Software :: Software Similar To Ajaxterm To Access A Lan Via SSH In A Restricted Firewall?
May 6, 2010
I am trying to give some one on internet access to one specific IP on my machine which is on LAN behind a Bastion host and the authentication should not be twice only one time. So I am trying to have some thing that runs on my bastion host or you can call it as a gateway and it redirects the incoming SSH to a machine on LAN but it should not be a two times authentication only once. The user should not know that they first logged in to bastion host and then they are redirected to some other IP on LAN.This using a web interface so that if they are behind some proxy or firewall they do not need to bother at least they always have http access.My gateway has public IP but only port 22 is opened by ISP .Is there any software or mechanism to do so I came across one [URL]..
View 1 Replies
ADVERTISEMENT
May 5, 2010
I have a computer which has a public IP.My ISP has allowed only port 22 for my machine to be accessed outside from internet.I want rest of my computers which are connected to this machine be accessible via SSH on internet.I can configure IPTABLES to route different ports to internal machines but since ISP has given only one port for the gateway how can I go for it any guesses.I came across some thing reverse SSH tunneling but that has to keep the connection alive all the time at gateway I want my trusted people to be directly able to access the machines on LAN to which they have account to login in this scenario.
View 9 Replies
View Related
Apr 14, 2010
I'm trying to lock down SSH for a particular user who wants to use my server for some development, so I'm making him a little play area.
Problem is I'm having difficulties locking the account down.
I've implemented bashrc which appears to be what I wanted at first, restricting the user to a user directory of my choice, but I now find that firstly the user can't use cd at all, not even cd to directories within the users home directory.
But also I've found bashrc to be pretty pointless security wise because I can just type sh and then do what ever the hell I want? Such as cd / and then ls and see everything on the server.
So I'm wondering if anyone has a solution to this for me?
I want the user to be able to make directories and cd into them in their own user area but not cd .. or / out of their user area.
View 3 Replies
View Related
Apr 28, 2011
I just started using Linux, more specifically the Ubuntu distribution, earlier today. I am attempting, and failing, at setting up my wireless with a usb device. My device is on the list of those supported, and I am trying to install ndiswrapper so that I can use the windows drivers. My problem is, my access is restricted. I can not save to anywhere on my File System. Anyone know how to fix this problem?
View 2 Replies
View Related
Jun 11, 2010
I'd like to be able to limit access to a particular website, based on the time of day. I would also like to be able to password protect this if possible.So for instance, from 7am until 10pm daily, I can access URL... but after 10pm it redirects to 127.0.0.1 or something. And this configuration be protected by only allowing a certain user (other than root) to change the config?
View 7 Replies
View Related
Dec 13, 2010
In CGI scripts, there are certain files that are getting "permission denied" when it seems they should be accessible by the apache user. I am running the default package install of apache under fedora. Here is an example:The following is /var/www/cgi-bin/test.pl
Code:
#!/usr/bin/perl
use strict;
[code]...
View 9 Replies
View Related
Nov 19, 2010
I want to setup samba on Maverick. This is the case. I have 2 folders want to be shared, freeaccess and restrictedaccess. The freeaccess folder can be accessed by everyone on network. The restritedaccess folder can only be accessed with account named someone. What I want to ask is, how to setup samba that can solve that case...??
View 9 Replies
View Related
Apr 21, 2011
I want to configure a remote internet facing server as git server. I would like to restrict access to the server to a few systems (access is restricted to select computers, not users). I first thought of using ssh key, but the key can be copied to another system hence that alone is not sufficient. I am having a dynamic IP, so simple IP based firewall blocking is also not possible. I was thinking about the possibility of using both SSH Key and IP based access. Is it possible to update the firewall rule whenever my ip gets changed?
View 6 Replies
View Related
Jan 24, 2011
My home directory's permissions allow only myself access to it. Is it possible to put a file inside my home directory with.. say.. full permissions, and create a symlink to it so other users can access that file alone inside my home folder? System is Ubuntu Karmic.
View 2 Replies
View Related
Aug 19, 2011
how to setup ajaxterm without https. i want to use it as [URL]
View 1 Replies
View Related
May 15, 2011
a friend of mine is doing a small website-project in school (group of ~6 people). They want to use git as VCS and need acces to a server. I have an account on the server from university, but - of course - no root access.
I could create private/public keys for them, to SSH into my account, but I don't want them to have this power I found 'git-shell', which seems to be used for restricted access with git (although I'm not sure whether I understood the functionality).
