OpenSUSE Network :: Configuring Squid Firewall In SUSE?
Dec 3, 2010.i need to configure squid in my company how to install and configure squid in my SUSE server...
View 2 Replies.i need to configure squid in my company how to install and configure squid in my SUSE server...
View 2 RepliesI just installed suse on this computer, and am wanting to allow other computers to store files on it as a file server. I was reading the online manual and in the personal file preferences, it shows an option to enable 'share public files over network'. The problem is I don't see that option when I open up file preferences. All I see is an option to allow sharing using bluetooth, nothing about sharing over the network. When I look in the network I can see the computer running suse, but when I try to connect to it, it says 'unable to mount drive: connection refused by server.'
View 3 Replies View RelatedI've setup vnc over ssh tunnelling however the Suse firewall seems to be blocking it. On the local host I have this in ~/.ssh/config:LocalForward localhost:5900 remotehost.com:5900 The problem is that this only works when I either disable the firewall or add an exception for VNC. Both of these actions defeat the whole purpose of ssh tunnelling since they leave my VNC port open to the outside world (very insecure).
View 2 Replies View RelatedI setup Mediatomb on another box in my house to connect to with XBMC. XBMC will only connect though if the firewall is off on the local machine. I have both TCP and UCP ports 1900 and 50500 (the port for Mediatomb) enabled on my laptop (local) and the correct ports are open on the remote machine (my wife's vista laptop will connect through XBMC). I can connect to Mediatomb through it's web interface (to set visible folders/files) but not through UPnP (at least not through XBMC)
View 9 Replies View RelatedI've searched a lot across the web and this forum in particular, but wasn't able to find the solution. The settings of the firewall are too cryptic to me. When the firewall is turned off everything is OK, but it is uncomfortable to turn it on and off every time I watch IPTV.
View 8 Replies View RelatedI have a fresh install of SuSE 11.2. I have installed Communigate Pro (Email server) and Webmin. From my workstation (on the same LAN), I can access the web interfaces for both CGP and Webmin right after the server boots up. But after about 10 minutes or so, I can no longer access either web interface. The server itself still functions normally. I can get on the internet with the server, and I can control Webmin via localhost:10000.
The only thing that allows me to connect to it from my workstation again is to either restart the server, or go into "Network > Linux Firewall" and click "Apply Configuration". What's going on that makes my remote access stop working?
I have installed dansguardian and squid on my home computer and I need to configure them. the only problem I couldn't find any manual only one for opensuse 9. And even there the part after "acl CONNECT method CONNECT" doesn't make any sense to me.
View 1 Replies View RelatedI suspect this is an initial configuration bug. All firewall logs seem to be going to all
three files. That causes a lot of clutter in the log files, and makes it difficult to see whether there are any serious problems being logged.
I want some advice for making my system more secure. I want deactivate any network connection that is unnecessary. Only my browser and the update ability of zypper should have access to the internet. On windows there are personal firewalls.
How can I block internetaccess for all other programmes on openSUSE?
Samba is working correctly if Susefirewall2 is off. I have added Samba client and Samba Services for extern access but samba is not working when firewall is now on. Which services should I also add ?
View 1 Replies View RelatedI was trying to configure squid 3.1 on fedora linux 13. It's working perfectly fine from the local host but unable to browse from local network even after configuring acl for local network.
Connectivity diagram is given below
Local Network (windowsXP clients) --> Squid Server --> Firewall--> Internet
(192.168.102.0/24) (192.168.102.25)
Linux server has only one network card which is configured with internal IP. Configured client browser with proxy address (192.168.102.24 and port 312.
i have a linux server runnig oracle applications. i need to access this server from putty using ssh through internet. i did by registering my static ip with the dnydns.org and i am able to connect to the server. but now there is no security to authenticate any user as any one knowing the password can login to it. i thought of configuring the firewall of linux server but the client ip`s are not static and they change continiously. so thought of keeping one more pc between the server and the router which will do the work of authenticating. but i am confuse as how to configure it to allow the packets coming from the internet after authenticating and to by pass the packets generated from internal LAN?
i have heared abut freeradius package but i am not sure will it work in my case?
I have a devolo MicroLink 56k Fun LAN modem, which I could configure in openSuse 11.2 as an DSL device. With 11.2 it worked fine. But it isn't possible in 11.3 to configure it, because I cannot set the dial up internet provider phone number for this DSL device.I also tried it to configure it as a modem, but then it used the /dev/modem device, which is the wrong device for this LAN modem.
View 3 Replies View RelatedI have installed squid and dansguardian on my server, I also setup my iptables to forward port 80 communication to port 3128 (squid). I also have remove the comment on /etc/dansguardian/dansguardianf1.conf (line "bannedextensionlist") hoping that my server would block download. But it isn't, it still download file no matter I add in /etc/dansguardian/lists/bannedextensionlist. Oh yeah, I also add this line to my /etc/squid/squid.conf
Code:
cache_peer 172.16.1.212 parent 8080 0 no-query default
so that squid will consider dansguardian as it's parent.
I am configuring squid in IWSVA this is my configuration given below
#
# Recommended minimum configuration:
#
acl manager proto cache_object
acl localhost src 127.0.0.1/32
#IPv6 Not Available: acl localhost src ::1/128
[Code]....
i use ldap authentication method for users to login
the problem i am facing is that in the access log generated i dont get to see the username , IP address of the user authenticated
I am trying to add a custom allow rule in the firewall for a range of IPs from 74.201.102.0 - 74.201.103.255, what exactly am I supposed to enter in the source box? I believe I have to add two separate rules for 102 and 103, and I put /24 at the end of both, is this correct to get the whole range of IPs?
