Atomicorp

Support, What happened yesterday with psa-proftpd.x86_64 0:1.3.7rc3-3.el7.art and now psa-proftpd.x86_64 0:1.3.7rc3-4.el7.art? 421 Service not available, remote server has closed connection yum downgrade back to psa-proftpd.x86_64 0:1.3.7rc3-2.el7.art 220 ProFTPD 1.3.6rc2 Server xxxx Clearly the pac...

Thanks, but I'm using courier-IMAP and I'm needing to filter as we have some old equipment that can't do secure email. I'm filtering and allowing my ip here as we'll as localhost. It's working as roundcube is connecting over 143. If I drop localhost of access to TCP 143 roundcube can't log in. I've ...

Okay I'm filtering in asl-firewall tcp 110 and 143 to drop all ! myownip new connections

(yeah tired of asking no more insecure logins)

Now watchdog says courier imap and pop3 are down (but not pop3s and imaps).

Tried allowing lo and the host IP no go.

Any idea's?

Cheers!

David

I think this is more asl support than firewall.

I've in asl-firewall dropped ! myownipaddress to tcp 3306 new

Now asl-web (tortixd) returns after ages there's a file missing error..

What do I have to enable to allow filtering on 3306 without breaking tortixd?

Cheers,

David

Thanks

Support, Is there anyway I can pick up the blacklist off the ASL protected server? Brief topography. Incoming is direct into a Microtik CCR1016-12G. Then through its firewall/mangle I'm forwarding incoming connections on allowed ports into the ASL server, that then netmap out. Its also doing the LAN...

Support, I've set up a tunnel over openvpn. I've got a WAN IP routed over the tunnel to other end, so I can masquerade / SNAT as well as my own static IPs. Only issue I've got, on my ASL server, got to whitelist the distant/origin end of the tunnel (10.9.0.1). I've whitelisted only my local end (10....

Fixed use iptables -A PREROUTING -i <local-network-device eth0 for me> -s <ip range you want to redirect 192.168.0.0/24 for me> -d <your WAN IP that your accessing inside> -p tcp -m tcp --dport <which port> -j DNAT --to-destination <localmachineip:port> -A PREROUTING -i eth0 -s 192.168.0.0/24 -d xx....

Fixed. The correct way in later Centos (6) is to add the modules in /etc/sysconfig/modules [root@primary ~]# ls /etc/sysconfig/modules bluez-uinput.modules ip_nat_pptp.modules nf_nat_proto_gre.modules [root@primary ~]# cat /etc/sysconfig/modules/ip_nat_pptp.modules #!/bin/sh /sbin/modprobe ip_nat_pp...

Does anyone know how to enable NAT reflection?

My LAN cant see the web and other services running on the WAN IP

I can connect to the internal IPs, but how can we access our WAN IP internally?

Cheers

Im using a centos 6 server for gateway. Ive tried inserting [root@primary ~]# modprobe ip_nat_pptp WARNING: Error inserting nf_conntrack_proto_gre (/lib/modules/2.6.32-431.17.1.el6.x86_64/kernel/net/netfilter/nf_conntrack_proto_gre.ko): Operation not permitted WARNING: Error inserting nf_conntrack_p...

I see the newly updated mod_security #22 fixes the issue WITH the tags in

[root@primary ~]# /etc/init.d/tortixd restart Stopping tortixd: [FAILED] Starting tortixd: Syntax error on line 25 of /var/asl/etc/httpd/modsecurity.d/tortix_waf.conf: Invalid command 'SecConnReadStateLimit', perhaps misspelled or defined by a module not included in the server configuration [FAILED]...

Now it's stopped

There's no errors running asl with check.

Also its blank paragraph on an asl -pc

The error only shows up in the GUI.

Ive tried root, apache, as well as tortix, but its got 666 chmod anyway...