I have an ubuntu server virtual machine with a webhost. I am trying to configure the firewall. I am having a problem with sendmail and the required firewall configuraiton If I type the command:
iptables -F
Then sendmail works perfectly. I can see the emails sent in my googlemail inbox. I then configure my firewall as follows:
iptables -F
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -p tcp --dport 2252 -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
[Code]....
(I have moved SSH to a diffrent port) Once this is setup sendmail no longer works. I had assumed that sendmail will establish a tcp connection and the first rule will allow all established connections to pass. why this iptables/netfilter config stops sendmail from working.
I have created a nfq handler via nfq_open() and using the returned qhandle to bind my application program to a specific queue number that is configured in iptables. when i invoke nfq_create_queue() my program is stuck there and the back trace shows it is blocked in recvfrom()
bt
in recvfrom () from /lib/x86_64-linux-gnu/libpthread.so.0 in nfnl_recv () from /usr/lib/libnfnetlink.so.0 in nfnl_catch () from /usr/lib/libnfnetlink.so.0
I'm using Ubuntu server 9.10 with 2 NICS (Internet-router-eth0, eth1-LAN). I use iptables to generate rules for 20 computers, but when I execute the script, ALL TRAFFIC DROPS, including the server. What am I doing wrong?
Code: #!/bin/sh #eth0 192.168.0.50 - connected to Internet #eth1 192.168.1.51 - connected to LAN #192.168.1.52 - workstation1 #set default policies iptables -P INPUT DROP
[Code]...
iptables -A FORWARD -i eth1 -o eth0 -p tcp --dport 80 -s 192.168.1.52 -j ACCEPT. The reason I'm doing this is, I just want to open necessary ports in the server and restrict LAN usage.
I have an old dell server that I decided to try to install ubuntu server on. My problem is that my keyboard stops working after making my initial selection of installer language and install option. As soon as I select install, I receive a message stating that IRQ 14 has been disabled. Next, I am faced with a screen asking me to select my installation language using the tab, space, and enter keys. But to no avail, my keyboard no longer works. No arrows, no tab, no space, no enter, he num lock key will not toggle it's respective LED.
I should note that I'm using a PS/2 mouse (there are no USB ports on this server). I've also tried multiple PS/2 keyboards, and all act the same. I've looked in my BIOS settings, and the only option I see is for enabling/disabling the on-board PS/2 keyboard. I have not tried disabling that, because I have a funny feeling I would lock myself out of the server for good. I also tried non-graphical mode (at least I think that's what I did). I held in the shift key while booting the CD, and selected no to using graphics. At the "boot:" prompt, I just hit enter.
On a whim vsftpd seems to stop working randomly and any attempted connection times out while waiting for the welcome message.It'll take a couple reboots and a couple "sudo service vsftpd restart" 's and it'll eventually start working again.AFIIK everything is at the most currant version. It just started doing this a few weeks ago.Here is my config file:
I'm running Ubuntu 10.10 Maverick Meerkat 64-bit on my desktop with a wired internet connection (with no firewall). For the past 2 days, I have observed that1. Firefox randomly throws up errors like "Problem loading page" whenever I click on a hyperlink. When I click on Reload, the page loads up just fine. This has been happening a lot recently..and I do not remember updating anything consciously. By the way, ipv6 is disabled in Firefox.2. The network stops working all of a sudden (usually indicated by the Firefox error). The Autho Eth0 indication is active, but I am unable to connect to any external machine.
3. Needless to say, this error is manifesting itself in apt-get as well. I get "something wicked happened" errors all the time, and am unable to download or install anything.That this is not a problem with the ISP is obvious because I also have Windows (from which I'm typing this, ironically), which is able to access the internet.Is this a bug in Ubuntu 10.10?
