search for: blacklisting_support

Hello, I want to block a particular IP on the local network. Howto do that ? Thanks Varun

Hello, I''m a very happy user of shorewall but I have found a problem or maybe a misconfiguration I made which I can not resolve. I use a fairly large blacklist based on probes, nimda & codered attacks, proxy & relay probes etc. The only problem is that I want to block incoming trafic on all ports FROM a block but it does also block a httpd, ping etc TO a ip in a block what I do

...got me hooked on staying with Shorewall, was the extensive and useful documentation. Great Job! I see also that over use of blacklisting is time consuming for restarts, refresh and it also means the kernel spends more time checking incoming packets. The following is from: http://shorewall.net/1.4/blacklisting_support.htm "Important Neither form of Shorewall blacklisting is appropriate for blacklisting 1,000s of different addresses.The blacklists will take forever to load and will have a very negative effect on firewall performance." What if you were to use either a database like BerkeleyDB or mayb...

Hey gang, I was wondering if all that documentation could or has been put into PDF format. I usually like to download documentation and read it while I''m sitting comfortably at home and I don''t want to tie up the phone line all night. Thanks, Nino p.s. If so, please feel free to attach the PDF formatted document to my e-mail ;-)

Hello I am looking for a way to have snort to dynamically update my shorewall config. I have seen software out there but I would like to see if anyone had tried this first. Aslo I would like to know if there is a way clear the Netfilter tables when I do a shorewall restart. The reason being is that when I make a change to my firewall setting I want all connections to have to re-establish

...progress_message "Building $HTMLDIR ..." rm -rf $HTMLDIR do_or_die mkdir $HTMLDIR do_or_die mkdir $HTMLDIR/images # # The original HTML documents were created using MS FrontPage and used # the .htm suffix. The remainder use the .html suffix. # HTMFILES=" 6to4.htm blacklisting_support.htm configuration_file_basics.htm CorpNetwork.htm dhcp.htm Documentation.htm errata.htm fallback.htm FAQ.htm GnuCopyright.htm Install.htm IPIP.htm IPSEC.htm kernel.htm myfiles.htm NAT.htm ports.htm PPTP.htm ProxyAR...

Ihave the following line in the rules list: .