I'm setting up a webserver that's going to be apache + PHP. This is going to be migrated from Gentoo. In gentoo it was pretty easy to include Suhosin since it was just a useflag and a package. In CentOS you need to compile form source manually (download patches and so on).
IS there a better way to do this? Perhaps a repository that maintains a PHP package compiled with suhosin? I'm lazy and I don't like the current way to do it. :)
Thanks
Some of my users are complaining that RDP performance is very bad. For instance scrolling results in a very a laggy experience. They're connecting through windows 7 clients. I've tried reducing color bits but no change. I'm pretty sure it's not bandwidth related. Network latency seams good as well.
I personally have no problems with the performance when connecting from home. I'm not sure what i should do to troubleshoot this and find the cause.
I'm not using legacy adapters, and i've installed Linux Integration Components 3.2.
THe problem i'm facing is that the command 'setup' or 'system-config-network' doesn't list any network interfaces. If i run ifconfig -a i can see both the network cards i've attached. By setting a ip using ifconfig i can get network connectivity. The problem is that it's not persistent after a reboot.
I'm a 100% centos newbie, but I figure it has something to do with that the centos installer couldn't see the NICs on install.
How can I fix this?
I'm having troubles implementing access-lists on my asa 5510 (8.2) in a way that makes sense for me.
I have one access-list for every interface i have on the device. The access-lists are added to the interface via the access-group command.
let's say I have these access-lists
access-group WAN_access_in in interface WAN
access-group INTERNAL_access_in in interface INTERNAL
access-group Production_access_in in interface PRODUCTION
WAN has security level 0, Internal Security level 100, Production has security level 50.
What i want to do is have an easy way to poke holes from Production to Internal. This seams to be pretty easy, but then the whole notion of security levels doesn't seam to matter any more. I then can't exit out the WAN interface. I would need to add an ANY ANY access-list, which in turn opens access completely for the INTERNAL net. I could solve this by issuing explicit DENY ACEs for my internal net, but that sounds like quite the hassle.
How is this done in practice? In iptables i would use a logic of something like this. If source equals production-subnet and outgoing interface equals WAN. ACCEPT.
I'm setting up my first cisco firewalls. A little information first:I have two asa5510 setup in a working active/standby pair.
From my ISP i have two public subnets. A /29 and a /26. On my DMZ interface i have the /26 configured. On my WAN Interface i have configured the /29 IPs. My isp routes the /26 via the /29 primary IP.
I'm running ASA 8.2.
I've turned NAT-Control off, because i don't want to use nat for for other than some internal interfaces. In essence i don't want to use NAT unless i specify it.
I have a internal interface with the network of 192.168.100.0/24. I've tried setting up nat limke this:
nat (inside) 1 192.168.100.0 255.255.255.0
global (WAN) 1 interface
I was under the impression that this would let connections that was going from 192.168.100.0/24 and out the WAN interface to be Port-Address-translated. I'm not getting this to work for some reason.
Inside interface has security level of 100, and wan has security level of 0.
I'm wondering because we're moving our rack to a co-location but we have LOTS of space behind our rack so I mount our switches on the backside for easier cabling. But i've seen a lot of pictures where the switches are mounted on the front. Is this because access from the back of the rack is mostly limited in datacenters? Sounds like a PITA.