When I try to run anything that uses iptables, even just iptables -L, I get:
Code:
1+drm33.2/modules.dep: No such file or directory iptables v1.4.4: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded. This is on a fresh Ubuntu minimal install, using my VPS hosts image (so they could have messed something up). I know there have been issues in the past with iptables on Ubuntu on xen. Is this a Ubuntu bug? Is there a solution?
incidentally depmod -a gives:
Code:
WARNING: Couldn't open directory /lib/modules/2.6.32.11+drm33.2: No such file or directory FATAL: Could not open /lib/modules/2.6.32.11+drm33.2/modules.dep.temp for writing: No such file or directory
I've read through these pages [URL] but can't seem to get Samba server working. I am using Gnome and I go to System - Administration - Services
In there I can see smb and nmb. Both are enabled, but both have a status of unknown. I can't seem to start or stop either of them. I can just enable or disable them. I've tried using the gui, as well as command line.
I'd really like to get this going as I'd like to copy files from my XP Pro box to my Linux box (F9). I have WinSCP, but am having permission issues and I can only copy to a folder on my desktop on the Linux box (I'd like to get this fixed too, but that's a different thread at a later time)
I'm trying to configure a messaging system based on php script with iptables, rsyslog and mysql. In the firewall server Sendmail is istalled so i'd like to use it to receive messages in the main mail server, located in DMZ. In the Lan i've configured another linux server than works perfectly, sending mail messages to the server located in DMZ. After looking for some solution I've tried to configure sendmail to relay mail to the server but the only thing I reached is the following message: "Deferred: Connection refused by mail.server.com" message rest on queue and flushing it reply
I'm running Ubuntu Server 11.04 with OpenSSH, trying to create an ssh tunnel (for web traffic) to it from my (also Ubuntu) laptop. This is the command I'm using to create the tunnel:
Code: ssh -ND localhost:8080 george@192.168.1.20 I had it all working on a virtual machine.. which was deleted What settings/lines do I need to change/add from the default OpenSSH config files to get tunnelling to work? I've Googled and AllowTcpForwarding is set to yes, as is X11Forwarding.. but it still doesn't work. Chrome can connect to the server, but says the connection was closed before any data was sent.
I'm trying to setup notification function for the Nagios Core which use Mail to send notification.I got an account from Rogers. I have SMTP server, email account with authentication information.My Nagios server is in a workgroup, there is now domain assigned to it, I just use nagiosserver.localdomain in /etc/hosts.I added Rogers SMTP server in /etc/mail/sendmail.mc and Future (AuthInfo) I created an /etc/mail/AuthInfo and add AuthoInfo:smtpserver "U:user" " P: pwd" "M:Plain"I added smtp server in /etc/mail/access for RelayI added root@nagiosserver.localdomain on /etc/mail/virtusertableI regenerated sendmail.cf by user m4 commandrestart sendmail service.When I ran: Mial -s test nagios4ccs@rogers.comIt did not prompt any error message , in the maillog it says the message is queued but It can not be sent out
I am unable to restore my iptables from iptables-save after upgrading Fedora. I cannot get iptables-restore to work, and I have resorted to entering rules manually using the GUI.
I have a lightweight admin background, but good enough to set up most servers. I have switched from sendmail to postfix for the first time, but I keep going around in circles on the following...
In sendmail, I used to maintain a table (mailertable) where I would redirect email like this
My config works fine when enabled but after an hour the site stops responding at all. When I restart, flush or disable iptables it works fine again. Wondered if anyone could see any glaring errors I've made
# Generated by iptables-save v1.3.5 on Tue May 10 17:06:48 2011 *mangle :PREROUTING ACCEPT [6034:13920296]
I`d like to block bruteforce attack from china, russia to my mysql and i want to open 3306 mysql port just for one type adress from internet like this:: 212.23.165.xxx, and for others I want to block just for 3306.In my new installaton of weezy I`ve not configured iptables..how should looks like iptables config and how to set iptables with this config?
Currently,i use Fedora 10 and get a follow trouble :My network:
route(10.11.10.2/24)----eth0----(10.11.10.105/24)Fedora10(172.16.239.1/24)----vmnet0----(172.16.239.2/24)Virtual Machine XP2. I used : Vmware 6.5.1,Virtual Machine : Window XP SP2.
I was just wondering if using a non-smp kernel would be ok on a older p4 system with no x. I am wondering due to some functionality in IPTABLES that is broken in the SMP kernels ( -m owner --sid.pid,cmd-owner).
