zgypa

Forum Replies Created

Viewing 15 posts - 1 through 15 (of 19 total)
  • Author
    Posts

  • zgypa
    Member

    @bakcsa wrote:

    I would like to do the same, but I don’t think that this post is still valid for ZS 3.4

    I have a central backup server which backups all my linux machine via ssh. It would be very good if I could integrate ZS with it. Could you please give me instructions?

    Yes, they are still sort of valid. I have written up a how-to with screen shots on my wiki page.

    in reply to: ZS 3.3.2 update brakes static routes to VPNs #53702

    zgypa
    Member

    Cross-posted in italian forum

    The problem persists, also after installation of package ID 23320 BUG FIX #00 – Net Balancer and VPN Failover : After applying the above mentioned bug fix, the problem seems to appear after each and every reboot, whereas before it only happened once, after the update.

    This is of priority severe/critical, as on those network, where services rely on a VPN (like LDAP, DNS, RADIUS, printers, etc) entire network functionality will be down until admin intervention.

    I am holding off the application of this patch on other production implementations of ZS.[/url]

    in reply to: PPPOE #52617

    zgypa
    Member

    gastone,

    how about the 3.14.31-ZS stock kernel from 3.3.2? I haven’t tested it yet. The older 3.4.90 kernel is no longer available.

    in reply to: PPPOE #52615

    zgypa
    Member

    mdemel,

    i have the same exact situation, and i’ve had it ever since ZS 1 beta 15 or so: i’ve had it with a satellite modem, and three different kinds of DSL modems. I’ve had it with new and old profiles: link goes down and comes back up, however NetBalancer doesn’t realizes it’s back up until i manually de-activate it and re-activate it, which defeats the entire purpose of having the FailOver feature in the first place. I’m still using NetBalancer for IP address based routing.

    Did you figure something out?

    in reply to: Firewall rules for VNC and Windows Remote Desktop #52686

    zgypa
    Member

    OK, so what you need is Network > Router > Virtual Servers, not Firewall.

    You need to add rules in there. The step by step requires more info, like what interface is connected to what. So for example for VNC:

    1. Set Input Interface to the ethernet port connected to the ADSL modem, or PPP link, depending on your configuration.
    2. Set IP Address to ANY.
    3. Set Protocol to TCP.
    4. Set Local Port to 5901
    5. Set Remote IP to 102.168.1.90
    6. Set Remote Port to 5901

    in reply to: Tips for Tweaking Zeroshell’s netbalancer #52857

    zgypa
    Member

    Have you played around with the Weight? You didn’t mention it in the post.

    What exactly do you mean by “not efficiently”? It seems like you might have some numbers or some graphs to show. If you do, please do. ZS doesn’t know when initiating a connection which connection is going to be big, and which is going to be small. So it might send a bunch of long downloads from the same connection. While true that in the long run, this should even out, depending on the resolution of the data you are looking at, some variation is to be expected.

    in reply to: Problem with passwords with a leading ampersand #49611

    zgypa
    Member

    Same problem still exists in ZS R2.0 RC2.

    It is not possible to add a user or a host if the admin password contains space, &, ! or any other character that the shell will interpret as special.

    As you can see below in chrisfu’s posting, the -w argument of ldapadd is invoked without quotes. Consequently, any password which contains shell special characters or spaces will generate an error.

    The post is 3 years old, however the problem still exist. This should be a trivial fix.

    in reply to: Bug in Loadbalacing or Virtual Server in 2.0.RC1 #52462

    zgypa
    Member

    Mario,

    i’m experiencing a similar situation. I have actually posted it in the Networking forum:

    https://www.zeroshell.org/forum/viewtopic.php?p=11507#11507

    in reply to: Disable / Block user account after incorrect password #52369

    zgypa
    Member

    i don’t think this is a Networking issue. You might want to try to post this in the “Zeroshell” forum.

    in reply to: Netbalancer & Iptables #52265

    zgypa
    Member

    No, i don’t think you can just add the FDQN as a Balancing Rule. That’s a firewall table. What you have to do, i think, is write a bash or ruby or whatever script that adds the rule manually, after resolving the IP address.

    You would want to put that script in Setup>Startup/Cron. And the script would have to:

    * resolve the IP address with dig or nslookup
    * extract it from the output
    * manually add the rule with iptables.

    And then schedule the job with the appropriate frequency. If it’s a site that realistically only changes IP once every few months, or so, than you might be OK with an hourly or daily job: in the worst case you would have to just wait until it refreshes, but only very rarely. Otherwise have it update every 5 mins or so.

    That’s all i can think of.

    in reply to: send a different external ip address to the web #52443

    zgypa
    Member

    Hi,

    are there just different IP addresses with one single internet connection or multiple internet connections, one per IP address? How are the external IP addresses/WAN ports configured? Is ZS administering all of them? How are the multiple IP address handled? LoadBalancing? Can you send a diagram of the network setup?

    in reply to: test effects of zeroshell. #52521

    zgypa
    Member

    ztao,

    the post you wrote is very hard to understand. I have no idea what you are talking about. I suggest you attach a simple diagram of your network and reword it, maybe giving some titles to sections since your english is poor. Something like this:

    Problem: Internet slow

    Configuration: QoS ON, Net Balancer ON, Balancing Rules …

    Good luck!

    in reply to: Static route #52523

    zgypa
    Member

    So, i’m not sure this is the best way to do it, but i have successfully done something like that using the Balancing Rules found under Net Balancing.

    There you can
    * create your two gateways
    * set them as Load Balancing and Failover
    * give them identical weight
    * force traffic through one or the other using the Balancing Rules

    In the Balancing Rules you can filter to whatever you want, and send to whatever Target Gateway you wish

    in reply to: about half speed with zs #52536

    zgypa
    Member

    Wow, this is interesting. Could it be hardware related? Maybe a slow processor is having a hard time handling 30Mbps NATting?

    in reply to: difference between active and spare status in netbalacer #51076

    zgypa
    Member

    the only way to switch an Active to a Spare and vice versa that i found out is to deactivate the entries (unchecking the box) and then starting with the the one you want to be Active first, then the spares.

    However, i do have a similar problem, in which the active and spares sometimes switch, and when they both become active, even when only in failover mode, which probably needs its own post.

Viewing 15 posts - 1 through 15 (of 19 total)