My question is: Is it possible to configure SSH keys in that way, that the server runs them (and only them) in git-shell in a specified directory (using ~/.ssh/{config,authorized_keys})?
So that they can
- log in with their SSH key
- use git, execute scripts etc.
- use git push/pull from their private+school PC
- work only in a specific directory (like chroot) eg. ~/web-project/
[Code]...
View 2 Replies
View Related
Oct 21, 2010
What app/util for Ubuntu Server 10.10 would allow me to browse and download data stored on the server via a website interface similar to Windows home server?
View 2 Replies
View Related
Dec 27, 2009
I've lasted a lot longer than usual before resorting to asking around, but I've finally gone delightfully mad. I've been trying to access shares based on Windows 7 Ultimate with limited user access on said shares. I've managed to get into my XP machine, another mate's Vista machine and various Linux boxes with no issues, but that's only for shares that are accessible by everyone. The moment I try to get into a share that requires user credentials, I get "Error returning browse list: NT_STATUS_ACCESS_DENIED".If I try to access restricted shares (be it machine or folder) through Nautilus, I will get a user logon prompt, but it fails. Using smbclient results in just as little success, and now I'm munching through O'Reiley's Samba manual from '99, after realising that I need to basically learn Samba in its entirety to have a hope in hell at getting this to work. The trouble is though, every HOWTO and relevant forum post I get my hands on all seem to concentrate more on the server side of things, and usually servering from a linux box, not the other way around as I'm trying to.
The above Windows 7 machine won't even allow me to view its share contents, whereas the XP machine previously will allow me to browse, but won't allow me to access folders with restricted access. I'm pretty sure there aren't any major issues with the way the Windows 7 machine is setup, as it can be accessed with logon from my Xbox, Ubuntu machine, XP and Vista, with only Fedora having problems getting in as it constantly fails logon. What I'm trying to establish is, if Ubuntu can get in, is there something in my Fedora samba config I'm missing that's preventing me access? My thanks in advance to those of you who've been able to put up with me rambling.
View 8 Replies
View Related
Jan 6, 2010
I have my firewall setup so that only specific subnets/IP addresses can access the system. My issue is that I have remote user/laptop who needs to access the system, but is constantly on a different subnet/dhcp IP address. Is there configuration for iptables where I can enter the mac address of the laptop to allow access to the system and not specify a subnet or IP address?
View 3 Replies
View Related
Jan 1, 2011
I've got my server mostly configured with Samba file shares - I can access from Linux and OSX computers. I've enabled Samba Clietn and Sambar server in the openSUSE firewall settings (on the server), but Windows 7 can't seem to connect. I've been trying to tweak registry keys in Windows and such, but had no luck. However, when I turned off the firewall on the server, I was instantly able to connect. Is there some other service or port I need to open for Windows 7?
View 4 Replies
View Related
Apr 20, 2011
I'm getting my first web server configured, and as per a tutorial I found, I used shorewall. However, it blocks all internet access (even from apt) to my server! Does anyone know a decent firewall program or a good guide on configuring shorewall?
View 1 Replies
View Related
Jun 10, 2009
I am looking for a solution for our LAN traffic monitoring and would like to use some opensource linux application. I have a linux box with two NIC cards and what I thought is the following: Our setup is as follows. Internet comes in through the router and into the firewall. From the firewall it goes into our switch and distributed among the workstations.
I have no access to the router or the firewall as they are centrally configured. I would like to place a device into the loop through which I could monitor the LAN traffic.
Can I put a linux box between the firewall and the switch and have all packets going through registered and logged? I have a proxy server (non transparent) and that captures some but not all. I would like to get all packets registered without interfering with the LAN etc.
View 3 Replies
View Related
Nov 23, 2010
I have a Perl script behind a firewall. I want to access this script from Python on Google App Engine. I have access to the server running the Perl script via the following methods: SSH VPN What are the ways I can do this with Python on GAE? Can I use something like wget, login through ssh and run the script using perl interpreter?
Currently it is a CGI script that I can access through a web browser if I'm inside the firewall. My only other option is to turn the process around, i.e. have perl send data outside the firewall to google app engine. But I want to know if this is possible as it is now without changing the perl script.
View 8 Replies
View Related
Dec 1, 2010
I have a fresh install of SuSE 11.2. I have installed Communigate Pro (Email server) and Webmin. From my workstation (on the same LAN), I can access the web interfaces for both CGP and Webmin right after the server boots up. But after about 10 minutes or so, I can no longer access either web interface. The server itself still functions normally. I can get on the internet with the server, and I can control Webmin via localhost:10000.
