OpenSUSE Network :: How To Blacklist Host
Jan 2, 2011I need to blacklist any incoming/outgoing connections to Google. I need to add filter something like this: *google*
View 5 RepliesI need to blacklist any incoming/outgoing connections to Google. I need to add filter something like this: *google*
View 5 RepliesI have a mac and an openSUSE box connected wirelessly to a router. From my mac, if I ping the Linux machine by both ip address and hostname "elmo.local", I get a response. If I ping my mac from the Linux machine using its ip address, I get a response. However, if I ping the mac from the Linux box using its name "kermit.local" - nothing!
This means in order to share files between them via the network, I have to use the ip address rather than name, but I'd rather not. When I had Ubuntu installed instead of openSUSE this all worked fine out of the box, so I'm assuming it's a problem with the setup of openSUSE rather than the router or the mac.
I just intalled OpenSuse 11.2 on VmWare Server 2.0.2, the network is configured as Bridged and is sucefully configured a fixed IP in my network. Ok... The problem is... I can ping / trace all addresses from OpenSuse console. But I Can't wget all of them... It's a random thing. the same address that trace's ok, don't work for HTTP.
View 2 Replies View RelatedI have just loaded Suse 11.4 and have had (2) problems, 1st: When I installed some additional programs, such as, Scribus, the system showed them as installed but they did not show up in the "applications" menu any where. I finally tracked them down and edited them in and they work fine - Why aren't they being automatically placed into the menu system? 2nd: I have a home network setup and all systems can see and work with each other, however, the host system is not shown as if it did not exist at all. for example; if I go to "network services" and select "Samba Shares" if other computers are connected it will show them but not the host - if no other computers are connected it shows nothing. On my 11.3 system it shows the host eg; "Linux-12fx blah blah" this is of course my host machine. I have replicated all of my settings on the 11.3 settings on my 11.4 system - no luck!
View 4 Replies View RelatedEDIT: Thread name should be "No network on XEN guest ofcourse". I am trying to run OpenSUSE 11.3 as guest in OpenSUSE 11.2 as host. First problem I came across was libvirtd service wasnt started and after that I was able to install guest OS. Now there is a problem as guest doesnt have connection with internet.
Here is the script for the guest
name="opensuse113"
uuid="2f1f1d63-c416-a9c4-3bc1-4e92e248c5cc"
memory=512
maxmem=512
[code]....
Here are the images that show how it is all configured taken from Virutal Manager.
network1 png
tmpbridge png
host config png
The last image is from the guest config I just named it badly. Observe that xen is up and runing and there are no others issue this far.
OpenSUSE version: 11.2 *and* 10.0 I am unable to send email. It appears I am being blocked by my ISP [URL]... A Wireshark trace shows ICMP type 3 Code 13 - "Administratively filtered". It's important to note that I don't know exactly when the problem started, because I seldom use my ISP email account, I use Yahoo web mail due to the "throwaway" nature if I get hit with spam. I only discovered the problem when testing the functionality of 11.2. I suspect the problem started several months ago: I restored openSUSE 10.0 and the problem exists there too. I wish I'd sent that last email via 10.0 before the upgrade.
The weird thing is that using Windows 2000 box I can get a successful connection using telnet (Telnet also fails on the openSUSE box.) It appears to me there is something in the Linux TCP stack that Teksavvy doesn't like. I am on dial up and I pointed this out to Teksavvy tech support, as I am probably the only person left on dialup and the reason no one else has reported the problem
I can lookup DNS hostnames with dig and nslookup, but nothing else seems to be able to resolve anything. ping, telnet, Firefox, everything gets "unknown host".
For example:
> dig yahoo.com
; <<>> DiG 9.6.1-P2 <<>> yahoo.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20438
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 13, ADDITIONAL: 0
;; QUESTION SECTION:
;yahoo.com.INA
;; ANSWER SECTION:
yahoo.com.17579INA209.131.36.159
yahoo.com.17579INA209.191.93.53
yahoo.com.17579INA69.147.114.224
;; AUTHORITY SECTION:
.10071INNSL.ROOT-SERVERS.NET.
.10071INNSI.ROOT-SERVERS.NET.
.10071INNSH.ROOT-SERVERS.NET.
.10071INNSF.ROOT-SERVERS.NET .....
> ping yahoo.com
ping: unknown host yahoo.com
> ping 209.131.36.159
PING 209.131.36.159 (209.131.36.159) 56(84) bytes of data.
64 bytes from 209.131.36.159: icmp_seq=1 ttl=55 time=97.2 ms
64 bytes from 209.131.36.159: icmp_seq=2 ttl=55 time=98.9 ms
I am running
Code:
On my laptop (HPDV7), using DHCP for network access, KDE4.
I use Network Manager to manage wired and wireless connectivity.
I also have Samba server running for connectivity to Windows machines.
My router runs DD-WRT.
How do I tell this HPDV7 system to propagate a Host Name up to the router?
In the DD-WRT status screen, I see Host Name as "*" associated with the assigned IP address.
I cannot, for example, ping my HPDV7 machine from my windows machine, I assume because the router (also providing DNS for my network) does not provide the name to address translation.
I CAN ping the IP address directly, and Samba connectivity from the Windows machine to HPDV7 works.
The file
Code:
I am running 11.2 and set ssh to boot at runlevel 3 and 5 through yast and started the service through the terminal. I have turned off the firewall on my wireless router and in the local firewall. When I try to connect from a machine in my office, I get the following
Code:
ssh: connect to host xx.xxx.xx.xxx port 22: Connection refused
When I run telnet from the machine, I get:
Code:
telnet: connect to address xx.xxx.xxx.xx: Connection refused
telnet: Unable to connect to remote host: Connection refused
netstat -tlnp on my machine shows:
Code:
tcp 0 0 :::22 :::* LISTEN 31622/sshd
I am trying to enable DHCP so that it will give out IP's to some XP boxes when they boot. I have had success doing it dynamically, but not statically using the host declaration.
host xpTest {
hardware ethernet 00:50:56:2A:3B:00;
fixed-address 192.168.100.2;
}
My question is, what should the subnet declaration be if I only want to hand out static IP's like this? Also, the host is the same name that is specified in /etc/hosts correct?
I'm running openSUSE 11.2 (Linux piura 2.6.31.12-0.2-desktop #1 SMP PREEMPT 2010-03-16 21:25:39 +0100 x86_64 x86_64 x86_64 GNU/Linux) and have a network problem. At work, ethernet works fine. When I plug it into my DSL router at home (which works with other computers), I encounter the following behavior: ping can resolve host names, however, traceroute and Firefox and Thunderbird cannot.
It happens for both wired and wireless connections.
How I setup my NetworkManager to use the correct host name on my system, if that is possible. NetworkManager ignores the specified hostname and uses 'localhost', which is a bit annoying.
View 9 Replies View RelatedI need to add the following line in /etc/modprobe.d/50-blacklist.conf ..
Code:
In order to get wlan working, but I cannot seem to edit the file .
I tried:
Code:
Code:
I also tried manually opening the file but it is read-only . (I did not set my root folder to read-only, however .)
I even wrote a script in /home/exo/.gnome2/nautilus-scripts that should let me open files as root, but nothing works ..
This is my script:
Code:
I just installed (n this 11.2 system) vmware server (v 2.02), to have access to a few small systems. One of them is a 11.1 guest which I just upgraded to 11.3, successfully (almost).
I have a problem, though: from the host I can not ping/ssh the guest.
Guest to host works fine (including names).
Code:
The firewall is down on both sides. I don't see anything with iptraf in the guest. The IP addres of the guest is correct, unless I'm too tired to see.
Why?
Code:
The internal network is behind nat done by the PC Router.The TP Link is recieving wireless signal from outdoors and it has switching and basic routing capabilities. I'm using the PC router for better routing options.PC Router (or R for short) is a triple-booting machine - Linux, FreeBSD and Windows. It has two lan cards - external (ext_if) - 100Mbps Realtek 8139 and internal (int_if) - 1Gbps integrated Realtek 8169.The problem is that all traffic from R to the network is slow - about 5-20K, while the traffic in the oppoiste direction is all right - about 10MB that is fine for 100Mbps cables, NICs and switches. The problem persist no matter the OS the pc R is running.I've tried some debugging on the situation as follows:
- put another PC at the place of R - everything is fine. That exclude the possibility of damaged cables, RJ-45s, switches and etc.
