Bypass command within an ACL

I'm having a hard time determining what exactly the bypass keyword does. For example, I want to NAT 192.168.248.30 going to anything other than 10.0.0.0. How would the results vary in the two ACL's below.
acl 1
clause 5 permit any any destination 10.0.0.0 255.255.255.0
clause 6 permit any 192.168.248.30 destination any sourcegroup ACC-PAT
clause 10 permit any any destination any
apply circuit-(VLAN3)
acl 1
clause 6 bypass any any destination 10.0.0.0 255.255.255.0
clause 7 permit any 192.168.248.30 destination any sourcegroup ACC-PAT
clause 10 permit any any destination any
apply circuit-(VLAN3)
What other things does the bypass command affect?
Another question, Will an acl allow an established connection? On a router there is an option to do permit ip any any established. Does a CSS offer the same?
Thanks,
Clayton Price

the bypass means the traffic is permitted and the CSS will not try to match a content rule.
So, both can work in your scenario.
Gilles.

Similar Messages

Using unix host command within plsql on aix

On an aix platform Im trying to host out of a plsql procedure to
use mail. I can only get the host command to work inside a blank
.sql file. ie. first line must have the host command on it. If
you try to imbed the host command within a procedure, the file
will just sit there and nothing happens.
null

Jay,
This forum is for Headstart related questions and experiences
only. Please go to metalink.oracle.com to get more information on
your problem.
Regards,
Lauri
Jay Levasseur (guest) wrote:
: On an aix platform Im trying to host out of a plsql procedure
to
: use mail. I can only get the host command to work inside a
blank
: .sql file. ie. first line must have the host command on it. If
: you try to imbed the host command within a procedure, the file
: will just sit there and nothing happens.
null

Installing new library commands within Mac OS X Terminal

Hello,
I would like to know how can I install new library commands within the Mac OS X Terminal.
Can anyone provide me some instructions on how to do that task?
John P.

Mac OS is Unix - so it's basically up to you to decide where you want to install command line tools.
You will need to understand that the command line tools will use a 'search path' to look for the executable code for the commands issued in the Terminal or in scripts etc.
In Terminal…
echo $PATH
Will output something like… (this is NOT the default search path).
-> /bin:/sbin:/usr/X11/bin:/usr/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/bin:/ usr/sbin:/sbin:/usr/local/bin:/opt/X11/bin
Which means the OS will look in each of those places for any command I run starting on the left (the colon is a separator). Bear in mind each user has their own search $PATH, this can be configured in the users profile (the ~/.bash_profile, ~/.bashrc and many other config files for other environments).
You can see where tools are installed via the 'which' command…
which echo ping
-> /bin/echo
-> /sbin/ping
Those locations are considered 'system' folders. In practice you will probably install into /usr/local/bin for any tools that you compile yourself. Compiled tools have arguments that can allow you to specify where it should be installed when you make the code.
Needless to say this is a complex thing to discuss, if you can be specific about what you hope to install that may help, otherwise we are left to point out vague generalities that may send you down the wrong path. What are you actually aiming to install & does it require compilation etc?
In general I'd avoid adding items to /bin, /sbin, /usr/bin, /usr/sbin , these are considered Apple's locations - software update will overwrite them. Stick with /usr/local as the location for third party tools.
Or you can create your own folder for commands/ scripts in your home folder & then add the path to the $PATH variable.
(Please excuse the lack of formatting - this forum is refusing access to the 'advanced editor' to make the code look cleaner).

Invoking shell command within XSLT?

Is it possible to invoke shell commands within XSLT? Something like
<code syntax="python">print(1+2)</code>
and generate
<code>3</code>
or something like that? A newbee here ;-)
Last edited by xanb (2014-07-11 12:27:20)

I don't think xslt itself can call external interpreters. Xslt can do the calculations and even conditionals, but if you want to use python, or other interpreters, you'd need some sort of "preprocessor" step.
Depending on your actual goals, you may be interested in the various "literate programming" tools. I don't know of one of the top of my head for having scripting languages embedded in an xml document, but it wouldn't surprise me if there were some. Most of the ones I know are for embedding various code (C, R) in (La)Tex documents. I use Sweave daily which is a latex document with R code that the R interpreter processes first to replace with the results, then the latex tools make the final document.
EDIT: This may be of interest.
Last edited by Trilby (2014-07-11 12:35:00)

Can't we manually type commands within run block ?

