint, Windows XP, pfSense 1.2.2 as router.
I have both Jaunty and Windows XP installed on my laptop (dual boot), and I have successfully tethered (via Bluetooth) my cellphone in Windows, but can't get tethering to work in Jaunty.
In Windows, when I paired my phone with my laptop using Bluetooth, Windows assigned two COM ports for Bluetooth to use. Then I configured dial-up networking, and all I had to specify was the dial string (*99**1*1#). Windows treats my cellphone as if it were a modem connected via a serial port. Works great.
When I pair my phone to the laptop when running Jaunty, I don't ever see serial ports getting configured as I do in Windows. And I've read that when the Bluetooth pairing takes place in Ubuntu, the networking wizard should start, but it does not. So, I go into network connections and create a new connection under the MOBILE BROADBAND tab (I check "connect automatically"). When I'm finished creating the connection, it says "never" to the right of the connection name, but I'm not sure what that is indicating. When I left-click the network manager icon on my desktop, it does not show any connections from which I can choose. I have no Internet connectivity.
I have proved that the Bluetooth link between Jaunty and my cellphone IS working. I have been successful sending files from my phone to Jaunty, using Bluetooth.
Am I going about setting up tethering incorrectly ?
Apart from the fact firef*x gets confused when my laptop is not connected to the internet... (Please click here grrr)Have you figured out a way to load a separate hosts file when booting in standalone? Presently I swap one host file for the other, usually after boot. Restart apache. Running LAMP on laptop now. It practically grinds to a halt when it isn't connected to my server
So I have the burned ubuntu CD, and I'm attempting to install it on a system that has one HDD with XP/Vista on it, and another that is completely formatted and unpartitioned. However, when I boot to the ubuntu CD, I can use the menus from the bottom, and select the language when initially prompted, but I can't select any of the menu options except for boot from first hard drive.
I am running my own Postfix mail server. Some time ago I noticed that most email was rejected because of the server's dynamic IP address. So I got a fixed IP address. However then I noticed that some mails got rejected due to failing the reverse DNS check. So my ISP told me to get a range of IP addresses and they could then create a PTR record for one of those addresses. That is now running but it turns out that the IP address used for the PTR record is a ... dynamic IP address. So Spamhaus PBL rejects my emails again.
I have a bunch of nfs mounts from my MythTV backend to my netbook, both running 9.10. Due to the lousy Atheros wireless driver, it typically loses connection at least every half hour. The nfs mounts are mounted soft,intr, so programs should get an error trying to talk to a server they can't contact, and the request should be interruptable. Instead, they just lock up, can't be interrupted, and the netbook can't even shut down after the network failure because it hangs trying to clean up before shutting down.
So do these nfs options actually work in Ubuntu? 'mount' shows the nfs directory mounted with the correct options, so it doesn't seem to be any kind of configuration problem... it just doesn't do what I'm telling it to do.
I have a problem with ssh, in that it's extremely slow when using putty to connect from Windows. A bit of googling suggested that I should use -u0 as a startup option since there's no DNS entry for this machine.
So, at the risk of sounding stupid, how do I put this options in to the /etc/init.d/ssh file? I tried adding it in the the "set" part but got an error, tried adding another "set" line and got an error and tried adding it to the first command there, but also got an error! Where does it go?
I am having a small issue with finding and installing an IRC server program for ubuntu 10.10. I would like to know if anybody has any input on what the most simplistic and secure irc server program out there is, and how I would install and configure that said program.
I read all articles on "network center not working" on Acer One. I tried several things:1. Deleted network2.Deleted g.config3. Used rm /.gconf/system/networking command from terminal(Typed in w/ sqiggle mark, not on phone keypad)Is there a way to command to reinstall the g.config and network so I can start over? Will disconnecting the CPU and reconnecting help?I hate to throw this computer out if there's a fix. I'm trying to save money on repairs.
I am contemplating the use of DHCP options as a way of passing host-specific information to hosts that are booting disklessly from a network server. My intention is to have the DHCP client request certain options, and use the reply to configure the diskless hosts accordingly. The theory and rules behind all of this seem well documented on web sites such as die.net. However, the practical application of the protocol seems to be a lot less clear. What I am looking for is an explanation of what (existing, I hope) tool(s) are used, and how they are applied so that I can grab information from the DHCP server, and use it in userspace scripts or other programs. Specifically, my intention is to use a locally defined option that would give a host-specific directory name or filesystem to use by the diskless host to obtain host-specific applications and configuration data.
So far, all of the DHCP client documentation I've found relates to the usual function of assigning IPs, etc. I've looked at dhclient-script on a Redhat system and can't figure out the relationship between it and the dhclient program. Clearly, the script is invoked somehow by dhclient, but I don't understand where the transfer of data received from the server gets into the script. Does dhclient just create a list of exported environment variables the child script then gets access too? What are the rules for how variables are created and what variables are created?