- connected both of the NICs to the Internet while the internal network is being disconnected and they both work fine (no delays)
- traffic shaping is not running
- there is nothing in firewalls except NATing the internal network (and it is working fine). Actually these firewall rules have been operational for more than months and everything was fine untill a week or two ago.
- changed the internal NIC with another
- connected the internal network directly to the TP and all of the PCs are getting good network performance. Then connected the R machine to the TP as well and there was good performance between the internal network PCs and R.
- R has good performance to the TP. In fact everything has good performance directly to the TP (when not connecting trough R).
- the problem persist only between R and machines from the internal network.
I need some advice about virtual hosting on opensuse 11.1. I have about 6 domains running on the server. I use Webmin and Virtualmin on my server. Everything is working ok but I feel that I do something wrong
1. Lets say I have [URL] web and mail server running. When I write [URL] on my browser, the site is coming up but when I also write [URL] and I see the same page. There is no record on apache for [URL], there is only DNS record for the mail server. What do I do wrong?
2. Apache conf. is as below; do you think is it better to write "any" on address section instead of ip? What is the difference?
Address 88.11.11.111 (ip isn't true) Port 80Server Name domainname.com Document Root /srv/www/domainname.com/public_html
3. IP Address is the same for all domains. How I can configure that; when I write the ip address on my browser, only the specific site which I choose will be opened? Whichever I created last, that site is opening right now.
today I tried to configure a network route to a host for testing my network interface. Code: route add 192.168.1.15 eth0 As I have to eth interfaces and both interface got their IP from DHCP (192.168.1.11 and 192.168.1.12) and are in the same subnet, I shut the other interface down:
Code: ifconfig eth1 down Then I tried to test the interface by doing a ping to 192.168.1.15.
Problem: When I unplug the cable from eth0 (and eth1 is still plugged) the ping still works. Somehow my linux (it's debian) powers up again eth0 and pings over this port.
How can I stop my linux doing this. I just want to have the route added only on the one interface - not the other. Is it maybe some case of a default-gateway?
I have Centos installed and runing Vmware server inside, inside the Vmware server i have two V MAchines runing, how can i let those machines run outside the host ( mean listen to other computers in the outside network, i am after proxy server.
View 1 Replies View Relatedfor the life of me I am unable to get this module not to load
root@milomak-mac:~# cat /etc/modprobe.d/blacklist.conf
# This file lists modules which will not be loaded as the result of
# alias expansion, with the purpose of preventing the hotplug subsystem
[code]....
I have a server setup that is getting repeatedly hit by the same IP address it has tried accessing my vsftp and /drupal/cron.php. For security reason I have disabled vsftpd while I am not using it. The webserver on the other hand I need to leave running.
Code:
- pam_unix Begin -
vsftpd: Unknown Entries:
check pass; user unknown: 2708 Time(s)
authentication failure; logname= uid=0 euid=0 tty=ftp ruser=Administrator rhost=211.161.251.123 : 2282 Time(s)
authentication failure; logname= uid=0 euid=0 tty=ftp ruser=administrator rhost=211.161.251.123 : 426 Time(s)
- pam_unix End -
I would like to be able to add the ip to a blacklist. Additionally I would like to whitelist my own ip when I am working remotely, my remote location doesn't match my reverse dns and my server gives me an error at the end of the day that someone (myself) might be trying to break in. Running Fedora Core 9 in case it matters.
My Windows guests see my VMware Host Only folders as \.hostShared Folders But when I try to see them from a Linux guest, all I get is frustrated. No permutation of that seems to work. Because the Windows guests see the shared folders I know the host is doing its part in providing them. After two days of not finding an answer on the VMware Workstation forum I finally figured out that the problem really is how to look for them with Linux. With Linux I can turn off all NICs accept the Host Only NIC, put smb://172.16.138.1 into the address bar and see all the shares on the host, but not the folder designated as the host only folder.
