OK, I've got it!
Thanks to advice from Oliver from OxLug, I've tried this:
iptables -t nat -I PREROUTING X -s Y -j ACCEPT
X == prerouting list number (in my case 1)
Y == ip address of authenticated user
So if "joe" using 192.168.1.120 authenticates, I launce:
iptables -t nat -I PREROUTING...
Careful negation, RhythmAce is assuming you have your binaries installed in the same place s/he does.
I think you're better off reinstalling your rpms while first, perhaps, backing up your conf files.
Ian
ps. if you do follow RhythmAce's advice, make sure your chmod +x the files you create or...
You probably know by now that you should have issued an:
/etc/init.d/smbd stop
Right?
I'm not a rpm user but I imagine there's a way to reinstall from and rpm without overwriting your configuration files. Grab the samba-server and proftpd rpms and reinstall the apps.
Ian
www.robertgraves.org
...The DNAT rule does that; however, after authentication, users can get out using all protocols permitted by the firewall *except* http which continues to be routed to 192.168.1.1
What I'm puzzling over is whether or not I can, on a per-ip basis, override this rule. I'm beginning to think that...
erm. Which partition is it that's running out of space?
The one to which you're writing your backups? If so, what's in it? Do you have a cron job that deletes old backups running?
If it's the partition with the database and email on it... well, that should be getting smaller on a daily basis...
Dear All,
I'm trying to do the following with my firewall:
1) redirect all web traffic to my gateway until a user is authenticated.
2) after authentication, add their ip to those allowed to surf.
I've achieved point 1 with the following iptables rule:
iptables -t nat -A PREROUTING -s...
To add to the open source antivirus list, I've been running messagewall on my servers. It listens on the SMTP port and rejects infected mail before it hits my MDA... helpful given that most of my lusers are running windows.
It can be a bit tricky to install, but the end results are worth it...
Assuming you're running iptables, you'll want to append a rule like this to your firewall:
iptables -A PREROUTING -t nat -p tcp -d <IP ADDRESS OF YOUR EXTERNAL INTERFACE> --dport <EXTERNAL PORT> -j DNAT --to <IP ADDRESS OF MACHINE ON LAN>:<DESTINATION PORT>
www.robertgraves.org
Dear All,
I'm running version 2.2.3a-12.3 of samba, samba-client and samba-common on a Debian 3.0 server that's tracking stable (woody).
Interestingly, while I can connect and change file permissions on a samba share with a windows client, I cannot do so from a linux box using samba-client.
I...
Sorry, just to answer your other question, that's what samba users are for. When you connect to the share from windows, you will be prompted for your username and password.
www.robertgraves.org
Why don't you write a script to add the rules you need?
That way, when you want to reload it after flushing the iptables rules, you just launch the script?
There are thousands of examples on the web if you google for it.
www.robertgraves.org
From: /etc/pam.d/passwd
All the configuration options are fairly clearly described here.
#
# The PAM configuration file for the Shadow `passwd' service
#
# The standard Unix authentication modules, used with NIS (man nsswitch) as
# well as normal /etc/passwd and /etc/shadow entries. For the...
Have you added the users to samba?
smbpasswd -a <username> <passwd>
They should be users on the system, in which case, you could make them members of the same group and then chmod the directory you've got shared to 770 (owner, group, rwx permissions).
Ian www.robertgraves.org
sleipnir214 are you sure your answer will work if register_globals is set to "off"?
A better approach may be to use variable-variables and pass them between pages using sessions.
http://www.phpbuilder.com/columns/robert20000928.php3 www.robertgraves.org
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.