SuSe firewall settings

4 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Help with firewall settings

Hi all, I am confusing myself with trying to set up a firewall and hope someone here can help me progress. I have a small cluster of three Raspberry PI's running NOOBS, which I believe is a Debian fork. I have a "Gateway" machine, if that is the right phrase, that has a USB Wifi dongle...

2. SuSE

Suse Security Settings

1) PermitEmptyPasswords is set to No # grep "^PermitEmptyPasswords" /etc/ssh/sshd_config PermitEmptyPasswords no If there is no output does it implies 'As parameter was not set mean system will also not accepted emptypassword.' 2) Users is not allowed to set...

3. IP Networking

settings in rc.firewall

Hi everyone. I'm trying to setup eMule and torrents on the local network behind the BSD server. And everything seems to work except one detail - it works as long as ${fwcmd} add deny log tcp from any to any in via ${oif} setup is commented out. Meaning that not only required ports are open, but...

4. BSD

settings in rc.firewall

LEARN ABOUT DEBIAN

rlm_ippool_tool

RLM_IPPOOL_TOOL(8)					      System Manager's Manual						RLM_IPPOOL_TOOL(8)

NAME

       rlm_ippool_tool - dump the contents of the FreeRadius ippool database files

SYNOPSIS

       If an ipaddress is specified then that address is used to limit the actions or output.

       rlm_ippool_tool [-a] [-c] [-o] [-v] session-db index-db [ipaddress]

       Mark the entry nasIP/nasPort as having ipaddress

       rlm_ippool_tool -n session-db index-db ipaddress nasIP nasPort

       Update old format database to new.

       rlm_ippool_tool -u session-db new-session-db

DESCRIPTION

       rlm_ippool_tool dumps the contents of the FreeRADIUS ippool databases for analyses or for removal of active (stuck?) entries.

       Or with the -n argument adds a usage entry to the FreeRADIUS ippool databases.

OPTIONS

       -a     Print all active entries.

       -c     Report number of active entries.

       -r     Remove active entries.

       -v     Verbose report of all entries.

       -o     Assume old database format (nas/port pair, not md5 output).

       -n     Mark the entry nasIP/nasPort as having ipaddress.

       -u     Update old format database to new.

EXAMPLES

       Given the syntax in the FreeRadius radiusd.conf:

	       ippool myippool {
		   range-start = 192.168.1.0
		   range-stop = 192.168.1.255
		   [...]
		   session-db = ${raddbdir}/ip-pool.db
		   ip-index = ${raddbdir}/ip-index.db
	       }

       To see the number of active entries in this pool, use:

	       $ rlm_ippool_tool -c ip-pool.db ip-index.db
	       13

       To see all active entries in this pool, use:

	       $ rlm_ippool_tool -a ip-pool.db ip-index.db
	       192.168.1.5
	       192.168.1.82
	       192.168.1.244
	       192.168.1.57
	       192.168.1.120
	       192.168.1.27
	       [...]

       To see all information about the active entries in the use, use:

	       $ rlm_ippool_tool -av ip-pool.db ip-index.db
	       NAS:172.16.1.1 port:0x2e8 - ipaddr:192.168.1.5 active:1 cli:0 num:1
	       NAS:172.16.1.1 port:0x17c - ipaddr:192.168.1.82 active:1 cli:0 num:1
	       NAS:172.16.1.1 port:0x106 - ipaddr:192.168.1.244 active:1 cli:0 num:1
	       NAS:172.16.1.1 port:0x157 - ipaddr:192.168.1.57 active:1 cli:0 num:1
	       NAS:172.16.1.1 port:0x2d8 - ipaddr:192.168.1.120 active:1 cli:0 num:1
	       NAS:172.16.1.1 port:0x162 - ipaddr:192.168.1.27 active:1 cli:0 num:1
	       [...]

       To see only information of one entry, use:

	       $ rlm_ippool_tool -v ip-pool.db ip-index.db 192.168.1.1
	       NAS:172.16.1.1 port:0x90 - ipaddr:192.168.1.1 active:0 cli:0 num:0

       To add an IP address usage entry, use:

	       $ rlm_ippool_tool -n ip-pool.db ip-index.db 192.168.1.1 172.16.1.1 0x90
	       rlm_ippool_tool: Allocating ip to nas/port: 172.16.1.1/144
	       rlm_ippool_tool: num: 1
	       rlm_ippool_tool: Allocated ip 192.168.1.1 to client on nas 172.16.1.1,port 144

SEE ALSO

       radiusd(8)

AUTHORS

       Currently   part   of   the   FreeRADIUS   Project   (http://www.freeradius.org)   Originally   by   Edwin   Groothuis,	 edwin@mavetju.org
       (http://www.mavetju.org)

       Mailing list details are at http://www.freeradius.org/

																RLM_IPPOOL_TOOL(8)

Cybersecurity