Hot answers tagged

6

For such a large amount of IPs you should use the ipsets module. ipset creates datasets on which iptables can react, it can easily handle 10s of 1000s of entries. Make sure you have the EPEL repo enabled and then install ipset via: yum install ipset An example: ipset -N blockedip iphash creates a set called 'blockedip' in format 'iphash' (there are ...


3

You can use the bridge object ip the ip command, or the bridge command that makes part of the iproute2 package. Basic link manipulation To create a bridge named br0, that have eth0 and eth1 as members: ip link add name br0 type bridge ip link set dev br0 up ip link set dev eth0 master br0 ip link set dev eth0 master br1 To remove an interface from the ...


3

Simple way to check the ssh service is up and running locally on the guest: ssh localhost alternatively: netstat -an | grep -w LISTEN | grep -w 22 If not installed, have a look to http://askubuntu.com/questions/51925/how-do-i-configure-a-new-ubuntu-installation-to-accept-ssh-connections


2

Check List: Are you able to Ping Slave-1 ? Slave-1 IPtables have allowed SSH port ? Stop IPTables and try once. service iptables stop Slave-1 is having SSH service running or not ? If yes try restarting once. service sshd start service sshd stop service sshd restart Make sure you didnt changed SSH default port. Hope it will help.


2

It looks like you are using bridged networking and your host and guest already have different IP addresses, 192.168.1.2 for the host (what you call master node) and 192.168.1.5 for the guest (slave node). Don't be confused by addresses in the 127.x.x.x network. These are loopback addresses and they never leave the TCP/IP stack, i.e. two different machines ...


2

Yeah, check out Namebench. Try out namebench. It hunts down the fastest DNS servers available for your computer to use. namebench runs a fair and thorough benchmark using your web browser history, tcpdump output, or standardized datasets in order to provide an individualized recommendation. namebench is completely free and does not modify your ...


2

It is perfectly possible. It's a matter of what DNS you're using or who hosts it. Below is a (very) shortened version of my zone. IN MX 100 mx.bromosapien.net. mailer IN A 69.7.19.205 healer IN A 69.7.19.204 You can see that "healer" and "mx" (my mail server) have two different A ...


2

So I just was being an idiot. Capital O.. Sorry for any wasted time..


2

Your problem is not ip addr but some process (network manager?) which deletes the IP address. Unfortunately I am not aware of a possibility to determine which process made this access. In case the disturbing process calls ip it should be possible with process accounting (man acct) but not if the configuration is made directly via the NETLINK socket. You ...


1

If you're talking about 15,000 different IP addresses you really do not want to be using a separate iptables rule for each address. This will slow down your network throughput. Instead you should consider using a single IP Set and putting your 15000 addresses in that. ipset create spambots iphash iptables -A INPUT -m set --match-set spambots src -j DROP ...


1

You can use lsof command or netstat commands: lsof -i:9000 netstat -anlpo | grep 9000 Source: http://www.allaboutjava.club/linux/linux-find-an-application-running-on-a-given-port



Only top voted, non community-wiki answers of a minimum length are eligible