I need to install Trac on a server that's on a private development VLAN (no internet access). Obviously Trac needs to go out over the internet to download/install various things. Does anyone know of an RPM or tarball out there that I can use to install Trac without being connected to the net?
View 2 RepliesI'm a absolute "server- noob" but I've got some experienced with desktop linux and want to build my own file server to access my stuff over the internet. I'm using dropbox for a while now like a cloud drive by simply mounting the "private" folder (which I encrypted with encfs/BoxCrypt) in order to cross-platform use important files. The problem is that Dropbox only provides 2 GB for free and I don't know how secure my data is up there. Moreover I don't wanna always sync all files locally.
I got an intel atom machine standing around and so I want to build my own file server to provide the same or at least a similar service.
1. Which type of server application provides a "network drive" that computers (several users) from the internet can access?
2. What's the best way to encrypt my data and transmission in order to make the system absolutely unattackable/unreadable from outside?
3. Is there a service that can provide a dropbox-style sync mechanism?
4. Which distro should I use? I'd prefer a non-desktop enviroment solution but never had anything to do with it. Is that possible for an average linux user?
I'm aware that this solution won't be very fast because of the limited upload of a standard internet connection but that would be ok! It's more that I want to have the possibiltiy to access all my data as a thin-client anywhere, anytime on any machine and still be on the safe side. I know that this is some kind of contradiction but what would be the best compromise? I know some questions may sound stupid but I really never had anything to do with servers at all in the past...
I have installed Trac via 'yum install trac'. How do I access the interface? I do not see a trac directory in my /var/www/html directory.
View 1 Replies View Relateda friend of mine is doing a small website-project in school (group of ~6 people). They want to use git as VCS and need acces to a server. I have an account on the server from university, but - of course - no root access.
I could create private/public keys for them, to SSH into my account, but I don't want them to have this power I found 'git-shell', which seems to be used for restricted access with git (although I'm not sure whether I understood the functionality).
My question is: Is it possible to configure SSH keys in that way, that the server runs them (and only them) in git-shell in a specified directory (using ~/.ssh/{config,authorized_keys})?
So that they can
- log in with their SSH key
- use git, execute scripts etc.
- use git push/pull from their private+school PC
- work only in a specific directory (like chroot) eg. ~/web-project/
[Code]...
I have a linux box (fedora) with two ethernet cards eth1 and eth2. On eth1 I successfully configured a PPPOE internet connection. Such that from the server I can browse the internet. On eth2 I wired it to a wireless router essentially to provide the wireless cloud. On eth2 I also configured dhcp, such that the Linux box is both PPPOE and DHCP server.However my clients on the LAN cannot access the Internet.
On passing the routing command I get
Destination Gateway Iface
196.44.x.y 0.0.0.0 ppp0
192.168.1.0 0.0.0.0 eth2 (my subnet)
0.0.0.0 0.0.0.0 ppp0.
The router (functioning as a wireless access point mainly) has a fixed IP address of 192.168.1.2 and eth2 has IP address 192.168.1.1. The dhcp file running on Linux has been set with option router (Gateway) 192.168.1.1. I cannot figure out how to correctly set the routing table such that my clients on wireless can access the internet cloud. I googled and googled but no solid solution. Any suggestions?
do you know if there is any possibility to route/force non-vlan packet to a vlan interface in Linux?
View 2 Replies View RelatedERROR "global name 'sqlite' is not defined" when install Apache + Subversion + Trac
Apache+Subversion+Trac
httpd-2.2.16
Python-2.6
swig-1.3.31
sqlite-3.6.13
subversion-1.6.12
mod_python-3.3.1
[Code]....
I am new with IP tables stuff and i have a problem....
i have a pc Contain a fedora OS and i want to make a small network (4 PCs Contain XP OS) and using the pc of fedora OS as a firewall
i want to Prevent the ping (i think it called(ICMP)) in the privat network and prevent one of the PCs from Browsing Internet(prevent port 80 and 81 as i think)
and i still don't know how to make the Internet go Through the firewall to the private network...
note: WAN = eth0
LAN = eth1
Is there a way to see the vlan tagging associated with an ip addresses on my centos servers from their command line?
View 3 Replies View RelatedI am trying to provide dynamic IP addresses for devices that are on a different VLAN (101). The server is currently providing 172.17.x.x/16 range for its own VLAN (417). My server is RHEL4 and DHCPD is version 3.0.1. The core switch (Cisco 3750) is configured with ip-helper on VLAN 101 interfacce. Here is my dhcpd.conf file:
authoritative;
ddns-update-style ad-hoc;
omapi-port 7911;
shared-network eth1
[code].....
However my laptop on the VLAN 101 keeps getting IP of 172.17.x.x/16 range..
I have a seperate partition for my "/home" folder. Whenever I install a new distro I format my "/" folder.