The only thing that allows me to connect to it from my workstation again is to either restart the server, or go into "Network > Linux Firewall" and click "Apply Configuration". What's going on that makes my remote access stop working?
View 3 Replies
View Related
Jul 25, 2010
I wanted to know if there was a firewall program out there that can open specific ports when a program/process is run and disable the ports again when the program is closed.
View 2 Replies
View Related
Apr 12, 2011
I am trying to install ubuntu on my windows 7 OS using the wubi installer. The installer is trying to download amd.iso.torrent, but I guess it should be downloading i386.iso.torrent. At, the same time I am getting permission denied even though I allowed access from my firewall.
View 2 Replies
View Related
May 13, 2010
I could no handle/circumvent on the past week, despite of the several "googling" and documents reading. I will try to mention all needed bits... I'm managing a network with the following structure:
eth0: internal net
eth1: DMZ
eth2: 10 mbit/sec sync line with eight public /29 IP's + a /30 interconnection network. All public IP's must use the interconnection's network gateway.
eth3: ADSL with ppoe with fixed IP (ppp0).
Now, a few extra info:
- All internal traffic is routed through ppp0 except when it's destined for DMZ and public IP's range.
- DMZ traffic is routed either through ppp0 or eth2. This is done by source IP.
- eth2 has on IP from the interconnection network, and six public IP's are also defined on eth2. Command: "ip addr add ...."
[code].....
View 6 Replies
View Related
Aug 1, 2011
My network diagram is internet<---->dansguardian proxy(centos5)<--->my network i have blocked facebook for my network but now i want to give only 2 ips to get its access & i do not want to enter these ip in exceptioniplist as if i doo so then they will be able to access all the sites that i have blocked. and if i am giving this entry [URL] in bannedsite list it is also not working.....
View 1 Replies
View Related
May 31, 2011
I have a server machine that is running SUSE Linux Enterprise Server 11. I set up a mysql server there. Now I want to access this mysql server from my laptop. I used the following command,
> mysql -h 12.246.5.70 -u davidehs -p
I found if the firewall on the server machine is running, I can not connect the mysql server from my laptop. If I stop the firewall first, and the do the connection, I can access the mysql. how to keep the firewall running and allow the remote mysql incoming requests?
View 4 Replies
View Related
Jan 28, 2011
I have a server machine that is running SUSE Linux Enterprise Server 11. I set up a mysql server there. Now I want to access this mysql server from my laptop. I used the following command,
> mysql -h 12.246.5.70 -u davidehs -p
I found if the firewall on the server machine is running, I can not connect the mysql server from my laptop. If I stop the firewall first, and the do the connection, I can access the mysql. Do you guys have any idea how to keep the firewall running and allow the remote mysql incoming requests?
View 11 Replies
View Related
Mar 25, 2011
I suspect this is an initial configuration bug. All firewall logs seem to be going to all
three files. That causes a lot of clutter in the log files, and makes it difficult to see whether there are any serious problems being logged.
View 9 Replies
View Related
May 18, 2010
I am learning to setup firewall in my home for that i have selected four system(sys1,sys2....sys4) for testing .I have configured sys2 to act as a firewall with two NIC. sys3 and sys4 are inside the firewall . sys1 is not connected to firewall for testing purpose.
the IP assignments are follows :
sys1 : ( fedora, not connected to firewall i am thinking, But i am not sure )
IP : 192.168.2.1 ,
gateway : blank
dns1 : blank
dns2 : blank
sys2 firewall ,IPTABLES )
code....
what happened is that sys1(not connected to firewall) can ssh to sys4(connected,inside firewall),since the rules are written not to ssh form sys1 to sys4..
then I came to know whatever the request I give, It directly goes as sys1 --> sys4. Not as sys1-----> sys2(firewall)---> sys4 .and the firewall is not filtering and processing anything for both inbound and outbound (i think it's my mistake some where). the requests are directly going inside without firewall.
View 3 Replies
View Related
May 27, 2011
I'm trying to build firewall on Debian with 'Firewall Builder'. But it won't let me compile and run unless one interface is set as management. There are two interfaces on my computer: 'eth0' and 'lo'
I don't want to be able to configure firewall remotely, so could I use 'lo' as 'management interface'?
View 1 Replies
View Related
May 9, 2011
Can we use iptables as firewall instead of Juniper firewall
View 2 Replies
View Related
Jul 26, 2010
Samba is working correctly if Susefirewall2 is off. I have added Samba client and Samba Services for extern access but samba is not working when firewall is now on. Which services should I also add ?
View 1 Replies
View Related
