Re: Enable Firewall, But Allow Specific Inbound Connections
by Angelo Machils
>
>
>>
>>> now suppose I independently add a rule like this:
>>>
>>> -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 3306
>>> -s 192.168.1.0/24 -j ACCEPT
>>>
>>> the rule will be added to the bottom of the RH-Firewall -1-INPUT chain,
>>> right after that REJECT. So a datagram for port 3306 will traverse the
>>> chain, hit the REJECT, and get blown away without ever being inspected
>>> by the new rule appearing after the REJECT.
>>>
>>> Am I on the right track here?
>>>
>>> Thanks
>>>
>>> Bob Cochran
>>
Hi there, don't know if anyone give this tip yes, but make a crontab
when messing with iptables which shuts down iptables after lets say 10
minutes (or enough time for you to test the new tables), so in case you
get yourself locked out of the machine, you will have access again after
the job runs. Yeah, experience :)
Regards, Angelo
19 years, 2 months
Updating Firefox 0.8 to 1.0
by Mark Sargent
Hi All,
I have firefox ver 0.8 on fedora2,and have downloaded ver 1.0 directly
from the site, as I can't find it through YUM(if u know of 1, please do
tell). Would like to know, can I just upgrade or, do I need to
re-install, losing all settings..? Cheers.
Mark Sargent
19 years, 2 months
[FC3] help request with RAID
by Fabiano Petrone
Hello,
just a quick question.
I'd like to install FC on a PC with an Asus P4B533-E with Promise PDC 20276
RAID controller (2 disks in stripe)
I've found on a Jason Tang page:
http://members.rogers.com/sith.warrior/
the RAID drivers for FC1.
still no news for FC2 and FC3?
thanks a lot at Jason for the drivers and (in advance) to the List for the
answers
Fabiano
19 years, 2 months
yum vs system-config-package
by Wong Kwok-hon
Hello!
I found that the "Add/remove packages" always displayed "Unlocatable
package" but the name is like "libselinux,1" and problem still
happened even I rebuild the rpm db or install the rpm --justdb. But
the package "libselinux" is actually installed .So What can I do if
this incident happened again and what would it caused to happened ?
Although the problem happened and I can perform install by yum.
19 years, 2 months
mplayer - libdvdread problem
by Paolo Cavarretta
dear all,
i'm trying to play dvd using mplayer on my laptop.
Before explaining the error i get i must highlight some points:
- if i boot using the windows partition the dvd play nicely, so i think
it's not an hardware problem
- using Fedora Core 2 it was working nicely
- i have the same mplayer and libraries packages that i use on my
desktop and sitting at the desktop i can play dvd without problems
Instead on my lapotop if I start "mplayer dvd://1":
I see the messages from libdvdcss that tell me the dvd is correctly
decrypted, then libdvdread are loaded...and i get the following error:
libdvdread: Invalid title IFO (VTS_01_0.IFO).
Cannot open the IFO file for DVD title 1.
it happens with every dvd...anyone can help me?
thanks in advance
Paolo
___________________________________
Nuovo Yahoo! Messenger: E' molto più divertente: Audibles, Avatar, Webcam, Giochi, Rubrica
Scaricalo ora!
http://it.messenger.yahoo.it
19 years, 2 months
Startup Scrpts
by paul lawrence
Hi,
I am new to the world of linux, for my sins I have been entirely a Microsoft
person; untill now, and I need some advice on how to do something.
I have a server running Fedora Core 3, with Resin.
I want to be able to create a startup script that will set some environment
variables for Java, start up Resin and the call two custom scripts I have
been given. I have been playing around with a file called resin-a.sh which
a web site suggested creating to run the commands I want.
>From a promt, if I type the following the variables are set OK, but if I
include them in the resin-a.sh file and type sh resin-a.sh they are not
set.
export set JAVA_HOME=/usr/java/j2sdk1.4.2_06
export set RESIN_HOME=/usr/local/resin
export set PATH=$PATH:/usr/java/j2sdk1.4.2_06/bin
I also want to somehow include in this script a startup command for httpd.sh
to start the resin web server and also to call to other scripts.
Any help would be much appreciated, as I said I am completely new to this
and its a little confusing.
Regards
Paul
19 years, 2 months
wifi
by Eric TANGUY
I would like to know which wifi chipset are natively supported by fc3 and
which wifi chipset are usable with linux.
Thanks
Eric
19 years, 2 months
Newb
by Dustin Hill
Hello all! I'm new to linux and can't seem to find a real beginners
guide anywhere, so I joined this list to see if I could get some help.
I just installed FC1 and am wondering how to update it to FC3. I'm
hoping that I won't have to burn the .isos and reinstall everything
again. I've been on windows forever and have no real clue how to do
anything in linux. It took me two hours to figure out how to run
up2date. Any help/guidance will be kindly accepted.
19 years, 2 months
selinux question
by Tim Fenn
I have mythtv installed at home, and currently use a partition on a
separate drive to store my recorded shows (/dev/hda1, mapped as
/data1). I recently installed mythweb, which seems to be working fine
except for one minor issue - whenever I try to list the recorded
programs via the mythweb interface, php errors pop up with permission
issues, and the following appears in my kernel log:
kernel: audit(1107226430.548:0): avc: denied {
search }
for pid=29290 exe=/usr/sbin/httpd name=/ dev=hda1 ino=2
scontext=root:system_r:httpd_t tcontext=system_u:object_r:default_t
tclass=dir
kernel: audit(1107226430.549:0): avc: denied {
getattr } for pid=29290 exe=/usr/sbin/httpd path=/data1 dev=hda1
ino=2 scontext=root:system_r:httpd_t
tcontext=system_u:object_r:default_t tclass=dir
kernel: audit(1107226430.549:0): avc: denied {
getattr } for pid=29290 exe=/usr/sbin/httpd path=/data1 dev=hda1
ino=2 scontext=root:system_r:httpd_t
tcontext=system_u:object_r:default_t tclass=dir
which makes sense, I suppose - httpd shouldn't be touching stuff in
/data1 - but I'd like to allow httpd to see these files. As far as my
limited understanding goes (I'm still trying to grok selinux), is the
best way to do this to add an entry in
/etc/selinux/targeted/contexts/files/file_contexts, then fire up
restorecon?
Thanks for any help,
Tim
--
Morals? I eat communism and $h!t America, brother. --Seanbaby
19 years, 2 months