This way I was able to access my old home data files since I install using a different username. Everything worked fine until last Sunday.
10.10, unlike other versions of ubuntu, has encrypted my old username in my home folder.
Then using this document [url]
I was able to mount my hard drive again. But all the file and folder names are like this.
Btw I don't remember selecting an option to encrypt my old home directory in the first place, what is this ?
Every developer in our organization has access to a single development server and all development ( other than basic experimentation ) is done on this server. This is primarily because there are several interdependent systems and having copies of these systems on each developers machine slows that machine down to the extent of making it completely unusable. All developers access this development server using ssh. Of course this implies that scp will also work as the sshd daemon is running making data vulnerable.
We are currently attempting to secure the code and data on this server from unauthorized copying and transfer.
Currently I am attempting to set up virtual machines on each developer machine that can then be used to connect to the development server. I have created a shell that does nothing but allow for the typing of one command that simply transfers ( ssh login ) the user onto the development server.
I am using virtualBox and ubuntu mini to achieve this.
Problems: The first question is if this is a reasonable way to achieve what I am attempting to. Is there a better way?
The others is more in terms of the set-up: I am attempting to resize the virtualBox console. I tried this by editing grub. Although I am able to resize the screen at start-up the entire screen goes back to ( what I believe is 800x600 ) after the Ubuntu splash screen.
The virualBox seems to have completely messed up the keyboard detection how can I rectify this?
The other is regarding the restricting of shell access I have currently done this by removing access to /bin/ for normal users. Is this secure enough or is there a better way?
i noticed that all files can be seen by another computer if the drive is accessed
can I stop this? can i set a private folder?
In my computer networking class I have the option of doing a project where I set up a dns server for our classroom network. The problem is that this network is totally separate from the school network and we aren't allowed to connect it to the internet. I want all the machines to ping each other by name instead of ip using dns instead of host files on all 20 computers. I read on a site somewhere that you cannot do this because the dns queries will always go to the root servers. Is this correct? Is there some way I can do this using dns? The machine in question is using Ubuntu 9.04.
View 1 Replies View RelatedOk i want to access my server from internet, ok I have checked with my mobile internet provider (3) they say they dont block any ports, is it just a case of letting the firewall let external access to pc? ( no router just mobile dongle)And do i just ssh into external ip on ssh port
View 2 Replies View RelatedIs there a safe way for me to configure my server for access from any internet connection as well as from my home/office LAN? I'd like to be able to access file shares, webmin, the router console behind my Gateway for maintenance purposes. Access to Server Desktop itself would be a bonus.
View 12 Replies View RelatedI am using a CentOS 5.4 server for Snort (it's actually using the easyIDS config). I'm trying to modify some things, and I've noticed that I can't seem to download any files. WGET, FTP, etc... all just time out. It's not a network firewall issue, as I've been monitoring the logs and see no blocked traffic, and other machines on the subnet can get outside with no problems. I checked the Cent firewall using the setup command, and it says it is disabled as well. I'm very new to linux, so I'm wondering how I can troubleshoot this? The wget and ftp errors just say the connection timed out, but I'm not sure why.
View 2 Replies View RelatedI have a server that was set up by a friend so I have a location to save all my documents for work in a RAID array.
It is on a static IP address, I can ping the hub and other computers on the network absolutely fine.
I can't connect to the internet, the router in question is a Netgear CG3101D. Logging into the router I can see that the server is a trusted device and in all the parameters are the same as other computer running Ubuntu Studio.
Does anyone have any tips of how I can find out how to find what is wrong?
It is Ubuntu 10.04.2 LTS (Lucid).
First off - I'm running 11.04 as a VPS on an OpenVZ.
I've set up a very basic environment of LAMP + mail server. Installing apache, php, mysql and proftpd all went fine, but whenever I install iRedMail (which is postfix + dovecot + clamav and few more packages) I lose the internet connection.
Although the server is easily reachable by ssh and http, I can't connect anywhere from the server. At first I thought it only had issues with resolving domain names, but now I see it doesn't even ping IPs as well.
Code:
# ifconfig
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
[Code]....
I have install centos 5 in my dell laptop, now i want to configure and run wifi to access internet through wireless.
View 5 Replies View RelatedI'm setting up an old box as a dedicated file-sharing server on the LAN as well as an internet web server for my personal web site but I have no network connection. My computer is connected to a router which is connected to my DSL modem. The router has the Ubuntu box's MAC address as well as a Win7 box, which connects to the internet fine.
Here is what I've tried:
1. Check routing table
Code:
2. Try to add a default gateway to the internet on eth2, this happens:
Code:
3. I edited resolv.conf, which was empty, adding:
4. I edited /etc/network/interfaces as follows:
Code:
Then I type the following:
Code:
And it keeps doing this endlessly because it's not finding the DHCP server, presumably...? This didn't solve the problem and so I attempted another configuration:
Code:
Still, not internet connection and no ability to apt-get anything (says packages not found)
So, this didn't work either. What I've tried should work, especially the route command. Now why won't it work?