11.2.0.3/linux
I was doing an RMAN restore to a new server.
Below is the code I wanted to execute to restore
run
SET NEWNAME FOR DATABASE TO '/fnup/hwrc/oradata/spikey';
restore database ;
}Since it is just 2 lines within a run block , so I thought of typing it manually. After typing the first line (SET NEW NAME..) ending with semi colon, i pressed ENTER key to get the next line and type the RESTORE command . But I was getting the following error.
RMAN> run
2> {
3> set new name for database to '/fnup/hwrc/oradata/spikey'; ###### After typing the semicolon I pressed ENTER here
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-00558: error encountered while parsing input commands
RMAN-01009: syntax error: found "new": expecting one of: "archivelog, autobackup, auxiliary, auxname, backup, command, compression, controlfile, database, dbid, decryption, echo, encryption, high, incarnation, maxcorrupt, maxseq, newname, nocfau, restore, snapshot, to restore point, until restore point, until"
RMAN-01007: at line 3 column 5 file: standard input
------| Second Attempt |----------------------------------------------
RMAN> run
2> {
3> set new name for database to '/fnup/hwrc/oradata/spikey'; ###### After typing the semicolon I pressed ENTER here
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-00558: error encountered while parsing input commands
RMAN-01009: syntax error: found "new": expecting one of: "archivelog, autobackup, auxiliary, auxname, backup, command, compression, controlfile, database, dbid, decryption, echo, encryption, high, incarnation, maxcorrupt, maxseq, newname, nocfau, restore, snapshot, to restore point, until restore point, until"
RMAN-01007: at line 3 column 5 file: standard inputEventually I had to put the above 2 lines in a script and executed it using cmdfile parameter. Can we execute RMAN commands within a run block only through a script ?

A short note...
run
ALLOCATE CHANNEL ckpt_db1 DEVICE TYPE disk;
ALLOCATE CHANNEL ckpt_db2 DEVICE TYPE disk;
ALLOCATE CHANNEL ckpt_db3 DEVICE TYPE disk;
ALLOCATE CHANNEL ckpt_db4 DEVICE TYPE disk;
ALLOCATE CHANNEL ckpt_db5 DEVICE TYPE disk;
ALLOCATE CHANNEL ckpt_db6 DEVICE TYPE disk;
ALLOCATE CHANNEL ckpt_db7 DEVICE TYPE disk;
ALLOCATE CHANNEL ckpt_db8 DEVICE TYPE disk;
SET NEWNAME FOR DATAFILE 1 TO '/u02/oradata/ckpt_db/system01.dbf';
SET NEWNAME FOR DATAFILE 2 TO '/u02/oradata/ckpt_db/sysaux01.dbf';
SET NEWNAME FOR DATAFILE 3 TO '/u02/oradata/ckpt_db/undotbs01.dbf';
SET NEWNAME FOR DATAFILE 4 TO '/u02/oradata/ckpt_db/users01.dbf';
SET NEWNAME FOR DATAFILE 5 TO '/u02/oradata/ckpt_db/psdefault.dbf';
SET NEWNAME FOR DATAFILE 6 TO '/u02/oradata/ckpt_db/amapp.dbf';
SET NEWNAME FOR DATAFILE 7 TO '/u02/oradata/ckpt_db/AMARCH.dbf';
restore database;
switch datafile all;
RELEASE CHANNEL ckpt_db1;
RELEASE CHANNEL ckpt_db2;
RELEASE CHANNEL ckpt_db3;
RELEASE CHANNEL ckpt_db4;
RELEASE CHANNEL ckpt_db5;
RELEASE CHANNEL ckpt_db6;
RELEASE CHANNEL ckpt_db7;
RELEASE CHANNEL ckpt_db8;
}

Executing commands within .bat file sequentially within the same cmd window

We have a .bat file that contains several commands. Each command invokes an .exe with arguments.
When I invoke the .bat file programatically using the command "cmd.exe /c myfile.bat", the commands are running parallelly.
Within the .bat file, I also tried using start "" /wait /b "myprocess.exe" instead of just
"myprocess.exe", but both gives the same result.
Any solution to this?
Note:
We use Windows 7 environment.

I am invoking the batch programatically in c#.
As per your suggestion, I modified the code as below to execute bat file directly instead of using cmd.exe.
Process proc = new
Process();
proc.StartInfo.FileName
= "c:\\myfile.bat";
proc.Start();
But still I could see the parallel execution of commands within the bat file.
I was not able to use Call command as I have to invoke programatically.
Is there a way to invoke Call command from c#?

