forum.excito.com

For those that remember the problems I ran into trying to install Strongswan. Here's the howto for getting things back up with Openswan after upgrading to software version 2.4 (kernel 2.6.39) First we need to grab some sources, including the kernel source (don't worry - we're not going to do the len...

Hi Rene, I'd guess UPC has explicitly configured their network to not allow routeback to other UPC customers. They'll most likely have done this to prevent customers from seeing each others Windows shares and probably don't care that this also blocks traffic that people might actually want. In fact,...

First I would check with "apachectl -St" if your setup of port 8081 is actually working. apachectl: command not found Did you `su` to become root? Also, I'm not sure how to read the localhost:8081 bit. Are you using something like wget to verify that the server returns a page, or is this ...

My guess would be that bridge-utils is already installed as it is required for the default network setup in the B3-wifi

The obvious solution is to change the listen port in the bubba-vhost definition, but why not do it the other way 'round? If you create a new vhost you can make that listen to an alternative port and have your router forward the regular port 80 to that alternative port (unless your router runs anythi...

According to the project page a typical request will travel through multiple TOR nodes and each of them will only know the previous- and the next node (which may be the intended destination if you're an exit-node). I'm guessing therefore that the answer to your question is: no you can't.

Well the fun part is that the B3 performs a rewrite on firewall.conf when there is a DHCP renewal on eth0, which can be either good or bad. It is good if eth0 actually receives your public internet address and it is bad if the B3 is on a private range behind your ISP's router. I posted an alternativ...

Okay, but those are not the same rules as the ones you posted before. While the sequence is a bit off - regular format would show line 4 after line 7 - the fact that it does work from the outside proves that the rules actually are active though, so no worries there. So you wonder why it doesn't work...

Changing the port in apache really doesn't make any difference and honestly you shouldn't have bothered because you can also change the port in the DNAT rule. Just wondering something: did you insert these rules manually in the firewall.conf file? Are you sure you added them to the correct sections ...

Drop the state NEW part in the FORWARD rule; this is only useful if you add additional filtering rules to prevent stuff like DoS attacks (e.g. --limit). Besides it makes you depend on the existing rule for states RELATED and ESTABLISHED, so do you still have that one? Also I think the ruleset is som...

There are not many other roads to take. If you can't delete it you are clearly not the owner (or somehow not considered to be) and the file also does not have the proper group rights (or possibly belongs to a different primary group - admin?). As far as I can see there is no mechanism provided that ...

Well the thing is that Unix rights are really very simple in design. You have an owner, a group and everyone else, so how difficult can it be you ask? The fun starts when you allow a user that is not the owner of the directory and also has a different primary group, to write in that directory. Since...

He's not using Samba, he's using AFP (as can be derived from the share names). THe fact that this error started after a reboot of the *client* suggests a communications error or a credentials error. The interesting part here would be if you show the *actual* file permissions on the file you can no ...

It can get confusing indeed. Storage is it's own share but it is also a directory in the home share. The complicating factor here is that while you may use Samba's mechanism to force a particular group name on files that are written through the storage share, you will not want this for files that ar...

Probably the damage to the web interface will be limited to the webserver not being able to read the index.html file - if you go to http://b3/admin it should be fine. But yes, you did create somewhat of a mess here. The factory provided rights were created this way for a reason - they are required t...