when i install ntop, both ./autogen.sh & make done, but in "make install" give this error:
ln: `icmpPlugin.so': File exists
make[2]: *** [icmpPlugin.so] Error 1
make[2]: Leaving directory `/root/ntop/compiles/ntop-3.3/plugins'
make[1]: *** [install-recursive] Error 1
make[1]: Leaving directory `/root/ntop/compiles/ntop-3.3/plugins'
make: *** [install-recursive] Error 1
? excuse me for my bad english
on a Linux machine with kernel 2.6.32, how to enable klips i found that for enable klips mus enable
CONFIG_KLIPS_ALG=y
in kernel config.
but patch only available for 2.6.23- and for newer kernels, there is no patch. in kernel configs i cant find anything.
how can i enable that in 2.6.32, or there's other way to use klips?
i want to load custom crypto algoeithm and use by ipsec, is klips right way? or any other solution is for that?
excuse me for my bad english.
i have a problem with load balancing/Fail-overing with Linux gateway
my network look-like this
now, i want users in internal LAN (192.168.1.x), has connect with both line.
is any solution
excuse me for my English, thankyou
iptables has been working well with squid transparent. but with squid authentication method, its has some problems. due to documents i found that, because suid in authentication mode, is destiation for packets, cannot set rules with iptables for actual destination/source.
is this right? has any solution?
if dosnt right, can you give me some squid config file with AD integration SSo, or any other authentication method
excuse me for my bad english. Thank you.
in gateway base on linux how can redirect all internet accesses to port 80 in gateway. (any internet request redirect to port 80 in gateway).
can do this by iptables? or any other idea?
Based on what I know if you're using a vlan in a VMWare ESX vswitch connected to a physical port you should connect that port to a trunk port on a physical switch. Is this right?
Can you give me a solution to using vlan in VMWare switches without using physical ports?
i want to remove squid package from my Linux box kernel 2.6
root@t:~/devel # rpm -i squid-2.6.STABLE18-5.endian6.i586.rpm --nodeps
package squid-2.6.STABLE18-5.endian6 is already installed
root@t:~/devel # rpm -e squid-2.6.STABLE18-5.endian6.i586.rpm --nodeps
error: package squid-2.6.STABLE18-5.endian6.i586.rpm is not installed
whats wrong?
I have a problem with iptables rules. This is my scenario:
eth2: Internet connection
br1: local network
I want to mark only packets entering from the Internet interface(eth2) destinated to local net(br1). How to mark packets with src eth2, dst and IP address?
is any way to log openvpn traffic (sites that users visited)?
i think because openvpn use tunnel and encrypt traffic cannot log visited websites, but in a server i saw that open vpn's users traffic is logged; is anyway to do that?
blocking yahoo messenger based on The order in which Yahoo Messenger scans for available ports is:
1. port 5050
2. port 80
3. All available ports
is impossible,"its better disconnect internet :)"
the other way is to block yahoo messenger service addresses, like:
scs.msg.yahoo.com
scsa.msg.yahoo.com
scsb.msg.yahoo.com
scsc.msg.yahoo.com
and or these ip's like this:
/sbin/iptables -A OUTGOING -d 63.216.136.22 -j DROP
/sbin/iptables -A OUTGOING -d 66.135.224.142 -j DROP
/sbin/iptables -A OUTGOING -d 66.136.175.132 -j DROP
/sbin/iptables -A OUTGOING -d 66.163.168.105 -j DROP
/sbin/iptables -A OUTGOING -d 66.163.172.117 -j DROP
/sbin/iptables -A OUTGOING -d 66.163.173.76 -j DROP
/sbin/iptables -A OUTGOING -d 66.163.173.77 -j DROP
/sbin/iptables -A OUTGOING -d 66.163.173.78 -j DROP
/sbin/iptables -A OUTGOING -d 66.163.173.203 -j DROP
/sbin/iptables -A OUTGOING -d 66.163.175.128 -j DROP
/sbin/iptables -A OUTGOING -d 66.163.178.78 -j DROP
/sbin/iptables -A OUTGOING -d 204.71.200.36 -j DROP
/sbin/iptables -A OUTGOING -d 204.71.200.37 -j DROP
/sbin/iptables -A OUTGOING -d 204.71.201.134 -j DROP
/sbin/iptables -A OUTGOING -d 204.71.201.141 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.173.172 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.173.179 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.175.132 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.175.142 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.175.143 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.175.144 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.175.145 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.175.145 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.175.226 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.224.134 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.224.142 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.224.213 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.224.213 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.224.214 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.225.12 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.226.117 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.226.118 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.226.209 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.226.210 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.227.168 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.233.129 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.233.130 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.233.131 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.233.133 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.233.135 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.233.148 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.233.151 -j DROP
/sbin/iptables -A OUTGOING -d 216.136.233.152 -j DROP
but, in new version of yahoo messenger i can connect.
is any other way to block yahoo messenger? or is fault in my above solutions?
efw(endian firewall) by default close p2p traffic, to enable that i open all 1024:65535 ports. its work, but it's a bad solution.
i try open 6881:7000 & 2710 also client selected port but it's not working.
is any other better solution?
i configure squid to authenticate using win AD, but users can connect from different ip address and i cant set policy base on ip for different user.
is any way to set acl base on username?
i found ident
http://www.visolve.com/squid/squid24s1/access_controls.php
is it work for my testcase?
for internet access, i config squid to authenticate users with win active directory.
when a user enter username and pass check with AC users. is a way to know what user from what ip connected?
for a traffic management app i should limit bandwidth for clients ip addresses that for each ip there are different limit
how can use tc-tbf for specific ip address
or is any other solution?
when config free-radius to authenticate over ldap where are the log files that store usernames and other connected client info?
excuse me for my bad English.
Is there a way to disconnect an openvpn connection that was established by free-radius with a shell command line?
I have all information about the openvpn connection:
I'm using openvpn and free-radius for control user accounts. for maximum session time for an user, free-radius has sqlcounter.conf that control that, but after a connection has disconnected that is useful and cannot destroy a connection. for control account time dynamically i need another script that do that. but should anytime that a connection has established a trigger run. is anyway to fire a custom trigger or script when a connection has established? or any way to control session time dynamically?
I'm writing software for bandwidth management in Linux. I use TC for bandwidth shaping, and it worked fine. I want to limit user bandwidth for a period of time. For example:
What is the best way to do it?