Invoke-Command and $using:ACL problem

Hi,
Can anyone point me in the right direction.
I want to modify and ACL on a remote server, but i cannot assign a variable inside the invoke-command where i'm also refferencing an local variable.
When the first invoke-command is ran i get an error:
A Using variable cannot be retrieved. A Using variable can be used only with Invoke-Command, Start-Job, or InlineScript
in the script workflow. When it is used with Invoke-Command, the Using variable is valid only
if the script block is invoked on a remote computer.
$DriveFunctionDirectoryStructure="z:\projects\1"
Invoke-Command
-Session$s-ScriptBlock{$acl=get-acl$using:DriveFunctionDirectoryStructure}
Invoke-Command
-Session$s-ScriptBlock{$acl.SetAccessRuleProtection($using:True,$using:ToggleAccessRuleFlag)}
Invoke-Command
-Session$s-ScriptBlock{Start-Sleep-Seconds5}
Invoke-Command
-Session$s-ScriptBlock{$rule=New-ObjectSystem.Security.AccessControl.FileSystemAccessRule("localdomain\$using:groupName","$using:AccessOption","ContainerInherit,
ObjectInherit","None","Allow")}
Invoke-Command
-Session$s-ScriptBlock{$acl.AddAccessRule($rule)}
Invoke-Command
-Session$s-ScriptBlock{Set-Acl$using:DriveFunctionDirectoryStructure$acl}

Hi RFalken,
you can use the -ArgumentList parameter of Invoke-Command like this:
$script = {
Param (
$Parameter1,
$Parameter2
Invoke-Command -ScriptBlock $script -ArgumentList @(2,42)
Cheers,
Fred
There's no place like 127.0.0.1

Commands within the batch file?

Is there any way to enter commands directly into the batch file which will take effect on the java application?
For example within the java application, there is a method "reload()" and to call that method you can type "reboot" and press enter in the batch file, is that possible? Thanks.

I run my java application with a file (run.bat) (windows xp).
@echo off
title Stanyer's 503 (server)
cd bin
java -Xmx1024m net.stanyer.server 43594
pauseSo basically, it runs in a cmd box.

Using OS Commands within PL/SQL

How can I use Operating system commands from within PL/SQL procedures or functions? Kindly explain with an example.
Thanx,
SB

Previously we have used external procedures to use Windows kernel32.dll to start an external program. However this does not work on Oracle9i.
Instead I have modified an example in Java to acceive this. The following class can start an external program either synchronously or asynchronously and in synchronous mode it will return the programs output.
import java.io.*;
import java.util.*;
public class util
// Executes an operating system command. The command shall be fully qualified.
// The Java connects with silent login. No environment set-up files are run
// and no path is set. The mode can be "sync" or "async" for respectively
// synchronous and asynchronous execution
static public int OSCmd(String cmd, String mode, String[] output)
throws IOException, InterruptedException
System.out.println("OSCmd "+cmd+" ("+mode+")");
output[0]="";
// start command
Process proc = Runtime.getRuntime().exec(cmd);
if (mode.equals("sync"))
// get command's stdout and stderr
InputStream stdout = proc.getInputStream();
InputStream stderr = proc.getErrorStream();
String str;
// Stdout
BufferedReader br = new BufferedReader(new InputStreamReader(stdout));
while ((str = br.readLine()) != null)
output[0]+=str+"\n";
br.close();
// Stderr
br = new BufferedReader(new InputStreamReader(stderr));
while ((str = br.readLine()) != null)
output[0]+=str+"\n";
br.close();
// wait for command to terminate
proc.waitFor();
return proc.exitValue();
return 0;
You need the following permissions:
call dbms_java.grant_permission('COMMON', 'SYS:java.io.FilePermission', '<<ALL FILES>>', 'execute');
call dbms_java.grant_permission('COMMON', 'SYS:java.lang.RuntimePermission', 'writeFileDescriptor', '');
call dbms_java.grant_permission('COMMON', 'SYS:java.lang.RuntimePermission', 'readFileDescriptor', '');
And then create the Java stored procedure:
create or replace function os_cmd2(p_cmd varchar2, p_mode varchar2, p_output in out varchar2) return number
as language java
name 'util.OSCmd(java.lang.String, java.lang.String, java.lang.String[]) return int';

Passing parameters to shell command within a MAXL script

Hi all,
we are trying to run the following from MAXL console
MAXL> msh script.msh 100 c:\t.txt
where script.msh has the line:
shell 'echo $1 >> $2'
we are looking to add a line with text "100" to the file C:\t.txt but it's actually creating a file called $2 with the text "$1" within it.
How can we workaround it?
Thanks

If I understood well you command line, we would have .log and .err files but .err would be also redirected to .log apart from .err, right?^^^Exactly. That way you can look at either stream, or both. If you think about it, you could test for the existence of any .err file (or come up with your own unique extension for that directory) and flag that after the fact with an email, and attach the specific error and the overall stream. Mind you, given the size of your files, you might want to zip them down first.
It's the best (or, depending on your outlook, the worst) of all worlds.
Scripting is one of those things that isn't very sexy, and when it's done well it just fades into the background and doesn't get the credit it deserves. But when it blows up or is kludgy beyond compare it makes everyone's life miserable.
Regards,
Cameron Lackpour

DOS commands within ABAP

Please tell me how to execute DOS commands from within ABAP.