I am running 10.04 and have recently had an issue where a powercut shut my computer down unexpectedly. Since this all the options from the network/connection part of my taskbar have been removed.I have run the OS from a boot disk and the same problem occurs. I have updated and re-added the mobile broadband but still nothing appears and as yet i have been unable to connect to the internet again since the powercut.am still learning everything (very slowly) so i apologise if this has been previously solved but i can't seem to find it on the forums.
Im running several linux boxes, all redat enterprise linux. Versions vary between 4 and 5.
Since we have problems with our DNS servers, Im trying to lower the DNS resolve timeout to the minimum to avoid system hangs etc.
However, it seems that nothing I do have any effect. when Im running time nslookup whatever.com or time host whatever.com while my first DNS server is down, it always takes about 1.09sec as opposed to 0.09sec when the first server in the list is available. I tried playing with options timeout:X attemps:X but it simply doesnt seem to do anything, even if I set it to high values. Some internet posts suggested having timeout:0.5 or less, but that also doesnt seem to do anything.
when I use: options timeout:0.3 attempts:1 - doesn't do anything. options timeout:1 attempts:1 - doesn't do anything. options timeout:10 attempts:3 - doesn't do anything.
It doesn't work when I put it in the first line of the file. It doesn't work when I put it in the last line of the file.
It doesn't work if I put it in "export RES_OPTIONS=options timeout:X attempts:Y" I tried it on 2 different machines.
I'm doing ping between 2 RH servers through a VPN site2site tunnel and in some times I got in the result pipe 2 and another pipe 3 as I mark it in blue color below.
e.g.
64 bytes from 192.168.1.10: icmp_seq=0 ttl=128 time=0.229 ms 64 bytes from 192.168.1.10: icmp_seq=1 ttl=128 time=0.287 ms 64 bytes from 192.168.1.10: icmp_seq=2 ttl=128 time=0.278 ms
[code]....
What's the difference between pipe 2 and pipe 3 and what's the meaning of it?
I am running Fedora 13 and using Ndiswrapper with my pci wireless card. my router is a netgear wgr614v9 wireless router with wpa2-psk. When I try to connect to my network the only options I see for security are dynamic WEP (802.1x) and WPA &WPA2 Enterprise and for authentication all I see is TLS LEAP Tunneled TLS and Protected EAP (PEAP). I can connect to my network when I drop security on the network but other wise I am stuck. I have been trying to fix it for about a week now by myself to no avail
Email my ASDL router IP for VPN connection.My adventure with NX nomachine continues with great success. Thanks for all you input and suggestions - I am still polishing the project but it has been straight forward to date.One questions I have is how to stay current with my ASDL router's IP. I use a Canadian provider with a dynamic IP that is constant for days at a time. Without powering my router down or any power outages, my IP will change. With that IP change, I am unable to login to my desktop.One windows style program I found does the job.It emails my current IP to a predefined email. I am unable to seem to find one for linux.
Ideally I would have a ubuntu program on my desktop (NX server) that would keep me up to date on my IP via email so I can login.Anyone have any experience with that? Or have any other suggestions on how to do this (I dont know the best way to keep that IP up to date besides requesting a static IP from my provider).
I have installed UBUNTU 10.0.4 on my HP Laptop which has Windows Vista. When I select Windows Vista, my Wireless is working properly and Wireless turned ON icon with light is showing up. But when I select UBUNTU, I couldn't able see WIRELESS. Its showing as OFF and When I tap on Wirless ikon, its NOT turning ON. how to ENABLE Wireless options on my HP Laptop with Vista in it. PS: I have both VISTA and UBUNTU on my machine.
I'm on Ubuntu 10.10. I installed Samba and went Administration > Samba. Added a folder [Videos] to share (this folder is on an ext partition). I then went to the folder [Videos] Right+Click > Sharing Options. I selected 'Share this folder', I put in a name and comment, checked Allow others to create and delete files in this folder and checked Guest Access.
When I view this shared folder [Videos] from my Windows PC I can access it with no problems but when I try drill down into sub folders I get a permissions error. [Attached a screenshot of the error]. If I share each folder separately then I can access them but obviously I'd like to share a folder and all it's contents.
I'm having trouble getting PPTP to work on my Gentoo system. Kernel options relating to PPTP:
Code: CONFIG_PPP=y # CONFIG_PPP_MULTILINK is not set # CONFIG_PPP_FILTER is not set CONFIG_PPP_ASYNC=y CONFIG_PPP_SYNC_TTY=y CONFIG_PPP_DEFLATE=y CONFIG_PPP_BSDCOMP=y code....
I've tried emerging with and without the mppe-mppc flag on ppp, as well as putting the PPP options from the kernel to modules. No luck.
