I have an external varnish server which is passing requests to a backend server which sits behind a pfsense 2.0.3 firewall. Does pfSense do any kind of packet inspection that could block traffic from a specific ip going through that proxy? Of course this is in the case where the Forwarded-For headers are set by varnish.
Is this even possible with any firewall?
My ISP has given me a /30 and a /27 ip block I can use. for the sake of not giving out my ips I'll use 192.168.1.192/30 and 192.169.1.224/27. I'm not using a router in my setup, I only have a switch. Right now I do not have the possibility to use a hardware router so please dont hassle me about that.
So here is what I have:
I can access the internet from the first debian server however I cant access anything on any of the other machines.
I've tried setting the gateways on the centos & windows machines to either 192.168.1.194 and 192.168.1.193 but that doesn't fix the problem. Is there something obvious I'm missing with this config?
My guess is that I need to configure the debian server as a router since it has the main ip address but how do I do that? Ive already enabled ipv4 forwardign on the debian server.
Also note that the ISP uplink is a GigE fiber connection and none of my servers has a fiber nic to connect to.
my php script is sending a header X_Cache_ttl: 1h and in my varnish config file I have
sub vcl_fetch
{
if(beresp.http.X-Cache-ttl){
set beresp.ttl = beresp.http.X-Cache-ttl;
}
}
but the line with the set command is causing varnish to fail when I try to start it.
in the log I get
Expression has type STRING, expected DURATION
('input' Line 116 Pos 34) -- ('input' Line 116 Pos 56)
set beresp.ttl = beresp.http.X-Cache-ttl;
How do I convert X-Cache-ttl to a duration so that I can dynamically set the TTL?
I would like to avoid multiple if statements similar to
if(beresp.http.X-Cache-ttl == "60s") {
set beresp.ttl = 60s;
}
if(beresp.http.X-Cache-ttl == "1h") {
set beresp.ttl = 1h;
}
If it matters I'm using varnish 3.0.3 on centos 6.
I have a linux Proxmox server with two ethernet ports. The problem is that I have two uplinks that I would like to use with different bandwidth limitations. The first uplink maxes out at 100mbs and the other maxes out at 10mbps. Is it possible to have both uplinks plugged into my server and split incoming/outgoing traffic on these ports?
I have tried
sudo sh -c 'echo 3 > /proc/sys/vm/drop_caches'
sudo echo 3 > /proc/sys/vm/drop_caches
echo 3 > /proc/sys/vm/drop_caches
echo 3 | sudo tee /proc/sys/vm/drop_caches
and a bunch of other variations but with every try I get
bash: /proc/sys/vm/drop_caches: Permission denied
How do I clear the ram used for buffers/cache in my centos6 openvz container?
It seems like the only way to do what I need is to reboot the container.
In centos how do you answer yes automatically for yum install so that it is an unassisted install?
I would like to create a proxmox vm and have that vm be able to ping/access external websites without having to assign a public ip to it. How do I do this?
The VM is running centos 6