I am having a server in a corporate data centre. There are some virtual machines running on it.The main server is accessible from internet via SSH. There are some people who within the lan access the virtual machines whose IPs on LAN are
Quote:
192.168.1.1
192.168.1.2
192.168.1.3
192.168.1.4
from internet only one host is allowed SSH. This machine has public IP and is also connected to LAN on the IP 192.168.1.50. Tunnel is not allowed on our network.So now I am came across a solution as explained on this link. I am not clear with on which machine .ssh/config file I add following
Code:
Host securehost.example.com ProxyCommand ssh user1@insidemachine.com nc %h %p Should above be done on gateway where public IP and ssh is allowed or client on internet who has to login. Do I need to create separate accounts on the gateway also so that the users who can SSH to gateway then are forwarded to inside machines? Or one account on gateway is sufficient for different people logging in via internet to my gateway and then forwarded to internal machine?
Then do I need to create an account user1 on the gateway also?
1) What is the correct syntax for ProxyCommand on gateway's .ssh/config should I use
Code:
ProxyCommand ssh user1@inside.machine nc %h %p
or I should use
Code:
ProxyCommand ssh user1@gateway.com in nc %h %p
2) Should I create new user accounts on gateway also which exist on internal machine?
Centos 5.4 distro using on remote machine. I have remote site where internet access given via squid proxy. So when we enter in browser it start working internet fine. But on command line (bash shell prompt terminal) like wget, ping, nslookup, traceroute etc., these commands does not work.
View 6 Replies View RelatedI've a SQUID proxy server installed in SUSE 9.0 ES server. I've created cache dirs on seperate partitions for better caching. Its working fine. But since last 15-20 days, i've experienced very slow net access to clients. I've gone through the /var/log/messeges file, it generates a two line error messeges
client read request fd602 invalid request
parse http request: unsupported method;HET
This messege increases as the number of clients increates (for internet access). The apperance of error messege lowering down as soon as the number of clients reduces.
As the count of clients increases error messeges increases, internet access getting slower and slower.
I have configured squid server and it is working fine. I want that only specific ip addresses in my LAN should be able to access internet and for that I have given these entries in access control lists in squid.conf file:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT
acl QUERY urlpath_regex cgi-bin ?
acl apache rep_header Server ^Apache
acl our_networks src 192.168.0.181/255.255.255.0 192.168.0.182/255.255.255.0
And in http access I have given this:
http_access allow our_networks
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny all
In this I want that only 192.168.0.181 and .182 should be able to access internet but Now the problem is that all the IPs in the LAN like 192.168.0.20 are also able to access internet. What changes I need to do to allow access to specific IP addresses. I am not using any firewall or iptables entries and i am manually changing in the firefox at client side to access internet.
Am using Suse 10.2 for internet and e-mail server. currently all my users have access to the internet if they know how to setup their web browsers. how do i deny some users internet access so that a user can only access his/her e-mail but not internet.
View 1 Replies View RelatedI was having a hard time configuring ubuntu server with command line so this is the steps I did to install the GUI;
Code:
then
Code:
then
Code:
The GUI started up fine and I logged in as root, then I tried Update Manager and received this error message:
Requires installation of untrusted packages
I tried this in terminal window
Code:
and got
W: Failed to fetch [url]........(-5 - No address associated with hostname
So I did System Testing and got the result that my network was fine but my internet failed!
I could do command line update no problem before installing GUI. I can see it on the network on another computer though.
Trying to setup without the GUI is starting to look easier than with.
We have Apache installed on CentOS 5.3 in our laboratory. Indeed the server is running fine for almost two years since it is actually the first CentOS 5 that was released just regularly updated. Now, most of our applications are custom made PHP applications and until now we somehow managed to avoid using PHP to fetch files that are on the internet itself. But now we are desperate because we need to allow PHP to fetch files through Apache but it seems as if Apache is not allowed to make a connection to the outer world. Additionally we use a proxy server to connect to the outer world so right at the beginning http_proxy is used to set that environmental variable. And for the root user it all works fine after that but it seems as if the apache user is not allowed to access the internet. Just to make a remark our web server can be accessed from the outer world so its a one way street for now.
View 1 Replies View Relatedi want to buy a pci weasel, people told me i will have access to the server over internet with this board.Does anyone have any experience with this kind of card?How can i have access to server over internet to the bios,etc.
View 1 Replies View RelatedI am getting an access denied when trying to log in via SSH to my home server with putty(windows) over the internet. I can use any user including root and get the same result. If I use my Android phone with the ssh terminal command I am able to successfully log in and use the server.
View 1 Replies View Related