Software :: Redirection With NuFW To Go On Unauthorized Website
Feb 23, 2010
I'm using NuFW but I don't know how could I have a redirection if the user try to go on a unauthorized website... On this moment, my web browers continue to try to join the website, even if nufw has already send a negative response. I would like that my browers redirect me on a other page, how could I do?
I'm using on my PC the firewall NuFW and SNORT. Snort send alerts when he detects a pornographic website. I would like that NuFW create an ACL to drop this IP. Can SNORT do this or must i do a program wich listen the Snort's port to catch the ip and write it in the ACL file of NuFW?
When I try to add a printer using this web interface.I get stopped at authentication required.I put the root login and pass but
401 Unauthorized.Enter your username and password or the root username and password to access this page. If you are using Kerberos authentication, make sure you have a valid Kerberos ticket.
I'm doing a research to protect my pc from physical access. What I'm facing here is that my company created a program for fedora 8 and plans to sell the unit away. We created a function where you can configure the program using any web browser from a network so we do not want anybody to have access to the fedora except for out personnel.
Based on my research, I've found [URL] this guide to protect people from accessing grub and single user. I am currently researching on preventing others to clone the harddisk. I would like to know if there are any other methods to prevent people from unauthorized access to fedora.
In the sys-log from server there a lot of message like this: Code: Apr 25 10:38:45 server portmap[2569]: connect from 192.168.1.3 to getport(nfs): request from unauthorized host Apr 25 10:38:46 server portmap[2570]: connect from 192.168.1.3 to getport(nfs): request from unauthorized host 192.168.1.3 is a client that want to boot from netwrok using PXE and NFS. However it doesn't boot and enters (initramfs) prompt. Seems that the server deny the connection from client.
I have been thinking lately about the number of computers connected to the internet that become "zombies" for sending out span (or worse) when they are attacked with ssh over the internet using some kind of script. Today, I read an article in a magazine about internet detective work when you find that there has been an unauthorized attempt to connect to your machine. According to this article, almost any computer connected to the internet is attacked very frequently and the log files of that computer will show this. I have seen these in my own log files in the past.
I have learned a number of ways to track down the attacker (to a very limited degree). But what I would like to know is a relatively easy application to run and understand to monitor my network traffic and find these attempts quicker. I know I have probably almost nothing to be concerned about, but I would like to be able to head this kind of problem off. I have a number of machines connected to the net and each other and my wife does a lot of business on the internet. So, besides becoming a bot for some criminal, I don't want any credit card details stolen.I have read about Wireshard, snort, etc. Is there an application (with gui preferrably, but not mandatory), that is novice compatible that will let me monitor this?
This is an examination senario. We have mulitple users logging into a RHEL-4 server using putty. These people are part of a same group. They are giving UNIX shell script exam.They are helping each other copy the code by using redirection to /dev/pts/x. Is there any way I can stop this redirection?
I got a peculiar request at work, and maybe you folks can help me out.I want to rewrite URL 'foo.com' as 'bar.com' (in the browser address bar) still display the content of 'foo.com'
I have a linux script that generates a string and prints it to the console. I want this string to be the name of a file and open it for editing in vi. How can this be done?
I am always confused about the redirection operator <Lets say i have a file input.txt that contains one word "hello" without the quotes when i do the following why don't i see any output? $echo < input.txt Secondly, i am slightly confused between input redirection < and pipe | operator. Sometimes they seem to do the same thing. For example i can achieve the output from the above command as follows $ cat input.txt | xargs echo
Ok, here goes, I have a rdp server sitting at a remote store which is behind a router I do not control.
I might be able to get the phone company to add routing to it but at the moment I'd like to do this with ssh and reverse port routing, because I might need this for other ports later and I never know if the phone company wont break other routings already in place or just screw up the entire thing .
I am able to have a linux box at the site ssh into a server located where I'm at and reverse port forward port 3389 to that server. I can also then ssh into that server from my linux box and port forward 3389 to my box, under another port since my 3389 is already in use. Finally I can use rdesktop to rdp on the my local box which bounces it through the server and back to the linux box which forwards it to the rdp server (A Windows 2008 server to be exact). This is all well and good and works reasonably fast, but, I need to be able to have users on windows boxes at my site do this without all of the rigmarole. I need to, I guess, redirect a normal open port, or create one, on the server where I am so that it connects internally to the reverse forwarded port or open the internal port to the outside. So I guess I need to make it a 'gateway' for that one port, this way all I have to do is point the rdp clients at the main server and port to have it eventually connect to the rdp server in the remote store.
how to go about doing it. I guess I need an iptables entry forwarding the port but I'm not sure what is should be.
