Tag Info

New answers tagged

1

You can create a sub-interface on your LAN interface (X0, usually) and use VLAN tagging to separate the traffic. In Network > Interfaces there is a "Add Interface" button.


1

Yes, you can do this, it's not intuitive though. Also, you should have been able to find the documentation through Google? Here's the document: http://www.sonicwall.com/downloads/supporting_multiple_firewalled_subnets_on_sonicos_enhanced.pdf Example #1 Default NAT Mode with secondary subnet Create Static ARP entry for the gateway address of ...


1

The First IP is the IP that has been resolved by the DNS-Server. The second IP should be your Router that tells you that the TTL expired in transit. So when the destination is not reachable. The last router gives you an error.


-1

On ubuntu 12.04 you had to add the IP there (httpd.conf is empty) to NameVirtualHost xx.xx.xx.xx:80 (if you have more than one domain on website) Listen xx.xx.xx.xx:80


0

Yes, there is certainly a rate limit and it will be in the order of dozens or hundred calls a day, depending on the registrar providing the data for a given TLD. The whois data and database has a completely different purpose and it certainly is not meant to be abused by people not wanting to pay for quality GeoIP database access.


1

Each of your compute nodes will need a default route of 192.168.1.2 (head node eth2). You will then need to configure IP forwarding on the head node to allow the compute nodes access through it. You don't need to worry about the managed switch for this - it is "invisible" for the task you're trying to accomplish. You can also, if desired, enable masquerading ...


1

Given the lack of answers, i am posting now a solution that is not very elegant, but simple: Run another OpenVPN instance on TCP for "bad clients" proto tcp and lower the TCP MSS on the client, e.g. iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o ${OUT_DEV} -j TCPMSS --set-mss ${PATH-MTU-MINUS-40} An advantage of this solution is ...


4

I think it's actually more debated than you make it appear. There is an admittedly old, related Linux FAQ: http://www.tldp.org/HOWTO/VPN-HOWTO/ I've used a PPP-over-ssh-over-ADSL for more than 12 years, and it never failed me, so from my experience I'd dare to say that the doomsayers probably largely exaggerate. TCP over TCP is probably a bad idea with RTC ...


0

The internet draft IGMPv3 and IGMP Snooping switches believes the following to be most common in IGMP snooping switches: Group membership is based on multicast MAC addresses only In other words: The IP-to-MAC multicast address ambiguity still applies to most common IGMP snooping switches. This makes sense: Routing of normal multicast traffic, i.e. all ...


-1

I implemented a proof of concept and found it actually is possible to implement an IGMP querier in software. My software querier gets treated like the real thing, i.e. clients send their reports when prompted by it, as I could verify with Wireshark, comparing a network with a real IGMP querier, to a network without one but having that software querier ...


0

I believe you want what is often called 1:1 NAT ("1 to 1 Network Address Translation"). Its prime purpose is is map a range of TCP/UDP ports from one address to another. In Linux Netfilter (iptables), you would use the -j NETMAP target in the -t nat table's -A PREROUTING chain: NETMAP This target allows you to statically map a whole network of ...


0

You are looking for NAT (network address translation... discarded due the extra ip addr cost), or PAT (port addr translate... discarded due the same port limitation). The other option is using a socks proxy that clients could setup to their client applications. For example with ssh: ssh user@proxy-server.net -D 9050 ssh user@internal-server -o ...


0

You need to have a load-balancer or a reverse proxy as public-facing component. This component will listen on external/public IP and routes requests to your servers depending on chosen load-balancing algorithm. Edit, based on comments : As you want to serve several websites, you need a reverse-proxy (HAProxy and others) It can be in its own DMZ (as long ...


3

There are two different ways of doing anycast: routing-based and on a single subnet. The routing based one can be done for both IPv4 and IPv6. The single-subnet way cannot be done with IPv4. Routing based anycast is done by announcing the same IPv4 or IPv6 prefix into a routing protocol from multiple routers. All of them announce they have a direct ...


3

You'll have to block the outgoing traffic to this ip address not the other-way around. Use the OUTPUT keyword and the -d flag like this: iptables -A OUTPUT -d $ip -j DROP


3

As you can see, connecting back to your system isn't so simple. The essence of your problem is that even you can do the DNS registration (which makes eligible for the servers to find eachother), the actual ip connection between your machines is further impossible. There are multiple solutions for your problem. The simplest were if you have some type of ...


1

If your DNS and DHCP services are on the same server, that is not a problem. If these are on different machines, it could be that you have an IP address conflict in which case you must change the IP of one of your servers. About the DNS service itself, do you have anything in your Event Viewer ? What does an nslookup return ?


1

It's not unusual on a small network to provide both of these functions from the same server. It's not a problem unless you had reason to expect DNS to be provided by a different system, in which case check the configuration of the DHCP server.


0

Postfix is highly configurable. so much so that rtfming seems only slightly more advantageous than perusing the source (only joking). There are in fact numerous ways of dynamically overriding the static configuration. At a very minimum, some understanding of the Postfix workflow is required. this is in the overview. It is also useful to understand: ...


2

Easy. netstat is a command line tool to show you live/real network traffic happening in real-time. But when you say access_log and point to the full path like this: /var/www/vhosts/domain.com/statistics/logs/access_log That log is generated by the web service on the server. My best guess is it would be Apache generating those logs. And the reason you are ...


2

Yes, there's a crucial difference. On netstat, you see raw connection data. Does not matter if the upper protocol handshake is performed or not, if a SYN packet comes by, netstat will log it. On the other hand, the access_log will only log connections that finish the HTTP handshake. If someone establishes a connection but don't send any data, the ...



Top 50 recent answers are included