Hi guys, I have been running a CentOS firewall for a few months, but it seems to me like the machine is posessed by something. All of a sudden no port is open from outside except ssh which I'd like to be accessible only from within my LAN. The problem is SELINUX. I'm a bit apprehensive about disabling SELINUX [and only use iptables] though I don't know what security risks I'd be exposing myself to by so doing - if any. Thanks to one skunkmaster Jangita, I have learnt about Zentyal, a Ubuntu/Debian-based ... thingie that comes bundled with a number of services [firewall, IDS etc] which can be administered thru a sleek web-based interface. My question/s is/are: would it be safe for me to use iptables only and disable SELINUX? Is Zentyal formidable enough to use as a security solution for a small business network? And why does SELinux have to be such a pain in the neck??? Me.
My question/s is/are: would it be safe for me to use iptables only and disable SELINUX? Is Zentyal formidable enough to use as a security solution for a small business network? And why does SELinux have to be such a pain in the neck???
In my opinion you should disable SELINUX at the moment and use iptables only (i have never had any issues with using iptables only) i have been doing that for sometime, to use SELINUX you really need to understand how it works. -- ˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙ 'spɹɐƃǝɹ ıʞnɾu pıʌɐp
@Simon For starters, enabling SELinux will indeed give you some sleepless nights and would be best if you disabled it. The security of your system/network is dependent on how well you configure iptables. Zentyal and other bundled network management systems eg ClearOS [based on centos also web-based interface] can be good admin. products but you need to fully understand what they can do and what they cannot with relation to your needs. my thoughts On Fri, Sep 17, 2010 at 3:50 PM, Simon Mbuthia <simon.mbuthia@gmail.com>wrote:
Hi guys,
I have been running a CentOS firewall for a few months, but it seems to me like the machine is posessed by something. All of a sudden no port is open from outside except ssh which I'd like to be accessible only from within my LAN. The problem is SELINUX. I'm a bit apprehensive about disabling SELINUX [and only use iptables] though I don't know what security risks I'd be exposing myself to by so doing - if any. Thanks to one skunkmaster Jangita, I have learnt about Zentyal, a Ubuntu/Debian-based ... thingie that comes bundled with a number of services [firewall, IDS etc] which can be administered thru a sleek web-based interface.
My question/s is/are: would it be safe for me to use iptables only and disable SELINUX? Is Zentyal formidable enough to use as a security solution for a small business network? And why does SELinux have to be such a pain in the neck???
Me.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
I evaluated these and had a breeze of a time with clear os and psense, but as accurately indicated, iptables are as good as you set them. On Friday, September 17, 2010, Nd'wex Common <flexycat@gmail.com> wrote:
@Simon
For starters, enabling SELinux will indeed give you some sleepless nights and would be best if you disabled it. The security of your system/network is dependent on how well you configure iptables.
Zentyal and other bundled network management systems eg ClearOS [based on centos also web-based interface] can be good admin. products but you need to fully understand what they can do and what they cannot with relation to your needs.
my thoughts
On Fri, Sep 17, 2010 at 3:50 PM, Simon Mbuthia <simon.mbuthia@gmail.com> wrote:
Hi guys,
I have been running a CentOS firewall for a few months, but it seems to me like the machine is posessed by something. All of a sudden no port is open from outside except ssh which I'd like to be accessible only from within my LAN. The problem is SELINUX. I'm a bit apprehensive about disabling SELINUX [and only use iptables] though I don't know what security risks I'd be exposing myself to by so doing - if any. Thanks to one skunkmaster Jangita, I have learnt about Zentyal, a Ubuntu/Debian-based ... thingie that comes bundled with a number of services [firewall, IDS etc] which can be administered thru a sleek web-based interface.
My question/s is/are: would it be safe for me to use iptables only and disable SELINUX? Is Zentyal formidable enough to use as a security solution for a small business network? And why does SELinux have to be such a pain in the neck???
Me.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet Skunkworks Server Harambee <http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1fbjAwOUE&hl=en> ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards, Collins Areba. Strategic Operations. Center for Renewable Alternatives Old Ferry Road, off Msa Malindi Rd, Kilifi, Kenya. +254 720 516758 +254 734 696821 skype/gtalk/twitter: arebacollins *Solar *| * Wind *| * Waves * | * Biomass *
Good points... but something that I was fearing has come to happen. I got to the office this morning after disabling iptables yesternight to find that clients could not access the internet. On talking to guys at our ISP, they said that they could reach our public IP. We could not reach our firewall's gateway... right then I knew it was something to do with iptables... so I ran service iptables status and there were no rules in iptables. vi /etc/sysconfig/iptables showed that the rules were intact in the file, so I restarted iptables and enabled SELinux. But I noticed that every 6 or so minutes, iptables would fail again. I suspect that my Linux box could be compromised. I only had ports 22, 80 and stunnel listening at 20000 accessible from the outside world. So far I have added an entry to crontab that restarts iptables every 5 minutes while I "investigate". What could have happened to my iptables? A concerned me.... On 17 September 2010 18:22, [ Brainiac ] <arebacollins@gmail.com> wrote:
I evaluated these and had a breeze of a time with clear os and psense, but as accurately indicated, iptables are as good as you set them.
On Friday, September 17, 2010, Nd'wex Common <flexycat@gmail.com> wrote:
@Simon
For starters, enabling SELinux will indeed give you some sleepless nights and would be best if you disabled it. The security of your system/network is dependent on how well you configure iptables.
Zentyal and other bundled network management systems eg ClearOS [based on centos also web-based interface] can be good admin. products but you need to fully understand what they can do and what they cannot with relation to your needs.
my thoughts
On Fri, Sep 17, 2010 at 3:50 PM, Simon Mbuthia <simon.mbuthia@gmail.com> wrote:
Hi guys,
I have been running a CentOS firewall for a few months, but it seems to me like the machine is posessed by something. All of a sudden no port is open from outside except ssh which I'd like to be accessible only from within my LAN. The problem is SELINUX. I'm a bit apprehensive about disabling SELINUX [and only use iptables] though I don't know what security risks I'd be exposing myself to by so doing - if any. Thanks to one skunkmaster Jangita, I have learnt about Zentyal, a Ubuntu/Debian-based ... thingie that comes bundled with a number of services [firewall, IDS etc] which can be administered thru a sleek web-based interface.