The other option is opening up the port 3389 to the outside but I'm not sure how to do that either. Right now I have no iptables entries at all but even if I turn off iptables completely port 3389 is not available if I try to use it from another pc on the network but I can rdp from the server itself using the 3389 port so I know it's working internally.
There is this server where in I want to use port redirection using iptables. For port redirection I have used nat table with PREROUTING chain and REDIRECT option. Like:
Code: iptables -t nat -A PREROUTING -p tcp --dport pop3 -j REDIRECT --to-port 8110 It just does not work. I have tried to redirect other ports as well but nothing works.
I am using squid proxy server in my Linux machine for caching. Now i want run my squid in transparent mode not set proxy settings in browsers.Like squid is running port 3128. If we redirect the port 80 packets to port 3128, looping is occurred.How to avoid looping?
I have been trying to achieve something through iptables but something is going wrong. I want connection/packets arriving to a specific computer (let's call it "server") from another specific computer ("client") inside the same network to be automatically redirected to a remote computer in the internet and vice-versa. I tried doing that using iptables with these commands on the "server" PC:
I'm running a server with Ubuntu 10.04 installed. I recently set up a VirtualHost (I'll call it my.website.com), like I have in the past without any problems. But this time, I'm stumped. When I connect to my.website.com, it should hit port 80, right? It doesn't; rather, it hits port 8000. I don't have any rewrites/redirections (I checked wherever possible) and checked apache2.conf (httpd.conf is empty).
I'm in a bit dilemma on how to set IP based forwarding to specific URL. I have internal staff from 207.173.4.xxx going to www.domain.com. I would like to forward them to www2.domain.com when they are offsite and working remotely from different IP address range. Is there way to achieve this with Apache? If not, is there a software solution to achieve this effect?
I have a problem about redirection over Apache2 over Debian Lenny. We have build a LAMP, and our programmer make a software with these features:
When you put on your browser (i.e.) [URL], you access to the program in /var/www/vhosts/hugohome/inside. And when you put [URL] you access to the program in /var/www/vhosts/hugohome/outside. Today, if you just put [URL] our Apache answers 403 (forbidden), because we had blocked folder access. (You know....isn't the right way). Our Apache's Document Root is in /var/www/vhosts/hugohome.
Our goal is to change definitely [URL] to access -> /var/www/vhosts/hugohome/inside. This is our main intention. Also, we can continue with [URL] pointing to /var/www/vhosts/hugohome/outside. I thought, hmm easy!: I can change the DocumentRoot to /var/www/vhosts/hugohome/inside and try with an Alias to outside. But the problem is that the programmer has taken the software reference with /var/www/vhosts/hugohome and when I tried to change the Document Root the programs didn't work fine (loops, error 404, etc).
How can I do?. I have tried with Apache with many manners, but I just have a relative success with: "RedirectMatch ^/$ [URL]". It works, but the Browser shows the ugly [URL]. Our intention is just show [URL]. Unfortunately we can't work directly with the DNS servers, and I guess that I can resolve with (i.e.) Apache and Bind together.
I have a test application that sends out email. It's configured to send it through the sendmail installed on the local machine (distro: RedHat 4.8; sendmail version 8.13.1). The email addresses are external to the machine. I would like to stop most of those emails. I can't use the /etc/aliases file, because that methodology only works for operating system addresses/userid's on the local machine.
I'd like to block certain addresses from getting emailed out, so that users don't get spam from a test server that's been "cloned" from a production server. On the other hand, I don't want to turn off email altogether. I'm pretty sure that if I installed SpamAssassin I'd probably be able to rewrite certain addresses. But SpamAssassin is bloatware for what I want to do. If native sendmail is not able to filter out from sending certain emails based on the "To: " header (in the envelope) is there an app that uses sendmail's milter API that will? I've been away from heavy use of sendmail for awhile, so it had been awhile that I'd been on comp.mail.sendmail, but I notice that traffic is a fraction of what it used to be.