View 3 Replies View Related1. Under openSUSE 11.2, I allowed printer sharing through CUPS by setting the Firewall to Allow Services of CUPS in the External Zone section. I don't see the CUPS option in the Allow Services of the Firewall under 11.4, any zone. Is my system missing something?2. If I turn off the Firewall, the client computer can see the printers, even get the broadcasted names. If I put port 631 in TCP of the Advanced setting of the External Zone, the client computer can see the printer too, but I know I read somewhere that putting 631 in the External Zone is basically allowing printer requests from the entire internet.
View 2 Replies View RelatedI have been using OpenLDAP 2.4 with OpenSuse 11 without any issues but I now want to configure replication and can't see how it's done . The OpenLDAP 2.4 admin guide refers to the slapd.conf configuration file but this is not used by YaST.
View 4 Replies View RelatedI want to have an inn server running on my own server, both to relay my prefered newsgroups and to manage my own newsgroups.
I installed inn with YaST, but I'm lost in the inn documentation. I'm pretty sure openSUSE defaults solve most problems but can't find where I have to setup my own config
I am having trouble with yahoo audio/video voice calls. I am behind squid firewall on WAN. I have asked my IT Admin to open the audio/video ports. He have open the ports but still the audio/video buttons are disabled on chat window.
View 7 Replies View RelatedI am trying to learn DansGuardian for content filtering, but for some reasons it is NOT working for me. equest is directly getting routed to SQUID, it should come first to DansGuardian and then to SQUID.I have created the below scenario on CENTOS 5.5 boxes.
Code:
192.168.0.10box1.test.comYUM/HTTP SERVER
192.168.0.20box2.test.comYUM/HTTP CLIENT, SQUID SERVER
[code]....
I am currently trying to make my computer as secure as it can possibly be. I am configuring the firewall to be restrictive by default, but I have some programs that are still unable to connect to the internet.
1. Pidgin Internet Messenger (I use AIM and MSN)
2. Skype
switched recently to 11.2 and it works fine for me as workstation I want to set up a router separating a part of the network and also acting as a firewall/proxy... Configured 2 Ethernet Interfaces, checked Ip forwarding in Yast but it does not forward the packets from the "internal" to the "external" network. Hovewer after I set up my router as default for machines on internal network I can ping the external interface but no adress on external network (particularly the one of the default router) !!! From the router I can reach both networks and the net via default gateway on external. Tried to:
a) switch firewall completely off
b) iptables -P FORWARD ACCEPT
c) masquarading internal adresses to the external network
my interfaces configuration looks like:
eth0 Link encap:Ethernet HWaddr 00:13:D4:E3:A2:7B
inet addr:192.168.1.34 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::213:d4ff:fee3:a27b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
[Code].....
We have reason to ask this of you following some strange firewall behaviour - But don't panic If you use openSUSE 11.2 and you think: Your Firewall should be running You are not sure but think it should be check and report back here.
This is how to check:
Go to Yast > Security and Users > Firewall
I did a shields up test and it told me that 1056 ports were stealth but that my pc responded to ping and was visible on the net. How do i fix this?
View 4 Replies View RelatedI can't get my openvpn work if the firewall is on , and I also don't see any option to allow openvpn service in firewall allow service.
View 1 Replies View RelatedI'm trying to get OpenMPI (a parallel programming library) working on my home system. I have just two machines on it now, t61 and quad, connected through a router. (Which is also connected to cable modem for internet.) I can ssh between the machnes, mount directories with NFS, etc. However, I just can't get the OpenMPI to run. The OpenMPI message board suggested that the most probable cause is that the firewall is blocking TCP. I don't know how to tell if that's the problem, and can't find any manual for the SuSE firewall, while the various Wikis &c that pop up in a search don't provide any information that addresses my problem.
View 9 Replies View RelatedOk here's my setup :
SuSE 10.0 X86 32 acting as my internet gateway and firewall.
eth0 is my internal interface network 192.168.0.0/24 IP 192.168.0.254 dsl0 is my internet connection and is a single ip PtP connection to my ISP.
My internal network is masquaraded onto the external network.
I run an smtp server on my gateway box that I need to be accessable to both the internal and external networks.
However I want to prevent machines on the internal network from establishing connections to external smtp servers, but still alow them to connect to the smtp server on the gateway to send email.
NOTE I do not want to force attempts to connect to [URL] 25 to be re-directed to my internal server I just want to drop or reject the connection.
The firewall up until now has just been configured through YaST, but am not afraid to edit script files if needed
The reason for doing this it to prevent spambots from being able to send through my isp, I keep my own machines clean but sometimes get asked to disinfect machines for other people (family members etc), where I need to connect to the outside world to get updates/virus defs etc, but don't want them spamming from my network.
can I deny the access to my server for a specific OS? I have one PC which I want to give it acces from winxp, but if it's boot into ubuntu I want to deny all access to my server, same IP, same ethernet card
View 8 Replies View RelatedI'm in the situation where I'm trying to create 2 private networks using ESX server, all behind a NAT router (static ips are used). I used an openSuse11 vm as a router and was able to configure it so that a machine on one private network was able to access the public network. The problem I have now it that I need to be able to access a machine on the private network from the public network using a different set of IP's.
So if a machine in the private network has an IP of 10.1.0.222 I should be able to ping it using 10.99.0.222 or some other IP. I have never done this before and after reading up on iptables and linux routing I feel more confused than before. Is it possible to add IPs to eth0 (public) and have them mapped to machines on a private network eth1 or eth