1.create your shell script your_shell_script.sh:
src=$1
dst=$2
mv -f $src $dst
2. Create your command Z_YOUR_COMMAND using SM69:
- Operating system command: /bin/sh (the path to your shell interpretator)
- Parameters for operating system command:
/home/sap/bin/your_shell_script.sh (the path to your shell script)
- Set "Additional parameters allowed" checkbox
3. Call your command from ABAP:
data:
param type sxpgcolist-parameters.
status type extcmdexex-status,
exitcode type extcmdexex-exitcode,
it_log type table of btcxpm.
p_src = '/common/home/edw/parsekb/b2/*'.
p_dst = '/common/home/edw/parsekb/b1'.
concatenate p_src p_dst into param separated by space.
CALL FUNCTION 'SXPG_CALL_SYSTEM'
EXPORTING
COMMANDNAME = 'Z_YOUR_COMMAND'
ADDITIONAL_PARAMETERS = param
IMPORTING
STATUS = status
EXITCODE = exitcode
TABLES
EXEC_PROTOCOL = it_log
EXCEPTIONS
NO_PERMISSION = 1
COMMAND_NOT_FOUND = 2
PARAMETERS_TOO_LONG = 3
SECURITY_RISK = 4
WRONG_CHECK_CALL_INTERFACE = 5
PROGRAM_START_ERROR = 6
PROGRAM_TERMINATION_ERROR = 7
X_ERROR = 8
PARAMETER_EXPECTED = 9
TOO_MANY_PARAMETERS = 10
ILLEGAL_COMMAND = 11
OTHERS = 99.
if sy-subrc <> 0.
*TODO: add your error handling logic
endif.

Using launchctl command within a shell script

I have successfully installed two daemons, and I would like to be able to disable and enable them via shell scripts, called by the daemons themselves. Here is my first shell script:
#!/bin/sh
# Testing for presence of a CODEBOY file
if [ -e "/Volumes/CODEBOY/Change.txt" ]
then
osascript '/Users/praxisii/Library/Scripts/MacScript.scpt'
launchctl unload -w '/Users/praxisii/Library/LaunchDaemons/WaitDaemon.plist'
launchctl load -w '/Users/praxisii/Library/LaunchDaemons/RunDaemon.plist'
fi
The daemon works just fine, running the background, calling this script, which is waiting for me to plug in my flash drive (entitled CODEBOY). When the flash is plugged in, the applescript is called, and the first launchctl command is executed, which disables the WaitDaemon. As advertised, the .plist file is re-written with the Disabled key set to true. The next line (which is supposed to enable the RunDaemon) is never executed.
Similarly, if the launchctl line is placed before the osascript line, the applescript is never called. It is as if the shell ignores everything after a single launchctl command, which it will execute.
Any ideas or comments?

Gary:
Thank you for the link to the TN2083. Long, but very informative.
I appreciate all the other comments on this thread. I am an amateur AppleScript/UNIX scripter, and any opportunity to learn more is much appreciated.
I have completely re-worked my original launchd agent system for automatic processing of a file on a flash drive. Here is the .plist file that I now use:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>RunOSAscript</string>
<key>LowPriorityIO</key>
<true/>
<key>Program</key>
<string>/usr/bin/osascript</string>
<key>ProgramArguments</key>
<array>
<string>osascript</string>
<string>/Users/casdvm/Desktop/AutoFlash.scpt</string>
</array>
<key>RunAtLoad</key>
<false/>
<key>ServiceDescription</key>
<string>Runs Applescript directly</string>
<key>StandardOutPath</key>
<string>/Users/casdvm/Desktop/AutoFlashLog.txt</string>
<key>StartInterval</key>
<integer>25</integer>
</dict>
</plist>
The AutoFlash.scpt is an Applescript that simply uses the Finder to check for the presence of a specific file on the flash drive. If it is there, and a certain script property has a value of 2, then it runs the AppleScript that processes the desired file on the flash drive. Once that is done, the script property is set to 0 (to prevent the processing from happening over and over again.). Once the flash drive is removed, the script property is set back to 2 in anticipation of the next time the flash drive is plugged in.
It is much simpler than the two agents I was messing with beforehand. I did indeed discover that this .plist needs to be saved in the LaunchAgents folder of my user Library (thanks again for pointing that out, Gary).
The only problem that I have involves the continuous calling of the Applescript from the launchd agent. As you can see from my .plist file, that AppleScript is called every 25 seconds. I tried setting it up using the OnDemand key, but I kept receiving a re-spooling error of some sort (I don't recall exactly; my notes are sketchy on that phase of testing), so I just decided to have it go every 25 seconds. It really doesn't matter, since I can leave the flash drive plugged in all day anyway, and it only processes the desired file once.
Thanks again for all the commentary and discussion; I am grateful for the assistance.
Craig Smith