My question/s is/are: would it be safe for me to use iptables only and disable SELINUX? Is Zentyal formidable enough to use as a security solution for a small business network? And why does SELinux have to be such a pain in the neck???
Me.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet Skunkworks Server Harambee < http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards,
Collins Areba. Strategic Operations. Center for Renewable Alternatives Old Ferry Road, off Msa Malindi Rd, Kilifi, Kenya. +254 720 516758 +254 734 696821 skype/gtalk/twitter: arebacollins
*Solar *| * Wind *| * Waves * | * Biomass * _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Hhhmmm! Interesting scenario you have there. Any I use Iptables and SElinux but I set the SElinux mode to permissive, thats way it doesnt cause issues. I would also ask you to consider vyatta or smoothwall. These are open source distros that u can use as routers and firewalls. Regards, Lenya On Sat, Sep 18, 2010 at 11:07 AM, Simon Mbuthia <simon.mbuthia@gmail.com> wrote:
Good points... but something that I was fearing has come to happen.
I got to the office this morning after disabling iptables yesternight to find that clients could not access the internet. On talking to guys at our ISP, they said that they could reach our public IP. We could not reach our firewall's gateway... right then I knew it was something to do with iptables... so I ran service iptables status and there were no rules in iptables. vi /etc/sysconfig/iptables showed that the rules were intact in the file, so I restarted iptables and enabled SELinux. But I noticed that every 6 or so minutes, iptables would fail again. I suspect that my Linux box could be compromised. I only had ports 22, 80 and stunnel listening at 20000 accessible from the outside world. So far I have added an entry to crontab that restarts iptables every 5 minutes while I "investigate". What could have happened to my iptables?
A concerned me....
On 17 September 2010 18:22, [ Brainiac ] <arebacollins@gmail.com> wrote:
I evaluated these and had a breeze of a time with clear os and psense, but as accurately indicated, iptables are as good as you set them.
On Friday, September 17, 2010, Nd'wex Common <flexycat@gmail.com> wrote:
@Simon
For starters, enabling SELinux will indeed give you some sleepless nights and would be best if you disabled it. The security of your system/network is dependent on how well you configure iptables.
Zentyal and other bundled network management systems eg ClearOS [based on centos also web-based interface] can be good admin. products but you need to fully understand what they can do and what they cannot with relation to your needs.
my thoughts
On Fri, Sep 17, 2010 at 3:50 PM, Simon Mbuthia <simon.mbuthia@gmail.com> wrote:
Hi guys,
I have been running a CentOS firewall for a few months, but it seems to me like the machine is posessed by something. All of a sudden no port is open from outside except ssh which I'd like to be accessible only from within my LAN. The problem is SELINUX. I'm a bit apprehensive about disabling SELINUX [and only use iptables] though I don't know what security risks I'd be exposing myself to by so doing - if any. Thanks to one skunkmaster Jangita, I have learnt about Zentyal, a Ubuntu/Debian-based ... thingie that comes bundled with a number of services [firewall, IDS etc] which can be administered thru a sleek web-based interface.
My question/s is/are: would it be safe for me to use iptables only and disable SELINUX? Is Zentyal formidable enough to use as a security solution for a small business network? And why does SELinux have to be such a pain in the neck???
Me.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet Skunkworks Server Harambee <http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1fbjAwOUE&hl=en> ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards,
Collins Areba. Strategic Operations. Center for Renewable Alternatives Old Ferry Road, off Msa Malindi Rd, Kilifi, Kenya. +254 720 516758 +254 734 696821 skype/gtalk/twitter: arebacollins
*Solar *| * Wind *| * Waves * | * Biomass * _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Hi Anthony, Have you tried Zentyal? I wish it were RedHat based... I'm thinking of installing it after working hours. On 18 September 2010 11:24, Anthony Lenya <tlensya@gmail.com> wrote:
Hhhmmm! Interesting scenario you have there. Any I use Iptables and SElinux but I set the SElinux mode to permissive, thats way it doesnt cause issues. I would also ask you to consider vyatta or smoothwall. These are open source distros that u can use as routers and firewalls.
Regards,
Lenya
On Sat, Sep 18, 2010 at 11:07 AM, Simon Mbuthia <simon.mbuthia@gmail.com> wrote:
Good points... but something that I was fearing has come to happen.
I got to the office this morning after disabling iptables yesternight to find that clients could not access the internet. On talking to guys at our ISP, they said that they could reach our public IP. We could not reach our firewall's gateway... right then I knew it was something to do with iptables... so I ran service iptables status and there were no rules in iptables. vi /etc/sysconfig/iptables showed that the rules were intact in the file, so I restarted iptables and enabled SELinux. But I noticed that every 6 or so minutes, iptables would fail again. I suspect that my Linux box could be compromised. I only had ports 22, 80 and stunnel listening at 20000 accessible from the outside world. So far I have added an entry to crontab that restarts iptables every 5 minutes while I "investigate". What could have happened to my iptables?
A concerned me....
On 17 September 2010 18:22, [ Brainiac ] <arebacollins@gmail.com> wrote:
I evaluated these and had a breeze of a time with clear os and psense, but as accurately indicated, iptables are as good as you set them.
On Friday, September 17, 2010, Nd'wex Common <flexycat@gmail.com>
wrote:
@Simon
For starters, enabling SELinux will indeed give you some sleepless nights and would be best if you disabled it. The security of your system/network is dependent on how well you configure iptables.
Zentyal and other bundled network management systems eg ClearOS [based on centos also web-based interface] can be good admin. products but you need to fully understand what they can do and what they cannot with relation to your needs.
my thoughts
On Fri, Sep 17, 2010 at 3:50 PM, Simon Mbuthia < simon.mbuthia@gmail.com> wrote:
Hi guys,
I have been running a CentOS firewall for a few months, but it seems to me like the machine is posessed by something. All of a sudden no port is open from outside except ssh which I'd like to be accessible only from within my LAN. The problem is SELINUX. I'm a bit apprehensive about disabling SELINUX [and only use iptables] though I don't know what security risks I'd be exposing myself to by so doing - if any. Thanks to one skunkmaster Jangita, I have learnt about Zentyal, a Ubuntu/Debian-based ... thingie that comes bundled with a number of services [firewall, IDS etc] which can be administered thru a sleek web-based interface.
My question/s is/are: would it be safe for me to use iptables only and disable SELINUX? Is Zentyal formidable enough to use as a security solution for a small business network? And why does SELinux have to be such a pain in the neck???
