I want to deny access to my server by PC's from other sub LAN on my company, so I will add the lines ALL: xxx.xx.xx. to hosts.allow and ALL: ALL to hosts.deny?
VampirD
Microsoft Windows is like air conditioning
Stops working when you open a window.
-----BEGIN PGP SIGNATURE-----
[Code].....
I can't seem to set this older server right to deny outside access while I build a website on it. What I am trying to accomplish is deny anyone outside of my network access to the website, but replace the 403 error with a temp page letting them know it is coming soon. I have googled for hours and everything I have tried just denies me as well. Seems to be all or nothing.
My last attempt was:
Code:
<VirtualHost *:80>
ServerName www.mydomain.com
ServerAlias mydomain.com
ServerAdmin me@mydomain.com
DocumentRoot /home/me/www/site
ErrorDocument 403 /temp.htm
<Directory />
Options FollowSymLinks -Indexes Multiviews
AllowOverride None
Order Deny,Allow
Allow from 192.168.0.*
Deny from all
</Directory>
</VirtualHost>
I have run into a problem using FreeNX in combination with public key authentication. I have Googled myself silly, but I can't find the exact answer to my problem. I am hoping that someone here will know the answer. First, let me tell you what I am trying to accomplish:
- I don't want my ssh server exposed to the Internet with password logins enabled. I only want public key authentication.
- I want to have access to NX server from anywhere in the world.
- I want NX to use a custom keypair, not the default supplied by FreeNX.
My environment:
openSUSE 11.2 (client and server)
KDE 4.3.4 (client and server)
FreeNX-0.7.2-26.5.i586 (server)
openssh-5.2p1-9.1.i586 (client and server)
NX Client for Linux 3.4.0-5 from NoMachine (client)
qtNX Client qtnx-0.0.1SVNr281-215.1.i586 (client)
The login problem persists, whether I am connected to the same network or to another network. Since ssh logins work, I don't think a firewall is the culprit. What do I have working so far: - The ssh server on the remote host only accepts public key authentication and I can login from the client without problems. So far so good. - FreeNX is installed on the remote host, using a custom keypair.
Authentication with this key works. I can login from the client with the nx user and the public key.
[code]...
i work in an office with individual p/c's (all with windows xp) connected to a windows server. i have installed opensuse 11.2 on my work's p/c (as a dual boot) but have no idea what to do so that i can access files on the windows server. can some kind person point me in the right direction.
View 3 Replies View RelatedI am trying to setup a system that will only allow root access to the DVD drive and no other users.
View 8 Replies View RelatedI would like to know if it is possible to deny the access to a file for root? Would ACL's be a possibility? I have "googled" around but haven't found anything interesting (except SELinux). I should secure a password file to an important database.
View 6 Replies View RelatedI have a server machine that is running SUSE Linux Enterprise Server 11. I set up a mysql server there. Now I want to access this mysql server from my laptop. I used the following command,
> mysql -h 12.246.5.70 -u davidehs -p
I found if the firewall on the server machine is running, I can not connect the mysql server from my laptop. If I stop the firewall first, and the do the connection, I can access the mysql. how to keep the firewall running and allow the remote mysql incoming requests?
I have a server machine that is running SUSE Linux Enterprise Server 11. I set up a mysql server there. Now I want to access this mysql server from my laptop. I used the following command,
> mysql -h 12.246.5.70 -u davidehs -p
I found if the firewall on the server machine is running, I can not connect the mysql server from my laptop. If I stop the firewall first, and the do the connection, I can access the mysql. Do you guys have any idea how to keep the firewall running and allow the remote mysql incoming requests?
Here's the issue: from time to time I have to take away my son's access to the internet, so I exclude his laptop from my wireless Linksys router. Works like a charm, or it did until he discovered that my neighbor also has a wireless router, and hasn't secured it.
So my son sits in the corner of the house closest to my neighbor and uses their internet.
Is there any way I can tell his laptop to NOT access a particular router? Or even better, to only access my router?
We need to only allow access to a web page only to some ips. We want to do this via Apache but it seems like the standard way of denying all and allowing some ips doesn't work because we mount a webapp using tomcat.
The sites-enabled file looks like this:
Code:
NameVirtualHost *:443
<VirtualHost *:443>
ServerName web.address.com:443
ErrorLog /var/log/apache2/app_ssl_error.log
[Code]....
