New user's registration have been closed due to high spamming and low trafic on this forum. Please contact forum admins directly if you need an account. Thanks !

Search found 1529 matches

by Gordon
17 Nov 2011, 17:40
Forum: B2 & B3 Feature Requests
Topic: Decent iptables script
Replies: 31
Views: 39807

Re: Decent iptables script

Thing is that Shorewall will break up the tables by defining directions between what is called zones: where do you come from and where do you want to go? Every rule you create thereafter is based on one of these directions and you never ever get to touch the original INPUT, OUTPUT, FORWARD, PREROUTI...
by Gordon
17 Nov 2011, 13:48
Forum: B2 & B3 Feature Requests
Topic: Decent iptables script
Replies: 31
Views: 39807

Re: Decent iptables script

Depends on your definition of ´simple setup´. It has a ´trusted´ (LAN) and a 'non-trusted' (WAN) interface, so it has all the elements in it that Shorewall is designed for. I know you are an advocate of the Keep-It-Simple policy, but there's also a thing called oversimplifying which is a main cause ...
by Gordon
17 Nov 2011, 12:40
Forum: B2 & B3 Feature Requests
Topic: Decent iptables script
Replies: 31
Views: 39807

Re: Decent iptables script

Sorry to say, but *every* firewall script may eventually cause you to be locked out. I must admit though that this one is particularly stupid in that it saves dynamically/user added rules on shutdown. The trouble with standard firewall settings is that are too general. This was the case with ipfw, w...
by Gordon
03 Nov 2011, 17:03
Forum: B2 & B3 Support
Topic: Using B3 to relay outgoing mail
Replies: 14
Views: 13447

Re: Using B3 to relay outgoing mail

I have no problem using sendmail command with these rights: gordon@eagle:~> ls -l /etc/postfix/ total 404 -rw-r--r-- 1 root root 13424 2004-07-01 00:11 access -rw-r--r-- 1 root root 12288 2005-02-01 11:07 access.db -rw-r--r-- 1 root root 9053 2004-07-01 00:11 canonical -rw-r--r-- 1 root root 12288 2...
by Gordon
03 Nov 2011, 12:52
Forum: B2 & B3 Support
Topic: Using B3 to relay outgoing mail
Replies: 14
Views: 13447

Re: Using B3 to relay outgoing mail

I'd say the most likely thing is that the webmail interface uses SMTP and IMAP socket functions provided by PHP
by Gordon
02 Nov 2011, 17:22
Forum: B2 & B3 Support
Topic: Some torrents cant be removed
Replies: 3
Views: 5456

Re: Some torrents cant be removed

The only way I know of is to restart the filetransferdaemon (ftd). Generally you can delete the torrent after that.
by Gordon
02 Nov 2011, 15:42
Forum: B2 & B3 Support
Topic: Using B3 to relay outgoing mail
Replies: 14
Views: 13447

Re: Using B3 to relay outgoing mail

Not so simple. Essentially what you want is to use the B3 as your mail host and send everything off through your ISP's mail server. That's the easy part: install postfix and configure it to use your ISP as it's smarthost. Now the thing is that you want to be able to address this server not only from...
by Gordon
26 Oct 2011, 16:34
Forum: B2 & B3 Feature Requests
Topic: Mount exFAT on Bubba
Replies: 5
Views: 8746

Re: Mount exFAT on Bubba

May require some additional investigation. File name in the original post seems to indicate that this is a read-only implementation and may therefore not be a breach of patent. The wiki that is referred to names some patents that are related to specific functions provided by exFat; does the open sou...
by Gordon
26 Oct 2011, 16:09
Forum: B2 & B3 Support
Topic: WD caviar 1TB MTBF, any clues?
Replies: 10
Views: 12421

Re: WD caviar 1TB MTBF, any clues?

It is actually multiple customers and I'm not really maintaining their network but providing an application that counts as mission-critical in most cases. All of these customers are aware of the fact that they need to protect their data and they all use RAID configurations. What they regularly don't...
by Gordon
26 Oct 2011, 15:29
Forum: B2 & B3 Support
Topic: B2 won't accept DHCP Offer in rescue mode
Replies: 18
Views: 29319

Re: B2 won't accept DHCP Offer in rescue mode

Ubi wrote:That sounds plausible. What would be the correct iptables lines to add to solve this problem?

Code: Select all

-A INPUT -p udp -m udp --dport 67:68 -j ACCEPT
by Gordon
26 Oct 2011, 15:24
Forum: B2 & B3 Support
Topic: Attaching an "outsourced" NAS
Replies: 12
Views: 14340

Re: Attaching an "outsourced" NAS

You *might* be able to tweak whatever you want to use and make it work with just the B3 I can't help you with all of it because I simply have no need for anything I'm not already using and am lacking the options to test all the other stuff. What I'm using is an ipsec net-net connection using the kli...
by Gordon
26 Oct 2011, 14:46
Forum: B2 & B3 Support
Topic: WD caviar 1TB MTBF, any clues?
Replies: 10
Views: 12421

Re: WD caviar 1TB MTBF, any clues?

I don't recall saying amusing and you can trust me that being the one to tell a customer that his backups are bad as well is absolutely no fun at all. :evil:
by Gordon
26 Oct 2011, 14:33
Forum: B2 & B3 Support
Topic: B2 won't accept DHCP Offer in rescue mode
Replies: 18
Views: 29319

Re: B2 won't accept DHCP Offer in rescue mode

I'm thinking this may be related to an issue I had today when my cable modem dropped out (I'm actually receiving a public IP on the WAN interface through this). It works after a full reset of all the networking components, but I found that the bubba firewall is missing a critical statement to be abl...
by Gordon
21 Oct 2011, 12:56
Forum: B2 & B3 Feature Requests
Topic: Shorewall
Replies: 0
Views: 8040

Shorewall

Seeing the number of questions on firewalling and VPN I've been thinking that it might be a good idea to have some more advanced firewall configuration available. It wouldn't have to be available through the web interface though; it would probably pose to be too difficult to implement the possibilit...
by Gordon
21 Oct 2011, 08:37
Forum: B2 & B3 Support
Topic: WD caviar 1TB MTBF, any clues?
Replies: 10
Views: 12421

Re: WD caviar 1TB MTBF, any clues?

Not to piss in anyone's cheerios but... MTBF is completely irrelevant if you only have a single drive, as you know nothing of the spread around the mean. The number is meant for data centers. Seconded... There may be something to consider though if you've enabled mirroring. It's kind of a stupid th...