Me.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet Skunkworks Server Harambee < http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards,
Collins Areba. Strategic Operations. Center for Renewable Alternatives Old Ferry Road, off Msa Malindi Rd, Kilifi, Kenya. +254 720 516758 +254 734 696821 skype/gtalk/twitter: arebacollins
*Solar *| * Wind *| * Waves * | * Biomass * _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
nope, I might do that some time. It wouldn't hurt to try out many of these. Zentyal, vyatta etc. Im am mostly Cisco leaning but I find vyatta to be equally refreshing. Regards. On Sat, Sep 18, 2010 at 11:34 AM, Simon Mbuthia <simon.mbuthia@gmail.com> wrote:
Hi Anthony,
Have you tried Zentyal? I wish it were RedHat based... I'm thinking of installing it after working hours.
On 18 September 2010 11:24, Anthony Lenya <tlensya@gmail.com> wrote:
Hhhmmm! Interesting scenario you have there. Any I use Iptables and SElinux but I set the SElinux mode to permissive, thats way it doesnt cause issues. I would also ask you to consider vyatta or smoothwall. These are open source distros that u can use as routers and firewalls.
Regards,
Lenya
On Sat, Sep 18, 2010 at 11:07 AM, Simon Mbuthia <simon.mbuthia@gmail.com> wrote:
Good points... but something that I was fearing has come to happen.
I got to the office this morning after disabling iptables yesternight to find that clients could not access the internet. On talking to guys at our ISP, they said that they could reach our public IP. We could not reach our firewall's gateway... right then I knew it was something to do with iptables... so I ran service iptables status and there were no rules in iptables. vi /etc/sysconfig/iptables showed that the rules were intact in the file, so I restarted iptables and enabled SELinux. But I noticed that every 6 or so minutes, iptables would fail again. I suspect that my Linux box could be compromised. I only had ports 22, 80 and stunnel listening at 20000 accessible from the outside world. So far I have added an entry to crontab that restarts iptables every 5 minutes while I "investigate". What could have happened to my iptables?
A concerned me....
On 17 September 2010 18:22, [ Brainiac ] <arebacollins@gmail.com> wrote:
I evaluated these and had a breeze of a time with clear os and psense, but as accurately indicated, iptables are as good as you set them.
On Friday, September 17, 2010, Nd'wex Common <flexycat@gmail.com> wrote:
@Simon
For starters, enabling SELinux will indeed give you some sleepless nights and would be best if you disabled it. The security of your system/network is dependent on how well you configure iptables.
Zentyal and other bundled network management systems eg ClearOS [based on centos also web-based interface] can be good admin. products but you need to fully understand what they can do and what they cannot with relation to your needs.
my thoughts
On Fri, Sep 17, 2010 at 3:50 PM, Simon Mbuthia <simon.mbuthia@gmail.com> wrote:
Hi guys,
I have been running a CentOS firewall for a few months, but it seems to me like the machine is posessed by something. All of a sudden no port is open from outside except ssh which I'd like to be accessible only from within my LAN. The problem is SELINUX. I'm a bit apprehensive about disabling SELINUX [and only use iptables] though I don't know what security risks I'd be exposing myself to by so doing - if any. Thanks to one skunkmaster Jangita, I have learnt about Zentyal, a Ubuntu/Debian-based ... thingie that comes bundled with a number of services [firewall, IDS etc] which can be administered thru a sleek web-based interface.
My question/s is/are: would it be safe for me to use iptables only and disable SELINUX? Is Zentyal formidable enough to use as a security solution for a small business network? And why does SELinux have to be such a pain in the neck???
Me.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet Skunkworks Server
Harambee <http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1fbjAwOUE&hl=en> ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards,
Collins Areba. Strategic Operations. Center for Renewable Alternatives Old Ferry Road, off Msa Malindi Rd, Kilifi, Kenya. +254 720 516758 +254 734 696821 skype/gtalk/twitter: arebacollins
*Solar *| * Wind *| * Waves * | * Biomass * _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Hi, A applied for 2 Zuku internet connections one home s.b for 256 and the other 1mb cbd almost a month ago. I paid all installation charges and one moth fee. Two weeks ago they installed the home and to date they have not installed the 1 mb cbd one. I am at loss on their business logic. How do you give priority to 1,500 a month over the 4,500? I am considering asking for a refund as one month delay is too long. If it takes this long to install in CBD, what about the service? Any ideas where i can get faster better internet services for the same - 1mb, monthly fee of 4,500 Any Zukus here? Shad
Dear Mr Shad, Please accept our sincere apologies for the delayed installation. We have also sent you a mail confirming the installation date with the email address support@ke.wananchi.com. Kindly confirm receipt of the same. Kind Regards, Support Team. T: +254 20 3292200, F: +254 20 828758, M: +254 0719 028 200 /0732 132 200 Email:support@ke.wananchi.com <Email%3Asupport@ke.wananchi.com> Wananchi Group (K) Limited W: www.zuku.co.ke On Sat, Sep 18, 2010 at 12:53 PM, Shadrack Mwaniki < shadrack_mwaniki@yahoo.com> wrote:
Hi, A applied for 2 Zuku internet connections one home s.b for 256 and the other 1mb cbd almost a month ago. I paid all installation charges and one moth fee. Two weeks ago they installed the home and to date they have not installed the 1 mb cbd one. I am at loss on their business logic. How do you give priority to 1,500 a month over the 4,500? I am considering asking for a refund as one month delay is too long. If it takes this long to install in CBD, what about the service? Any ideas where i can get faster better internet services for the same - 1mb, monthly fee of 4,500 Any Zukus here?
Shad
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Wow,poetry this is. Too much power, this forum wields. Master Yoda On 18 September 2010 15:48, ZUKU SUPPORT <zukucanhelp@gmail.com> wrote:
Dear Mr Shad,
Please accept our sincere apologies for the delayed installation. We have also sent you a mail confirming the installation date with the email address support@ke.wananchi.com. Kindly confirm receipt of the same.
