search for: bogon

As far as I can tell from <http://shorewall.net/errata.htm> the current shorewall bogons file is <http://shorewall.net/pub/shorewall/errata/2.0.8/bogons> which contains the line: 58.0.0.0/7 logdrop # Reserved This is incorrect. These two /8s were allocated to APNIC as of April 2004. See also <http://marc.theaimsgroup.com/?l=nanog&m=108319003517919&w=2> and th...

hi: Just a litle update: 41/8 allocated to AfriNIC (APR 2005). 73/8 allocated to ARIN (MAR 2005). hope it helps.

Hi, according to: http://www.iana.org/assignments/ipv4-address-space the bogons table is outdated... tha attached patch fixes that... (done against 2.0.1) -- Regards Thomas PS. please CC me as I''m not subscribed to the list -------------- next part -------------- --- usr/share/shorewall/bogons.old 2004-04-19 18:28:00.000000000 +0300 +++ usr/share/shorewall/bogons...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 An updated bogons file is available at: http://shorewall.net/pub/shorewall/errata/2.0.8/bogons ftp://shorewall.net/pub/shorewall/errata/2.0.8/bogons Thanks to Lorenzo Martignoni for bringing the resent IANA allocations to my attention. - -Tom - -- Tom Eastep \ Nothing is foolproof to a sufficiently talented...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The initial file that I uploaded was incorrect. If you downloaded a file that still contains 72.0.0.0/8 then please download again. Sorry for the confusion. An updated bogons file is available at: http://shorewall.net/pub/shorewall/errata/2.0.8/bogons ftp://shorewall.net/pub/shorewall/errata/2.0.8/bogons Thanks to Lorenzo Martignoni for bringing the resent IANA allocations to my attention. - -Tom - -- Tom Eastep \ Nothing is foolproof to a sufficiently talented...

Updated rfc1918 and bogons files are now available: rfc1918 for Shorewall 2.0.0 and earlier: http://shorewall.net/pub/shorewall/errata/1.4.10/rfc1918 bogons for Shorwall 2.0.1: http://shorewall.net/pub/shorewall/errata/2.0.1/bogons Thanks go to Thomas Backlund for pointing out that the file was out of date. -Tom -- T...

...ecent allocations by the IANA, the following files are available: For Shorewall 2.0.0b and earlier: http://shorewall.net/pub/shorewall/errata/1.4.10/rfc1918 ftp://shorewall.net/pub/shorewall/errata/1.4.10/rfc1918 For Shorewall 2.0.1 and later: http://shorewall.net/pub/shorewall/errata/2.0.10/bogons ftp://shorewall.net/pub/shorewall/errata/2.0.10/bogons - -Tom - -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key -----BEGIN PGP SIGN...

...9;s my shorewall configuration: Hosts #ZONE HOST(S) OPTIONS loc br0:eth1 road br0:tap+ #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS LINE -- DO NOT REMOVE Interfaces #ZONE INTERFACE BROADCAST OPTIONS GATEWAY net eth0 10.0.0.255 nobogons,routefilter,logmartians,tcpflags,arp_filter,nosmurfs #loc eth1 detect - br0 detect # #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE Masq eth0 192.168.3.0/24 Policy #SOURCE DEST POLICY LOG LIMIT:BURST # LEVE...

...ip contexts is less then what I thought it was. Could someone point me in the right direction? (* on a public address, CVS-HEAD-07/12/04, C7960 phones) In my sip.conf I have: [general] port = 5060 bindaddr = 0.0.0.0 allow=ulaw tos=0x18 ;sets ip tos bits (=lowdelay and throughput) context = bogon-calls ; Send SIP callers that we don't know about here context=from-broadvoice register=3035391111:secret@sip.broadvoice.com/5391111 <snip> [broadvoice] ;this is referenced for outgoing calls to Broadvoice.com type=peer...

Hi folks, Has anyone tested the changes to multiple ISPs/load balancing or routestopped in 2.4.0-RC1 yet? We need to talk about what criteria we will use for determining whether 2.4.0 is ready for release. I''ve started configuring a firewall at work with the multiple ISPs support, but its kernel doesn''t have connection marking support, so it''s going to be a couple of

...s that have been recently assigned by ARIN: 58.0.0.0/24 59.0.0.0/24 69.0.0.0/24 through 72.0.0.0/24 82.0.0.0/24 through 88.0.0.0/24 We have recently changed ISPs and ended up with an address block in the 72.x space, which is giving us significant problems in reaching other sites due to outdated BOGON filters, etc. Please contact me off list if you have any experience in this matter, as I suspect this is not really on topic discussion for the list. Thanks. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shawn Wright, I.T. Manager Shawnigan Lake School http://www.sls.bc.ca swright@sls.bc.ca