View 3 Replies View RelatedI have two machines on my local netowrk, one running Fedora 9 and the other Fedora 11,(64 bit version).I made one, machine A, into an NSF server and arranged to export a directory to the other machine B.I made sure the firewalls were allowing nsf traffic, and I restarted all the relevant daemons.But the mounting still doesn't work.I looked at the setup on my Linksys router, but I don't see anything obvious there that might be getting in the way.ping and ssh recognize my names for the two machines and work properly, bu t I've also tried using the numeric local ip addresses.I tried with the program showmount on B to see if there was any connectivity and I getB% showmount -e Aand I get the responseclint_create:RPC: Port mapper failure - RPC: unable to receive.I used to manage a departmental network and set up nfs mounts all the time, but things were simpler then. I am at a lost what to look at next
View 14 Replies View RelatedI have a somewhat complicated network setup that I am testing on an internal network. I have the following route setup:
PC Client (192.168.2.100) --> Router (192.168.2.1) --> DSLAM (on our internal network) --> PPPOE Server (192.168.9.1) on Linux Ubuntu 8.04 on interface card eth2.
On the same Linux Ubuntu Machine on interface card eth1 (static IP 192.168.5.100), I have an Asterisk SIP server plugged into it. SIP Server = 192.168.5.101 (static) I need the PC client (192.168.2.100) to register via SIP soft phone to register on the SIP server (192.168.5.101). From the PC client I can ping as far as the eth1 interface (192.168.5.100)...but cannot ping the SIP Server (.101).
From the SIP server (192.156.5.101)...I can ping 192.168.5.100, I can ping 169.254.5.228 (Eth2:avahi), but not sure what that is. I cannot ping the pppoe default gateway (192.168.9.1), which I think you cannot anyway. No firewalls are running. My IPtables I cleaned out totally. I think it might be as simple as a route add, but I really have no clue. Tried building a virtual bridge using brctl LINUX betweeh eth1 and eth2, but that made things worse (could not ping anything after that)
Route table:
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.9.100 * 255.255.255.255 UH 0 0 0 ppp0
192.168.5.0 * 255.255.255.0 U 0 0 0 eth1
[code]...
Can someone explain me ipv4 notation like:
192.168.1.0/255.255.255.0
Does it mean "any host on 192.168.1.x" network?
I have rhel5 as host and guest is xp and rhel5, how will I make a network between them.
View 3 Replies View RelatedI am running a desktop not a server. As far as i am aware of no server stuff is installed or tunning that does not come with the standard ubuntu 10.04 install. I tried using sudo iptables -A INPUT -s xx.xx.xx.xx -j DROP , it works sometines , then sometimes it does not. Some that it seems to block just come back in about 15 to 20 minutes. On this one in particular i get the following error :
sudo iptables -A INPUT -s 222-208-183-218 -j DROP
iptables v1.4.4: host/network `222-208-183-218' not found
Try `iptables -h' or 'iptables --help' for more information.
For some reason, all the computers on my network can't reach each other via their host names. For example, the ping command doesn't recognize host names:
Code:
$ ping file-server
PING file-server (208.68.139.89) 56(84) bytes of data.
^C
--- file-server ping statistics ---
20 packets transmitted, 0 received, 100% packet loss, time 19152ms However, ping works fine if I use IP addresses instead. I would put the address for "file-server" in my /etc/hosts file, except for the fact that DHCP changes it's address occasionally.I attempted changing the line
send host-name "<host-name>";
in /etc/dhcp3/dhclient.conf to
send host-name "file-server";
but to no avail.
I had configured Squid in RHEL 5 and facing an issue with pinging. Not able to ping any website,hostname is resolving to ip address but not able to ping
[code]...
In the sys-log from server there a lot of message like this: Code: Apr 25 10:38:45 server portmap[2569]: connect from 192.168.1.3 to getport(nfs): request from unauthorized host Apr 25 10:38:46 server portmap[2570]: connect from 192.168.1.3 to getport(nfs): request from unauthorized host 192.168.1.3 is a client that want to boot from netwrok using PXE and NFS. However it doesn't boot and enters (initramfs) prompt. Seems that the server deny the connection from client.
View 5 Replies View RelatedI want to blacklist one module in RHEL 4.5. In RHEL 5.X we can remove the module using modprobe and then blacklist it in the file /etc/modprobe.d/blacklist to make it permanent after reboot. But in RHEL 4.5 there is no such file like /etc/modprobe.d/blacklist. So how to blacklist a module in RHEL 4.5
View 3 Replies View Related