Kind Regards, Support Team. T: +254 20 3292200, F: +254 20 828758, M: +254 0719 028 200 /0732 132 200 Email:support@ke.wananchi.com <Email%3Asupport@ke.wananchi.com> Wananchi Group (K) Limited W: www.zuku.co.ke
On Sat, Sep 18, 2010 at 12:53 PM, Shadrack Mwaniki < shadrack_mwaniki@yahoo.com> wrote:
Hi, A applied for 2 Zuku internet connections one home s.b for 256 and the other 1mb cbd almost a month ago. I paid all installation charges and one moth fee. Two weeks ago they installed the home and to date they have not installed the 1 mb cbd one. I am at loss on their business logic. How do you give priority to 1,500 a month over the 4,500? I am considering asking for a refund as one month delay is too long. If it takes this long to install in CBD, what about the service? Any ideas where i can get faster better internet services for the same - 1mb, monthly fee of 4,500 Any Zukus here?
Shad
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
how much does the 256 kbps connection cost to install? On 18 September 2010 21:37, Timothy Kyalo <this.gizmo@gmail.com> wrote:
Wow,poetry this is. Too much power, this forum wields.
Master Yoda
On 18 September 2010 15:48, ZUKU SUPPORT <zukucanhelp@gmail.com> wrote:
Dear Mr Shad,
Please accept our sincere apologies for the delayed installation. We have also sent you a mail confirming the installation date with the email address support@ke.wananchi.com. Kindly confirm receipt of the same.
Kind Regards, Support Team. T: +254 20 3292200, F: +254 20 828758, M: +254 0719 028 200 /0732 132 200 Email:support@ke.wananchi.com <Email%3Asupport@ke.wananchi.com> Wananchi Group (K) Limited W: www.zuku.co.ke
On Sat, Sep 18, 2010 at 12:53 PM, Shadrack Mwaniki < shadrack_mwaniki@yahoo.com> wrote:
Hi, A applied for 2 Zuku internet connections one home s.b for 256 and the other 1mb cbd almost a month ago. I paid all installation charges and one moth fee. Two weeks ago they installed the home and to date they have not installed the 1 mb cbd one. I am at loss on their business logic. How do you give priority to 1,500 a month over the 4,500? I am considering asking for a refund as one month delay is too long. If it takes this long to install in CBD, what about the service? Any ideas where i can get faster better internet services for the same - 1mb, monthly fee of 4,500 Any Zukus here?
Shad
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- with Regards: sitting next to engineers can have some positive feedback: http://gramware.blogspot.com/2010/08/positive-feedback.html
Last I checked it cost 3K for installation of any package from 256kbps to 20mbps but he you connect via wimax there if a 500KSH monthly rental fee. Check zuku.co.ke and zuku.co.ke/biz. On 9/18/10, Dennis Kioko <dmbuvi@gmail.com> wrote:
how much does the 256 kbps connection cost to install?
On 18 September 2010 21:37, Timothy Kyalo <this.gizmo@gmail.com> wrote:
Wow,poetry this is. Too much power, this forum wields.
Master Yoda
On 18 September 2010 15:48, ZUKU SUPPORT <zukucanhelp@gmail.com> wrote:
Dear Mr Shad,
Please accept our sincere apologies for the delayed installation. We have also sent you a mail confirming the installation date with the email address support@ke.wananchi.com. Kindly confirm receipt of the same.
Kind Regards, Support Team. T: +254 20 3292200, F: +254 20 828758, M: +254 0719 028 200 /0732 132 200 Email:support@ke.wananchi.com <Email%3Asupport@ke.wananchi.com> Wananchi Group (K) Limited W: www.zuku.co.ke
On Sat, Sep 18, 2010 at 12:53 PM, Shadrack Mwaniki < shadrack_mwaniki@yahoo.com> wrote:
Hi, A applied for 2 Zuku internet connections one home s.b for 256 and the other 1mb cbd almost a month ago. I paid all installation charges and one moth fee. Two weeks ago they installed the home and to date they have not installed the 1 mb cbd one. I am at loss on their business logic. How do you give priority to 1,500 a month over the 4,500? I am considering asking for a refund as one month delay is too long. If it takes this long to install in CBD, what about the service? Any ideas where i can get faster better internet services for the same - 1mb, monthly fee of 4,500 Any Zukus here?
Shad
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- with Regards:
sitting next to engineers can have some positive feedback: http://gramware.blogspot.com/2010/08/positive-feedback.html
I have 1Mbps but I do not pay any rental fee ... and I thought Zuku Biz is only via Fiber its not Wimax?? On 19 September 2010 10:45, Job Muriuki <muriukin@gmail.com> wrote:
Last I checked it cost 3K for installation of any package from 256kbps to 20mbps but he you connect via wimax there if a 500KSH monthly rental fee. Check zuku.co.ke and zuku.co.ke/biz.
how much does the 256 kbps connection cost to install?
On 18 September 2010 21:37, Timothy Kyalo <this.gizmo@gmail.com> wrote:
Wow,poetry this is. Too much power, this forum wields.
Master Yoda
On 18 September 2010 15:48, ZUKU SUPPORT <zukucanhelp@gmail.com> wrote:
Dear Mr Shad,
Please accept our sincere apologies for the delayed installation. We have also sent you a mail confirming the installation date with the email address support@ke.wananchi.com. Kindly confirm receipt of the same.
Kind Regards, Support Team. T: +254 20 3292200, F: +254 20 828758, M: +254 0719 028 200 /0732 132 200 Email:support@ke.wananchi.com <Email%3Asupport@ke.wananchi.com> < Email%3Asupport@ke.wananchi.com <Email%253Asupport@ke.wananchi.com>> Wananchi Group (K) Limited W: www.zuku.co.ke
On Sat, Sep 18, 2010 at 12:53 PM, Shadrack Mwaniki < shadrack_mwaniki@yahoo.com> wrote:
Hi, A applied for 2 Zuku internet connections one home s.b for 256 and the other 1mb cbd almost a month ago. I paid all installation charges and one moth fee. Two weeks ago they installed the home and to date they have not installed the 1 mb cbd one. I am at loss on their business logic. How do you give priority to 1,500 a month over the 4,500? I am considering asking for a refund as one month delay is too long. If it takes this long to install in CBD, what about the service? Any ideas where i can get faster better internet services for the same
On 9/18/10, Dennis Kioko <dmbuvi@gmail.com> wrote: -
1mb, monthly fee of 4,500 Any Zukus here?
Shad
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- with Regards:
sitting next to engineers can have some positive feedback: http://gramware.blogspot.com/2010/08/positive-feedback.html
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Watson Kambo
All true. I also don't pay for equipment rental but for any new connections they started charging 500 for rental of wimax equipment. Also for 10,15 and 20 Mbps you have to be on fiber but you can still get connected on fiber for other packages.