I have a web application running on port 8060 and requires a sub directory on the end (:8060/fisheye/). I also have apache running on port 80 and would like to redirect it to [URL].
Code: RedirectMatch ^/$ [URL] but the port number is visible, how can I hide it?
We have several HP Thin-Clients of type t5545 in use. We redirect USB-Media to the terminalserver. Because the t5545 runs a debian customized by hp, we can treat it like a debian in some way.First, I'll explain how usb-redirection is configured: automatically mount it to /tmp/tmpfs/media /tmp/tmpfs/media is redirected as disk "Z" via rdesktop-parameter -r disk:sharename=path in case of removed usb-media udev will run a script to umount -l the device and delete the mountpointThe environment:
Thin-Clients run linux: root@mac-addr:/tmp/tmpfs/media# uname -a Linux mac-addr 2.6.26-2-686 1 SMP Wed Nov 4 20:45:37 UTC 2009 i686 GNU/Linux Terminalserver runs Windows Server 2008 R2
So I am brand new to the Ubuntu Server realm and Linux in general (15 years MS development utilizing MS Servers), and so far have been able to tackle some of the most pain in the butt installs and configs ever (VMWare Server being the worst and least stable, but running good now). I have done the site search thing to find out if there were similar issues surrounding Apache and if the answers were found within those posts.
The issue that I am having is in utilizing Apache as a proxy server for redirecting web traffic on one external IP to multiple internal IP addresses. I have multiple virtual servers and I need apache to act as a pass through / redirection proxy for web traffic. So far, it worked for a bit, then it becomes flaky and starts failing randomly while clicking through some of my sites. The worst offender being my SharePoint site.I rebooted the linux server, and when I try to access one of my pass-through sites, all I received was an error message about server difficulties and possibly too much traffic. After some time had passed, and few refreshes later, I finally received the authentication prompt from my windows web server, but this whole configuration is still unreliable. I sometimes get the password prompt several times where it does not allow me to login with my proper credentails, etc, and other times it just fails to display the page full stop.This is an externally facing SharePoint site.
So there's the Windows side. I also have a WordPress site that has similar issues. With WordPress it's even more odd as I have set the WP site settings to not include the directory /wordpress/ and setup my Proxy to point to the http://xxx.xxx.xxx.xxx/wordpress/ landing. Yet on some actions (i.e. browsing themes) it decides to throw in the wordpress directory causing it to 404, and in other sections it doesn't. This actually sounds more likely a WordPress bug than a Apache bug. file: Default (from available sites):
Some context: I'm calling some functions from within a C program and want to measure how long they take to execute. I've done this successfully, calling printf to print the results to the screen. This is reasonably fast. Ideally I'd like these to be dumped to a file, but fprintf presumably has some overhead since it writes to disk? Unless the data is buffered by the kernel and flushed later? What kind of delay can I expect before fprintf returns?
If I redirect the stdout to a file when I instantiate the binary as a process, will calls to printf also experience any overhead from redirection to a file? My aim here is to capture all data in a file, with the minimal amount of coding and effort, but with minimal impact in terms of time overheads for printf calls.
i've checked the link, and it makes it better. but it doesn't include all the information. i'll continue searching the internet. However i have seen an example of creating a fd:
Code: exec 5<&1 echo "TEST" >&5 exec 5>&-
as in the page, this was intended to redirect the stdout to the fd 5 and create it, and close it. i have the following questions:- what is exactly the meaning of second command? is it to redirect the command stdout "test" to the fd 5? and how i can see the contents of the fd 5? - in the first command, why the < is used instead if > and what is the difference between the below two commands as in the info bash *Redirection section It will be helpful if anyone could include a graph for file descriptor before and after different command execution.
I'm have a base level understand of linux at this point. I have Debian box that I am trying to do some port redirection with.
I have my external NIC as eth0 with an IP of x.x.250.5. I have my internal NIC as eth1 with an IP of 192.168.1.1.
On the internal network I have a NAS box with a web interface at 192.168.1.100. What I need is to set it up so that a request to x.x.250.5:8080 will some how forward/redirect to the internal network NAS box at 192.168.1.100:80.