Could someone that is running a NON-SMP kernel advise as to whether the support for -m owner --cmd-owner is working in iptables with those kernels? Also, could someone advise me if running a NON-SMP kernel is even advisable? The machine will not have x.
I recentled upgraded all the packages on my server and now I have an issue where I can't get any thing to install or uninstall do to errors, This is what I get:
I am trying to set up my squid3 proxy as a transparent proxy - right now, I have to manually configure browsers to access via proxy. I understand that I have to put some rules into Iptables and also some further directives in the squid.conf.
I have a couple of specific questions. The proxy server is running on a Ubuntu 10.04 workstation and this machine also acts as a dhcp server for the network. I have just one subnet , namely 192.168.0.1-254 There is only 1 network card. Is it much easier to put in a second network card or is it just as easy to configure the existing lan card as a dual IP?
Is it necessary to configure these 2 IP's ( whether they are via 2 lan cards or dual IP on single card ) to be on different subnets. i.e ETH0 192.168.0.1 and ETH1 192.168.1.1 or is ok to have something like ETH0 192.168.0.1 and ETH1 192.168.0.254 ( where ETH0 is the one facing the LAN and ETH1 points to the modem router / switch i.e The Internet ) Where specifically do I save the Iptables rule configuration file and what must I call it ?
The sendmail was setup in default condition. While testing some php application using @mail function, it uses the sender name as "www-data@xxx.com". How to replace the "www-data"?
I recently inherited an Ubuntu server where the previous admin had installed sendmail and FCheck IDS.The issue I am encountering is that sendmail appears to be rewriting both /etc/mail/m4/dialup.m4 and /etc/mail/sendmail.cf constantly (at least once per hour).dailup.m4 never seems to change (other then the creation date), while sendmail.cf has the line describing who and when it was built changed.So far I have had no luck tracking down why sendmail would be rewriting these files.
I have Ubuntu 9.10 installed on my laptop. The laptop has a single HDD with 2 partitions. Partition 1 has WindowsXP and partition 2 contains other data, among which the directory of the ubuntu installation. The partitions are formatted as NTFS. Ubuntu has been installed with wubi on the second partition. Ubuntu has been working fine for 2 days. Last night I updated the Ubuntu system and it required a restart. Needless to say, after the restart, grub wouldn't load. It just shows the shell.
I read the threads inside this forum and people usually manually select a kernel and boot up ubuntu, but when I do this, after I input all the commands I input "boot" and hit ENTER. The computer starts booting up until a point when it says ALERT! /host/ubuntu/disks/root.disk does not exist and something about using selection #1 and exits to shell (Easy Shell or Easy Boot, I can't remember exactly what it says... Easy something anyway) I've read that this is possibly caused by a NTFS dirty tag... but I do not see how to fix this problem.
I have read no fixes anywhere, oddly. This problem happened in 9.10 and seems to be back in 10.04. The fix on Ubuntu-Geek, which was re-posted various places, does not work either. However, I do know this is not a hardware issue... or think. I have a dual-boot with Windows 7 and it is not affected by this. Also, if I install anything 9.04 or earlier, this does not happen. Oddly, my netbook had 9.10 and now 10.04 but not this issue. Sadly I feel I must try other distros as this appears to be a Ubuntu specific error.
This is the first time I've got a major problem with Ubuntu (I started with version 5), and this one is particularly frustrating.I'm running Ubuntu 11.04 on my old (2007) desktop PC.Occasionally, but more and more often now, the keyboard just stops working. The mouse is still fine. When I shut down, I would sometime notice that the "stop crash report generation" process fails. Then the shutdown sequence stops at some point, and I am forced to do a hard shutdown, power down for a while, and reboot. If I don't wait after power off, the keyboard freeze would occur again at any time during the start up sequence. I even had a keyboard freeze after manually switching to the Windows boot.
if the computer sits for a length of time, not being used. I have not timed it, but around an hour it seems. All drop downs work, but whatever i click on doesn't do a thing so i can open the drop down to shut down but when i click on it it just sits there or if i try to open firefox or chrome it just sits there. if im browsing the web or playing a game for a couple hours everything works but it i leave it to do something else and it takes close to a hour, and i dont shut it down. It just stops working. then i have to kill the power to stop it.