Anyone on the 10M who can tell what kind of throughputs they are getting? Sent from my iPhone On 19 Sep 2010, at 20:24, Job Muriuki <muriukin@gmail.com> wrote:
All true. I also don't pay for equipment rental but for any new connections they started charging 500 for rental of wimax equipment. Also for 10,15 and 20 Mbps you have to be on fiber but you can still get connected on fiber for other packages. _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Am on 1 Mbps connected on fiber and results from speedtest are http://speedtest.net/result/947889870.png I do tests oftenand at bad times I get 2Mbps.
@job, how much does it cost? those are pretty decent speeds -- Thanks and Regards, Erick Njenga Nyachwaya, M: +254-725-008-790 <http://www.facebook.com/ErickNjenga> <http://www.twitter.com/ErickNjenga>
@Job are you really on 1Mbps coz am on 1Mbps but on Wimax and i barely make it to 0.7Mbps ... too bad they do not have fiber everywhere i was actually ready to pay more for higher only that they cant offer me anything more than 1M on Wimax I wonder how KDN does it on the BOX thing ... On 19 September 2010 21:14, Erick Njenga <eriknjenga@gmail.com> wrote:
@job, how much does it cost? those are pretty decent speeds --
Thanks and Regards, Erick Njenga Nyachwaya, M: +254-725-008-790
<http://www.facebook.com/ErickNjenga> <http://www.twitter.com/ErickNjenga>
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Watson Kambo
Do you pay differently depending in whether you are in fiber or wimax? Thanks and Regards, Erick Njenga Nyachwaya, M: +254-725-008-790 <http://www.facebook.com/ErickNjenga> <http://www.twitter.com/ErickNjenga>
First I pay same as any 1mbps client pays no more no less. I was in your situation once but since I deploy wireless links I did exactly that. I wanted to get the 10mb link so I setup the 1mb first to test the waters and I was shocked. I thought the speeds would go to sub 1mb speeds but it got better especially after Eassy landed. I believe the bottleneck if my wireless link (17km) through NRB. I will be upgrading to better gear soon and I will post my results. I have guys connected to KDN on fiber paying 3k a month through a KDN installer and The get better speeds than I do. About Zuku offering only 1mbps links on wimax its just a matter of what speeds/clients they want to achieve on their wireless Base stations. If they want to offer 5mbps on wimax they can do that but have less clients per station. KDN uses alvarion's VL running on 5ghz (at least most guys on 5mbps) but you will not get the full speed not to mention interference on these frequency.
I have guys connected to KDN on fiber paying 3k a month through a KDN
installer and The get better speeds than I do.
what!! How do I become one of those guys? unfortunately KDN's site is under construction
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Thanks and Regards, Erick Njenga Nyachwaya, M: +254-725-008-790 <http://www.facebook.com/ErickNjenga> <http://www.twitter.com/ErickNjenga>
The Idea is you identify a building with fiber termination from the provider of your choice ans have a ptp link to your destination (site survey needed for this)
do you know of any that have fiber in residential areas? I already have fast net at the office I'm looking for a solution for the home -- Thanks and Regards, Erick Njenga Nyachwaya, M: +254-725-008-790 <http://www.facebook.com/ErickNjenga> <http://www.twitter.com/ErickNjenga>
No not in residential areas. But if your residential area is the likes of westlands you could get on or two. On 9/19/10, Erick Njenga <eriknjenga@gmail.com> wrote:
do you know of any that have fiber in residential areas? I already have fast net at the office I'm looking for a solution for the home --
Thanks and Regards, Erick Njenga Nyachwaya, M: +254-725-008-790
<http://www.facebook.com/ErickNjenga> <http://www.twitter.com/ErickNjenga>
Hi Job .. if I get a building that has LOS to my house/ Apartment and its Fiber ready so what equipment do I need for this and how do I get this deal .. Anyone from Zuku that can enlighten us .. Those speeds are impressive ... On 20 September 2010 00:06, Job Muriuki <muriukin@gmail.com> wrote:
No not in residential areas. But if your residential area is the likes of westlands you could get on or two.
On 9/19/10, Erick Njenga <eriknjenga@gmail.com> wrote:
do you know of any that have fiber in residential areas? I already have fast net at the office I'm looking for a solution for the home --
Thanks and Regards, Erick Njenga Nyachwaya, M: +254-725-008-790
<http://www.facebook.com/ErickNjenga> < http://www.twitter.com/ErickNjenga>
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Watson Kambo
As a matter of fact if you are connected off fiber last mile from your provider you will most likely get much higher speeds than you bought. Its as simple as getting a connection from the fiber ready building and use the ISM band (2.4Ghz or 5Ghz) for a point to point link to your home.
I guess you did not get the question ... Is it something I can request from Zuku ... as in walk in say I need site survey to have a ptp link to my house from the nearest Fiber ready house ? On 20 September 2010 14:18, Job Muriuki <muriukin@gmail.com> wrote:
As a matter of fact if you are connected off fiber last mile from your provider you will most likely get much higher speeds than you bought. Its as simple as getting a connection from the fiber ready building and use the ISM band (2.4Ghz or 5Ghz) for a point to point link to your home. _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Watson Kambo
No. I run and maintain the PtP thats what i do for a living (deploying wireless networks). Its possible to have them do that like safaricom are doing but it will cost you quite a bit. Locate your building, talk to the management and put up the point to point link.
Hello Mr. Kambo, Thanks for your enquiry on our exciting Zuku offerings We’re in the process of rolling out Africa’s most innovative Triple Play and Wimax Network We have several offerings and as you may already know, our *Zuku Wimax *Service offering provides affordable and reliable unlimited broadband with speeds of up to 1Mps. As you rightly pointed out, the Wimax service is largely reliant on line of sight. Take a look at our website here http://zuku.co.ke/broadband for more information on Zuku Wimax Service. Late last year when we slashed our prices by 50%, we introduced *Zuku Biz*available only around Metro Nairobi & Westlands. You can take a look at the areas/buildings where this service is available and information on pricing at this website - zuku.co.ke/biz/ We’re currently piloting our *Triple Play Network (Cable TV, True Broadband and Landline)*. neighborhoods. Specific information on offering, speeds, availability and pricing will be published soon. Our other Wananchi Group company Simbanet has a variety of offerings for corporate and small businesses offering various solutions including VSAT, xDSL, Fiber, co-location & VPN technology. etc. You can visit our website here http://www.simbanet.co.ke/ If you have any other questions or need support, please reach out to us at the address below. We’re at your service! Sincerely, Zuku Customer Care Wananchi Group | Gateway Business Park | Block E | Mombasa Road | Nairobi | 00100 | Kenya T: 0719028200, 0732132200, 3292200, W : http://www.zuku.co.ke, On Mon, Sep 20, 2010 at 1:51 PM, Watson Kambo <wkwats@gmail.com> wrote:
Hi Job .. if I get a building that has LOS to my house/ Apartment and its Fiber ready so what equipment do I need for this and how do I get this deal .. Anyone from Zuku that can enlighten us .. Those speeds are impressive ...
