Archive | Uncategorized

Let’s assume you have a server with two Ethernet network interface. You wish to bridge traffic between the interfaces. Here are the commands to setup the bridge:

1. Take eth0 off line

2. Take eth1 off line

3. Define a bridge named “bridge01”

4. Add eth0 to the bridge named “bridge01”

5. Add eth1 to the bridge named “bridge01”

6. Bring up the Ethernet interfaces with no IP addresses:

7. Bring the bridge online with a single ip address

Try to test by ping from one side of the bridge to the other. It may take up to 30 seconds for the ping to start running due to the learning phase on the bridge.

If it fails then double check the above setup. Take a look at the MAC addresse that the bridge sees with:

Verify that there is no bridge filtering is turned on:

Also might need to enable IP forwarding in /etc/sysctl or with:

If you actually want to be able to filter via iptables, the bridged traffic then turn on bridge-nf for iptables:

Now bridged packets will be passed through the FORWARD chain. So for example to log all packets one could do:

or to block all UDP traffic:

Additional resources:

NetBridge
Ethernet Bridge + netfilter Howto
Bridge-nf FAQ

Here’s a patched source RPM for the vsftpd package included with RHEL5. It fixes this bug:

https://bugzilla.redhat.com/show_bug.cgi?id=486524

The bug limits user names to 32 characters. The patch raises the limit to 128 characters.

To build and install do:

You can download the patched source file here:

http://blogs.reliablepenguin.com/files/vsftpd-2.0.5-12longuser.src.rpm

First get the yum-utils package if you don’t already have it:

Next just do:

where mypkg is the package that you want source for.

When using SMTP AUTH, the username and password are base64 encoded. Here’s a snip of perl that will encode a string:

This will produce something like this:

And here’s the decode:

which of course yields:

Edit the file at:

Look for these lines:

Change them as desired to give different warning/critical levels.

In one case that we worked on, the server had multiple partitions. We wanted different thresholds on each partition which was accomplished with the following patch: