OK, I've got it!
Thanks to advice from Oliver from OxLug, I've tried this:
iptables -t nat -I PREROUTING X -s Y -j ACCEPT
X == prerouting list number (in my case 1)
Y == ip address of authenticated user
So if "joe" using 192.168.1.120 authenticates, I launce:
iptables -t nat -I PREROUTING...
Careful negation, RhythmAce is assuming you have your binaries installed in the same place s/he does.
I think you're better off reinstalling your rpms while first, perhaps, backing up your conf files.
Ian
ps. if you do follow RhythmAce's advice, make sure your chmod +x the files you create or...
You probably know by now that you should have issued an:
/etc/init.d/smbd stop
Right?
I'm not a rpm user but I imagine there's a way to reinstall from and rpm without overwriting your configuration files. Grab the samba-server and proftpd rpms and reinstall the apps.
Ian
www.robertgraves.org
Thanks Eric.
I don't think I really explained myself all that well in my first post.
I'm need to do things dynamically so can't have the per-ip rules before the general redirect... which is why I'm thinking that perhaps what I want to do can't be done...
I have a seperate account creation and...
erm. Which partition is it that's running out of space?
The one to which you're writing your backups? If so, what's in it? Do you have a cron job that deletes old backups running?
If it's the partition with the database and email on it... well, that should be getting smaller on a daily basis...
Dear All,
I'm trying to do the following with my firewall:
1) redirect all web traffic to my gateway until a user is authenticated.
2) after authentication, add their ip to those allowed to surf.
I've achieved point 1 with the following iptables rule:
iptables -t nat -A PREROUTING -s...
To add to the open source antivirus list, I've been running messagewall on my servers. It listens on the SMTP port and rejects infected mail before it hits my MDA... helpful given that most of my lusers are running windows.
It can be a bit tricky to install, but the end results are worth it...
Assuming you're running iptables, you'll want to append a rule like this to your firewall:
iptables -A PREROUTING -t nat -p tcp -d <IP ADDRESS OF YOUR EXTERNAL INTERFACE> --dport <EXTERNAL PORT> -j DNAT --to <IP ADDRESS OF MACHINE ON LAN>:<DESTINATION PORT>
www.robertgraves.org
Dear All,
I'm running version 2.2.3a-12.3 of samba, samba-client and samba-common on a Debian 3.0 server that's tracking stable (woody).
Interestingly, while I can connect and change file permissions on a samba share with a windows client, I cannot do so from a linux box using samba-client.
I...
Sorry, just to answer your other question, that's what samba users are for. When you connect to the share from windows, you will be prompted for your username and password.
www.robertgraves.org
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.