On 20 September 2010 00:06, Job Muriuki <muriukin@gmail.com> wrote:
No not in residential areas. But if your residential area is the likes of westlands you could get on or two.
On 9/19/10, Erick Njenga <eriknjenga@gmail.com> wrote:
do you know of any that have fiber in residential areas? I already have fast net at the office I'm looking for a solution for the home --
Thanks and Regards, Erick Njenga Nyachwaya, M: +254-725-008-790
<http://www.facebook.com/ErickNjenga> < http://www.twitter.com/ErickNjenga>
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Watson Kambo
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Hello ZUKU Support, Thanks for the good info, I already have the 1Mbps plus TV what I need is faster speeds on Wimax or fiber, problem is Zuku Biz is only in town, am actually waiting for the Triple play Network I hope the speeds will be impressive ... really excited about that ... by the way how soon should we expect the triple play ?... Watson Kambo On 20 September 2010 16:20, ZUKU SUPPORT <zukucanhelp@gmail.com> wrote:
Hello Mr. Kambo,
Thanks for your enquiry on our exciting Zuku offerings
We’re in the process of rolling out Africa’s most innovative Triple Play and Wimax Network We have several offerings and as you may already know, our *Zuku Wimax *Service offering provides affordable and reliable unlimited broadband with speeds of up to 1Mps. As you rightly pointed out, the Wimax service is largely reliant on line of sight. Take a look at our website here http://zuku.co.ke/broadband for more information on Zuku Wimax Service.
Late last year when we slashed our prices by 50%, we introduced *Zuku Biz*available only around Metro Nairobi & Westlands. You can take a look at the areas/buildings where this service is available and information on pricing at this website - zuku.co.ke/biz/
We’re currently piloting our *Triple Play Network (Cable TV, True Broadband and Landline)*. neighborhoods. Specific information on offering, speeds, availability and pricing will be published soon.
Our other Wananchi Group company Simbanet has a variety of offerings for corporate and small businesses offering various solutions including VSAT, xDSL, Fiber, co-location & VPN technology. etc.
You can visit our website here http://www.simbanet.co.ke/
If you have any other questions or need support, please reach out to us at the address below. We’re at your service!
Sincerely,
Zuku Customer Care
Wananchi Group | Gateway Business Park | Block E | Mombasa Road | Nairobi | 00100 | Kenya
T: 0719028200, 0732132200, 3292200, W : http://www.zuku.co.ke,
On Mon, Sep 20, 2010 at 1:51 PM, Watson Kambo <wkwats@gmail.com> wrote:
Hi Job .. if I get a building that has LOS to my house/ Apartment and its Fiber ready so what equipment do I need for this and how do I get this deal .. Anyone from Zuku that can enlighten us .. Those speeds are impressive ...
On 20 September 2010 00:06, Job Muriuki <muriukin@gmail.com> wrote:
No not in residential areas. But if your residential area is the likes of westlands you could get on or two.
On 9/19/10, Erick Njenga <eriknjenga@gmail.com> wrote:
do you know of any that have fiber in residential areas? I already have fast net at the office I'm looking for a solution for the home --
Thanks and Regards, Erick Njenga Nyachwaya, M: +254-725-008-790
<http://www.facebook.com/ErickNjenga> < http://www.twitter.com/ErickNjenga>
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Watson Kambo
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Watson Kambo
@Watson. You said you have TV from zuku. Do you connect via wimax and what equipment do you have? Is is ip based to allow remote access? On 20/09/2010, Watson Kambo <wkwats@gmail.com> wrote:
Hello ZUKU Support,
Thanks for the good info, I already have the 1Mbps plus TV what I need is faster speeds on Wimax or fiber, problem is Zuku Biz is only in town, am actually waiting for the Triple play Network I hope the speeds will be impressive ... really excited about that ... by the way how soon should we expect the triple play ?...
Watson Kambo
On 20 September 2010 16:20, ZUKU SUPPORT <zukucanhelp@gmail.com> wrote:
Hello Mr. Kambo,
Thanks for your enquiry on our exciting Zuku offerings
We’re in the process of rolling out Africa’s most innovative Triple Play and Wimax Network We have several offerings and as you may already know, our *Zuku Wimax *Service offering provides affordable and reliable unlimited broadband with speeds of up to 1Mps. As you rightly pointed out, the Wimax service is largely reliant on line of sight. Take a look at our website here http://zuku.co.ke/broadband for more information on Zuku Wimax Service.
Late last year when we slashed our prices by 50%, we introduced *Zuku Biz*available only around Metro Nairobi & Westlands. You can take a look at the areas/buildings where this service is available and information on pricing at this website - zuku.co.ke/biz/
We’re currently piloting our *Triple Play Network (Cable TV, True Broadband and Landline)*. neighborhoods. Specific information on offering, speeds, availability and pricing will be published soon.
Our other Wananchi Group company Simbanet has a variety of offerings for corporate and small businesses offering various solutions including VSAT, xDSL, Fiber, co-location & VPN technology. etc.
You can visit our website here http://www.simbanet.co.ke/
If you have any other questions or need support, please reach out to us at the address below. We’re at your service!
Sincerely,
Zuku Customer Care
Wananchi Group | Gateway Business Park | Block E | Mombasa Road | Nairobi | 00100 | Kenya
T: 0719028200, 0732132200, 3292200, W : http://www.zuku.co.ke,
On Mon, Sep 20, 2010 at 1:51 PM, Watson Kambo <wkwats@gmail.com> wrote:
Hi Job .. if I get a building that has LOS to my house/ Apartment and its Fiber ready so what equipment do I need for this and how do I get this deal .. Anyone from Zuku that can enlighten us .. Those speeds are impressive ...
