Libya Linux Users Group

Finally Linux day in Libya !!!, Linux day in Libya-Tripoli in 24 Jan 2009 will be held at the ALiemad tower, Ubuntu will send CD’s and sitcker for this day ” Thanks Ubuntu- Jono Bacon ” for his help .

for more info about the day visit F/OSsiL website http://fossil.ly

There are many times that client are having dynamic ip address (assigned by DHCP server) and in this cases it’s hard to set any rules on bases of ip address as, you would not know what ip address the client machine be getting, in such case we could use mac based ACL’s to set up any rules on that particular machine.

# vi /etc/squid/squid.conf

Look for acl section and append ACL as follows:

acl mac1 arp 00:11:22:70:44:90 acl mac2 arp 00:11:22:33:44:55 http_access allow mac1 http_access allow mac2 http_access deny

all Save and close the file. Restart squid server:

# /etc/init.d/squid restart

For those of you who don’t know, Vyatta is an open source network appliance that functions as a router, firewall, and VPN device, all running on a customized version of Debian Linux. I have been following the progress of Vyatta for over a year now, and things are looking very promising. The latest release is called VC4 (Vyatta Community edition) and it includes a bunch of useful new features:

• New command shell allows you to modify Linux settings and network settings from one common interface
• Redesign of routing protocol offers greatly improved stability and performance
• Role-based user access
• Equal-cost multi-path routing
• Remote access VPN
• Support for IP tunneling protocols
• PPPoE support, commonly used with DSL connections
• WAN load balancing of outbound traffic across two or more WAN-facing interfaces
• Quality of Service policies provide congestion management and traffic conditioning

As you can see, a lot of exciting changes have been made in the short six months since the previous release. The routing improvements are related to the change from XORP to Quagga. The added QoS capabilities will make Vyatta a good fit for VoIP deployments. The only negative to this release is that Vyatta had to temporarily remove the GUI web-interface until they can integrate it, which is scheduled for July, 2008. Overall, Vyatta is becoming a a compelling option for replacing some of your over-priced network equipment. Read the rest of this entry »