How do you configure the firewall to allow external web access (it's a LAMP server) and internal access for samba shares ?
View 6 Replies View RelatedI'm trying to set my openSUSE desktop up to use the printers on my office network via Samba. I managed to get it working in 11.2 but 11.3 is giving me some trouble.I am able to access the printers and use them but I have to enter my network credentials each time I print. In 11.2 I was able to "save" my username/password and was not required to do this. Are there any Samba packages I need to add in addition to the basic ones? There seems to be a lack of documentation on this particular subject, most is concerning Windows clients printing on Linux print servers.
View 2 Replies View RelatedI made a Desktop User account. When I went on that account, it allowed me to execute sudo as if I was an administrator. I don't know what might be causing this. I do have ufw set up and blocking incoming connections. Do you guys know what might be at the root of this?Also, when I used sudo from the user account (which I shouldn't have been able to do), I provided the password for my admin account.
View 9 Replies View RelatedI'm setting up Ubuntu Karmic on my sister's old computer for my nephew, he's quite young so my sister asked to install some content filtering. I'll first setup an OpenDNS account and I've installed and managed to get dansguardian and squid working on a virtual machine to try it out. so far it's working pretty well, but I need to secure it form the inside out.
I was thinking of blocking specific outbound ports so he could not bypass the proxy. because by default the firefox configuration can be easily changed. so I have a couple of questions.
1. is it possible to block outgoing ports on Ubuntu?
2. is that the best method?
3. is there anything else I should be aware of to prevent subversion?
lastly, this question is probably unrelated to this board but I've set up a cron job to update a dynamic ip with OpenDNS, the problem is that the password is in clear text in the user's crontab, can I play with permissions? is it possible to run the job under a root account and deny read/write access to a normal user?
I installed 11.3amd64 as a VM under Vista/VMWare Player - all worked fine. I have now installed it as a physical system. It nstalled cleanly BUT during first boot it could not access the repos. With each repo it gave the message
- download (curl) error for (repo)
- error code connection failed
- error message could not resolve host (repo)
This was followed by a message box containing
- UI syntax error
- no widget with ID 'contents
Firefox could not access the internet (cannot find server) until I disabled IPV6 (I used about:config), now it works fine. I think the repos problem is because of IPV6 - I usually have trouble with IPV6. I tried disabling IPV6 with the following (How To Disable ipv6 on SuSE Linux | Linux Poison)
[code]......
I have create distro groups in zimbra and have add member sin there. when i connect an account on mapi etc. [URL] i have create a persona in order client to send from [URL] rather than [URL] How can i restrict inside postfix to relay using [URL]?
View 1 Replies View RelatedI'm trying to use Squid to restrict web access on the computers of my LAN. All of the computers are using static IP address and we use our firewall to deny all HTTP access except for the proxy machine so everyone needs to go through the proxy to access the web.
Most of of the computers have access to websites that are listed on a white list that I called "goodsites". I have a range of IP address that I listed in a file called "super_users". These IP adresses are able to access everything except sites that I have put in a black list called "badsites".
I would like to restrict the use of audio/video streaming for all the IP adresses including the super_users. So far I have been able to effectively block streaming for all the IP addresses except the super_users that are able to bypass this restriction.
Here is the transcript of my squid.conf file:
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 10.0.0.0/8# RFC1918 possible internal network
[Code]....
I have a squid3 on a debian lenny box but cannot get access to any site.
If i remove the http_access deny all works, but i just want those ip to get access to squid
My squid.conf
Code:
intranet:/etc/squid3# cat squid.conf
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
#acl all src 0.0.0.0/0
[Code].....
Installed a security update for samba tonight via Opensuse updater.Now, when trying to access my home network an authentication box pops up (never used to)Asks me to enter authentication for my home network.I enter my username and password and hit enter. After a few seconds the authentication box pops up again askingfor the same indicating I have entered the wrong username / password combination (which I know I have not).
View 9 Replies View RelatedI have a desktop computer running OpenSUSE 11.2 with two network cards installed. I would like to use both cards for connecting to the internet using different networks. The setting would be the following: eth0 is the main (default) card, almost all programs should use this NIC for connecting to the internet. eth1 is used only by a few programs, which have setting for selecting which network interface to use. The two NIC's are connected to different networks, so the IP address of the NIC's, the related subnet masks and gateways are also different.
Saying short, I would like to have the two NIC's as they would be in two separate computers. I can set the IP address and subnet mask of the NIC's. The main problem is that I can only declare one gateway. How can i setup this? I do not use network manager, I configure network cards using yast, but if needed I can of course use ifconfig directly.
I'm having a strange problem with my network connection/DNS. I turn computer the on and it recognizes and connects to wireless or wired but I can't access any Internet resources or my router. If I ping the default gateway, I get no response and I get DNS errors from any network services that run at start up. If I stop and start the network daemon then it all works fine until the next time I turn on my laptop. It does this for both wireless and wired connection.
I've tried to edit the network interface information in YaST but it says that configuration is handled by knetworkmanager and I have no idea where that information is accessed. I should point out that it all worked fine until I tried to connect to open WAP at my school and couldn't so I connected to the wired network. Next morning I had this problem when connecting to my home network. My questions are 1. What could be the cause of this error and 2. where does one configure the network interfaces when using knetworkmanager
i have 3 comps(running suse 11.3) and a laptop(running vista sp2). i have installed samba on all suse comps. i have a printer attached to one of the comps and it has been shared also the internet connection on that comp has been shared. all the computers are connected using lan cables through an ethernet switch. i also have a wireless router which is connected to the ethernet switch.
I am able to view all the comps on the network except the laptop running vista. all the desktops are visible on the network and are able to print and share files on the network and also connect to the internet. the laptop running vista can connect to the internet but its not visible on the network and nor can it share files across the network or access the printer.
New SUSE 11.3 install connects to network/internet etc OK with DHCP-assigned IP address. When I switch to static IP, I can no longer ping internal network, or anything else. This works OK with SUSE 11.2 on same hardware and (as far as I can see) same setup. Some diagnostics are shown below.
Firewall
Disabling the firewall makes no difference.
Not using a network manager (can't see how to assign fixed address if I do - all greyed out).
ifup eth0:
eth0 device: Intel Corporation 82540EM Gigabit Ethernet Controller (rev 02)
SuSEfirewall2: Warning: no default firewall zone defined, assuming 'ext'
(not sure why the warning - eth0 is assigned to external in the firewall setup).
[code]....
I just downloaded the DenyHosts2.6python2.5.rpm for deny.hosts from sourceforge and would like to set it up. I normally use fish://, smb:// and ftp:// on the boxes on my lan. I already have files called hosts.allow and hosts.deny in the /etc folder. Will the rpm configure hosts.deny when first run?
View 1 Replies View RelatedI have a server running both apache2 (default port) and squid (3128 port) I set an squid ACL so my LAN 192.168.1.0 gets filtered. ok all works fine except for external web petitions. When i try to access my web server from the outside, using my public ip, i get a SQUID DENIED. i guess that is because in squid ACL's there is something like: http_access all deny at the end of the file. How can i allow external petitions to my web?
View 4 Replies View RelatedI can't access any of the wired network settings and theres a red square with an X through it. Here are some snap shots. This is really funky.Is this red box with the X suppose to be here?
View 3 Replies View RelatedI halted my PC with the command ssh PC "su - -c halt", I use ssh key to access the PC so it ask for the root password, but echo it on the shell
[vampird@Sharwyn]:~$ ssh shinobu "su - -c halt"
Password: ROOTPASSWD
[vampird@Sharwyn]:~$
- --
VampirD
[Code].....
I have a problem with my slackware 13.1 that is that i can�t access it outside my local network. It�s running behind a router and i have activated the DMZ to my slackware computer i can access the web with my slackware computer but i can�t get access to it outside my LAN.
View 8 Replies View RelatedIs there a network trouble shooting guide for OS 11.2 that I could follow? I've shot myself in the foot so I should try to fix it.
I changed the DNS server addresses and the number of IP addresses on my router. I then set my Linux system to use static IP addressing and edited the network settings for my network adapter accordingly. I can now no longer get to any web-site.
By contrast, I also updated 1 of my Windows computers in a similar way; it continues to work without problem.
I am trying to get internet connection on Open Suse 11.2 through my wireless connection. I can connect to my network but there is no internet connection. The internet connection does work with other Linux distros and with Windows 7 laptop and Windows XP machines. I tried turning off the firewall but still no connection. What is even stranger is I can ping Google but in Firefox I cannot go to Google.
View 9 Replies View Related