On 20 September 2010 00:06, Job Muriuki <muriukin@gmail.com> wrote:
No not in residential areas. But if your residential area is the likes of westlands you could get on or two.
On 9/19/10, Erick Njenga <eriknjenga@gmail.com> wrote:
do you know of any that have fiber in residential areas? I already have fast net at the office I'm looking for a solution for the home --
Thanks and Regards, Erick Njenga Nyachwaya, M: +254-725-008-790
<http://www.facebook.com/ErickNjenga> < http://www.twitter.com/ErickNjenga>
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Watson Kambo
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Watson Kambo
-- Sent from my mobile device Regards, Job Njogu Muriuki, Phone: (+254) - 772333075 | 736333075 Skype: heviejob | Yahoo: heviejob Address: 42665 00100 Nrb
The TV part comes Via Coaxial cable, personally I hope this is the mode they will use for the Triple play due to band width, the internet is Wimax ... Its not ip based its analogue TV .. On 20 September 2010 17:09, Job Muriuki <muriukin@gmail.com> wrote:
@Watson. You said you have TV from zuku. Do you connect via wimax and what equipment do you have? Is is ip based to allow remote access?
On 20/09/2010, Watson Kambo <wkwats@gmail.com> wrote:
Hello ZUKU Support,
Thanks for the good info, I already have the 1Mbps plus TV what I need is faster speeds on Wimax or fiber, problem is Zuku Biz is only in town, am actually waiting for the Triple play Network I hope the speeds will be impressive ... really excited about that ... by the way how soon should we expect the triple play ?...
Watson Kambo
On 20 September 2010 16:20, ZUKU SUPPORT <zukucanhelp@gmail.com> wrote:
Hello Mr. Kambo,
Thanks for your enquiry on our exciting Zuku offerings
We’re in the process of rolling out Africa’s most innovative Triple Play and Wimax Network We have several offerings and as you may already know, our *Zuku Wimax *Service offering provides affordable and reliable unlimited broadband with speeds of up to 1Mps. As you rightly pointed out, the Wimax service is largely reliant on line of sight. Take a look at our website here http://zuku.co.ke/broadband for more information on Zuku Wimax Service.
Late last year when we slashed our prices by 50%, we introduced *Zuku Biz*available only around Metro Nairobi & Westlands. You can take a look at the areas/buildings where this service is available and information on pricing at this website - zuku.co.ke/biz/
We’re currently piloting our *Triple Play Network (Cable TV, True Broadband and Landline)*. neighborhoods. Specific information on offering, speeds, availability and pricing will be published soon.
Our other Wananchi Group company Simbanet has a variety of offerings for corporate and small businesses offering various solutions including VSAT, xDSL, Fiber, co-location & VPN technology. etc.
You can visit our website here http://www.simbanet.co.ke/
If you have any other questions or need support, please reach out to us at the address below. We’re at your service!
Sincerely,
Zuku Customer Care
Wananchi Group | Gateway Business Park | Block E | Mombasa Road | Nairobi | 00100 | Kenya
T: 0719028200, 0732132200, 3292200, W : http://www.zuku.co.ke,
On Mon, Sep 20, 2010 at 1:51 PM, Watson Kambo <wkwats@gmail.com> wrote:
Hi Job .. if I get a building that has LOS to my house/ Apartment and its Fiber ready so what equipment do I need for this and how do I get this deal .. Anyone from Zuku that can enlighten us .. Those speeds are impressive ...
On 20 September 2010 00:06, Job Muriuki <muriukin@gmail.com> wrote:
No not in residential areas. But if your residential area is the likes of westlands you could get on or two.
On 9/19/10, Erick Njenga <eriknjenga@gmail.com> wrote:
do you know of any that have fiber in residential areas? I already have fast net at the office I'm looking for a solution for the home --
Thanks and Regards, Erick Njenga Nyachwaya, M: +254-725-008-790
<http://www.facebook.com/ErickNjenga> < http://www.twitter.com/ErickNjenga>
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Watson Kambo
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Watson Kambo
-- Sent from my mobile device
Regards, Job Njogu Muriuki,
Phone: (+254) - 772333075 | 736333075 Skype: heviejob | Yahoo: heviejob
Address: 42665 00100 Nrb _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Watson Kambo
@Simon When you switch off IPTables, it implies there are no rules rather no packet filtering taking place and as such anyone who knows what he/she doing will most definitely turn your system into what they want depending on open ports as well as publicly available services running on the server. Assuming you are not running any of the bundled firewall Os's you could start by setting up a virtualbox on your machine and create a virtual network with one of the VM objects being the firewall from there you could do all sorts of tests and scenarios while documenting results. The best scenario is what you implement, by first flushing out your current IPTables settings then build it again. Another thing, stop all services you dont require in your server as well as SELinux, that combination is not very good. http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch14_:_Linux... Would be a good place to start On Sat, Sep 18, 2010 at 11:07 AM, Simon Mbuthia <simon.mbuthia@gmail.com>wrote:
Good points... but something that I was fearing has come to happen.
I got to the office this morning after disabling iptables yesternight to find that clients could not access the internet. On talking to guys at our ISP, they said that they could reach our public IP. We could not reach our firewall's gateway... right then I knew it was something to do with iptables... so I ran service iptables status and there were no rules in iptables. vi /etc/sysconfig/iptables showed that the rules were intact in the file, so I restarted iptables and enabled SELinux.
But I noticed that every 6 or so minutes, iptables would fail again. I
suspect that my Linux box could be compromised. I only had ports 22, 80 and stunnel listening at 20000 accessible from the outside world. So far I have added an entry to crontab that restarts iptables every 5 minutes while I "investigate". What could have happened to my iptables?
A concerned me....
On 17 September 2010 18:22, [ Brainiac ] <arebacollins@gmail.com> wrote:
I evaluated these and had a breeze of a time with clear os and psense, but as accurately indicated, iptables are as good as you set them.
On Friday, September 17, 2010, Nd'wex Common <flexycat@gmail.com> wrote:
@Simon
For starters, enabling SELinux will indeed give you some sleepless nights and would be best if you disabled it. The security of your system/network is dependent on how well you configure iptables.