...OS 7? > > > `dracut` calls `mkinitrd` which rebuilds the initrd file. . . you could do > it manually but that is prone to errors ( > https://access.redhat.com/solutions/24029). This solution does not work in CentOS 7, because initramfs in CentOS 7 is not a gzipped cpio: [root at bogon a]# file /boot/initramfs-3.10.0-693.el7.x86_64.img /boot/initramfs-3.10.0-693.el7.x86_64.img: ASCII cpio archive (SVR4 with no CRC) If I use zcat /boot/initrd-2.6.18-164.6.1.el5.img | cpio -idmv to uncompress initramfs, it will report errors: [root at bogon a]# zcat /boot/initramfs-3.10.0...

Hi, I''ve a little problem, I hope so.. First a hint, I haven''t a static IP - Adress and so I used a dyndns Provider. In DMZ runs a sftp server. It should accessible from net. My router is forwarding the traffic from port 22 to the machine in DMZ. Now, in basic installation I have rfc1918-dropping configured by net interface. My problem: If rfc1918 dropping is on I

...* 80.53.44.254 0.0.0.0/0 0 0 LOG all -- * * 83.17.56.60 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:blacklst:DROP:'' 0 0 DROP all -- * * 83.17.56.60 0.0.0.0/0 Chain bogons (32 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 7 prefix `Shorewall:bogons:DROP:'' 0 0 DROP all -- * *...

...sterisk CVS-HEAD-01/17/05-00:35:58 built by root@splurge on a i686 running Linux ==>SIP.CONF [general] port = 5060 ; Port to bind to (SIP is 5060) bindaddr = 0.0.0.0 ; Address to bind to (all addresses on machine) disallow=all ; Allow all codecs allow=ulaw context = bogon-calls ; Send SIP callers that we don't know about here [2000] type=friend ; This device takes and makes calls username=2000 ; Username on device secret=1234 ; Password for device host=dynamic ; This host is not on the same IP addr every time context=fr...

Is my RFC1918 file obsolete? I have been assigned an ip in the 83.0.0.0/8 range, and of cource a lot of Shorewall systems drop me with a RFC1918 error. So, is my ISP actually giving me a RFC1918 IP, or am I missing something? .

...ll the voicemail or any other phone number ..as 600 for exemple from the ata or the jphone. I don't know why but i looked after a long time.. here a copy of my extension.conf , sip.conf and voicemail.conf. Thanks for your help. Julien. Extension.conf [general] static=yes writeprotect=yes [bogon-calls] exten => _.,1,Congestion [from-sip] exten => 1943,1,Dial(SIP/1943,5) exten => 1943,2,Voicemail(u1943) exten => 1943,102,Voicemail(b1943) exten => 1943,103,Hangup exten => 1945,1,Dial(SIP/1945,6) exten => 1945,2,Voicemail(u1945) exten => 1945,102,Voicemail(b1945) exte...

...y 1 Reliably Transmitting (no NAT): SIP/2.0 200 OK Below is the configuration of asterisk SIP.CONF [general] port = 5060 ; Port to bind to (SIP is 5060) bindaddr = 0.0.0.0 ; Address to bind to (all addresses on machine) allow=all ; Allow all codecs context = bogon-calls ; Send SIP callers that we don't know about here [2000] type=soft1 ; This device takes and makes calls username=2000 ; Username on device secret=friend ; Password for device host=dynamic ; This host is not on the same IP addr every time context=from-sip...

...7:36:29 DEBUG[245775]: pbx.c:1255 pbx_extension_helper: Launching 'Congestion' 2004-08-09 17:36:29 DEBUG[245775]: channel.c:652 ast_softhangup_nolock: Soft-Hanging up channel 'SIP/65.67.76.30-0814e4f0' 2004-08-09 17:36:29 DEBUG[245775]: pbx.c:1827 ast_pbx_run: Spawn extension (bogon-calls,5462000,1) exited non-zero on 'SIP/65.67.76.30-0814e4f0' 2004-08-09 17:36:29 DEBUG[245775]: pbx.c:1255 pbx_extension_helper: Launching 'Congestion' 2004-08-09 17:36:29 DEBUG[245775]: pbx.c:1947 ast_pbx_run: Spawn extension (bogon-calls,h,1) exited non-zero on 'SIP/...

...port = 5060 ; Port to bind to (SIP is 5060) bindaddr = 0.0.0.0 ; Address to bind to (all addresses on machine) allow=all ; Allow all codecs context = bogon-calls ; Send SIP callers that we don't know about here [3000] type=friend ; This device takes and makes calls username=3000 ; Username o...