Executing operating system command within trigger or procedure

Hello
Can some one help me out as how to execute operating system command (unix or windows ex.. stop,start,cc,del or copy etc...) in a trigger or procedure.
My requirement is, if some predefined error occure then listener listener should be stopped automatically.
Thanks in advance
kvss

Here is some code to tell you how to do:
First a small Java program that taker a string as a parameter and executes it as an os-command
import java.lang.Runtime;
import java.lang.Process;
public class Commands extends Object {
* Constructor
public Commands() {
// On NT the command should be like this "cmd /c del c:\temp\readme.txt"
// exec execute('cmd /c del c:\temp\readme.txt');
public static void execute (String cmd ) {
try {
Process p = Runtime.getRuntime().exec(cmd);
try {
p.waitFor();
catch (java.lang.InterruptedException intex ) {
intex.printStackTrace();
System.out.println("Return = "+ p.exitValue());
System.out.println(" Done ...");
catch ( java.io.IOException iox) {
iox.printStackTrace();
===================end of java ====
Use loadjava to load it into the database and create a pl/sql wrapper around the java code.
See the manual about loadjava details.
Log in to sqlplus as SYSTEM and create a role for this purpose e.g. 'JAVA_ROLE'
and exec the following as SYSTEM or SYS to make sure the user has the the needed privs.
dbms_java.grant_permission('JAVA_ROLE','SYS:java.io.FilePermission','<<ALL FILES>>','read,write,execute,delete');
dbms_java.grant_permission('JAVA_ROLE','SYS:java.lang.RuntimePermission','writeFileDescriptor',null);
dbms_java.grant_permission('JAVA_ROLE','SYS:java.lang.RuntimePermission','readFileDescriptor',null);
and you're done.

Executing a shell command within vi using aliases

The behavior of the ksh ENV environment variable has been changed in Solaris 10 and I assume it is related to the reason why I can no longer use aliases when using the "bang" (!) command execution in vi. For a very simple example, if ll were an alias for ls -lFbo entering this in vi:
:!llwould produce the expected "ls -l" listing of the current directory in previous Solaris versions. Why does this not work in Solaris 10 and is there an alternate way to accomplish the same thing?

I don't know exactly but the code written below is working fine try the same with your code .Even with your code instead running the code with
" ./<filename> ",if you execute it with "sh <filename>" command without changing the mode of the file it is executing properly.
import java.io.*;
import java.util.*;
public class ScriptBuilder
public ScriptBuilder()
public void writeScript() throws java.io.IOException
FileWriter writer = new FileWriter(new File("test_script"));
writer.write("#! /bin/sh\n");
writer.write("ll>/home/faiyaz/javaprac/checkll");
writer.flush();
writer.close();
Runtime rt= Runtime.getRuntime();
rt.exec("chmod 777 test_script");
rt.exec("./test_script");
} public static void main (String[] args)throws java.io.IOException
ScriptBuilder sb = new ScriptBuilder();
sb.writeScript();
}

How to send two commands within one URL call

Hey gurus,
I was wondering if it is possible to concatenate two commands in one url call:
SAPBWOpenURL(SAP_BW_URL_Get() &DATA_PROVIDER=DATAPROVIDER_1
&CMD=EXCHANGE
&IOBJNM_2=GROUP1
&IOBJNM_1=GROUP2
&FILTER_SIGN_1=E
&FILTER_VALUE_1=
&CMD=REMOVE_FILTER
&IOBJNM=GROUPX);
The URL should exchange 2 infoobjects and remove the filter of one specified.
Can anyone help me out?
Thanks,
Andreas

Thank you Chandran - you saved my day
Will dedicate this day to you
Cheers,
Andreas

Bypass command within an ACL

Similar Messages

Maybe you are looking for