Zentyal and other bundled network management systems eg ClearOS [based on centos also web-based interface] can be good admin. products but you need to fully understand what they can do and what they cannot with relation to your needs.
my thoughts
On Fri, Sep 17, 2010 at 3:50 PM, Simon Mbuthia <simon.mbuthia@gmail.com> wrote:
Hi guys,
I have been running a CentOS firewall for a few months, but it seems to me like the machine is posessed by something. All of a sudden no port is open from outside except ssh which I'd like to be accessible only from within my LAN. The problem is SELINUX. I'm a bit apprehensive about disabling SELINUX [and only use iptables] though I don't know what security risks I'd be exposing myself to by so doing - if any. Thanks to one skunkmaster Jangita, I have learnt about Zentyal, a Ubuntu/Debian-based ... thingie that comes bundled with a number of services [firewall, IDS etc] which can be administered thru a sleek web-based interface.
My question/s is/are: would it be safe for me to use iptables only and disable SELINUX? Is Zentyal formidable enough to use as a security solution for a small business network? And why does SELinux have to be such a pain in the neck???
Me.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet Skunkworks Server Harambee < http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards,
Collins Areba. Strategic Operations. Center for Renewable Alternatives Old Ferry Road, off Msa Malindi Rd, Kilifi, Kenya. +254 720 516758 +254 734 696821 skype/gtalk/twitter: arebacollins
*Solar *| * Wind *| * Waves * | * Biomass * _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Hey Common, I'm sorry I have just seen your e-mail.... right after I've finished configuring Zentyal. I think it's pretty cool.... the interface... the security... "the everything about Zentyal" [I think]. Thanks for your help though... let's see what happens to this one now... On 18 September 2010 14:28, Nd'wex Common <flexycat@gmail.com> wrote:
@Simon When you switch off IPTables, it implies there are no rules rather no packet filtering taking place and as such anyone who knows what he/she doing will most definitely turn your system into what they want depending on open ports as well as publicly available services running on the server.
Assuming you are not running any of the bundled firewall Os's you could start by setting up a virtualbox on your machine and create a virtual network with one of the VM objects being the firewall from there you could do all sorts of tests and scenarios while documenting results. The best scenario is what you implement, by first flushing out your current IPTables settings then build it again.
Another thing, stop all services you dont require in your server as well as SELinux, that combination is not very good.
http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch14_:_Linux...
Would be a good place to start
On Sat, Sep 18, 2010 at 11:07 AM, Simon Mbuthia <simon.mbuthia@gmail.com>wrote:
Good points... but something that I was fearing has come to happen.
I got to the office this morning after disabling iptables yesternight to find that clients could not access the internet. On talking to guys at our ISP, they said that they could reach our public IP. We could not reach our firewall's gateway... right then I knew it was something to do with iptables... so I ran service iptables status and there were no rules in iptables. vi /etc/sysconfig/iptables showed that the rules were intact in the file, so I restarted iptables and enabled SELinux.
But I noticed that every 6 or so minutes, iptables would fail again. I
suspect that my Linux box could be compromised. I only had ports 22, 80 and stunnel listening at 20000 accessible from the outside world. So far I have added an entry to crontab that restarts iptables every 5 minutes while I "investigate". What could have happened to my iptables?
A concerned me....
On 17 September 2010 18:22, [ Brainiac ] <arebacollins@gmail.com> wrote:
I evaluated these and had a breeze of a time with clear os and psense, but as accurately indicated, iptables are as good as you set them.
On Friday, September 17, 2010, Nd'wex Common <flexycat@gmail.com> wrote:
@Simon
For starters, enabling SELinux will indeed give you some sleepless nights and would be best if you disabled it. The security of your system/network is dependent on how well you configure iptables.
Zentyal and other bundled network management systems eg ClearOS [based on centos also web-based interface] can be good admin. products but you need to fully understand what they can do and what they cannot with relation to your needs.
my thoughts
On Fri, Sep 17, 2010 at 3:50 PM, Simon Mbuthia < simon.mbuthia@gmail.com> wrote:
Hi guys,
I have been running a CentOS firewall for a few months, but it seems to me like the machine is posessed by something. All of a sudden no port is open from outside except ssh which I'd like to be accessible only from within my LAN. The problem is SELINUX. I'm a bit apprehensive about disabling SELINUX [and only use iptables] though I don't know what security risks I'd be exposing myself to by so doing - if any. Thanks to one skunkmaster Jangita, I have learnt about Zentyal, a Ubuntu/Debian-based ... thingie that comes bundled with a number of services [firewall, IDS etc] which can be administered thru a sleek web-based interface.
My question/s is/are: would it be safe for me to use iptables only and disable SELINUX? Is Zentyal formidable enough to use as a security solution for a small business network? And why does SELinux have to be such a pain in the neck???
Me.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet Skunkworks Server Harambee < http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f...
------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Regards,
Collins Areba. Strategic Operations. Center for Renewable Alternatives Old Ferry Road, off Msa Malindi Rd, Kilifi, Kenya. +254 720 516758 +254 734 696821 skype/gtalk/twitter: arebacollins
*Solar *| * Wind *| * Waves * | * Biomass * _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
If you don't know how to configure it, SELINUX will do you in. iptables is very safe but you've got to give access to ONLY what you need and nothing more. ports-open only what you use., IP addresses-allow access from certain IPs only so that for instance to login to the said box from the Internet, you would have to first telnet/ssh to an allowed IP to gain access. Regards, On Fri, Sep 17, 2010 at 3:50 PM, Simon Mbuthia <simon.mbuthia@gmail.com>wrote:
Hi guys,
I have been running a CentOS firewall for a few months, but it seems to me like the machine is posessed by something. All of a sudden no port is open from outside except ssh which I'd like to be accessible only from within my LAN. The problem is SELINUX. I'm a bit apprehensive about disabling SELINUX [and only use iptables] though I don't know what security risks I'd be exposing myself to by so doing - if any. Thanks to one skunkmaster Jangita, I have learnt about Zentyal, a Ubuntu/Debian-based ... thingie that comes bundled with a number of services [firewall, IDS etc] which can be administered thru a sleek web-based interface.
My question/s is/are: would it be safe for me to use iptables only and disable SELINUX? Is Zentyal formidable enough to use as a security solution for a small business network? And why does SELinux have to be such a pain in the neck???
Me.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
participants (14)
-
[ Brainiac ] -
Anthony Lenya -
Collins Areba
-
David Njuki -
Dennis Kioko -
Erick Njenga -
george -
Job Muriuki -
Nd'wex Common -
Shadrack Mwaniki -
Simon Mbuthia -
Timothy Kyalo -
Watson Kambo -
ZUKU SUPPORT