search for: ct_sync

There was a lengthy power failure here in Shoreline this morning and my firewall did not come back up when power was restored. The firewall is now up and service to the server has been restored. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \

Hi all, We are investigating on firewall failover design. I have searched the net and found that projects like LVS have it mostly solved for their side but that netfilter lacks it. Of course, a simple failover of the firewall is available using things like VRRP (KeepAlive software) but without state syncronization, and that is preciselly the part we need to investigate. Is this issue

hi, there is no support for patch-o-matic netfilter modules. what i have to do if i want to use several patch-o-matic modules? which parts of code has to be changed and will that changed be included into the main shorewall tree in future or not? best regards claus

...rts stp but what about rstp? I read some docs about stp, but they are rather outdated (2001 and kernel 2.2) there are several problems indeed: * rstp support * fw state sync * fw rules sync did some of you resolve these problems? any help appreciated, i'm rather confused between rstp, stp, ct_sync, conntrackd ... ps: next step will be trafic shaping / load balancing implementation within this setup, again, any help appreciated!

Hello List: Recently our shorewall FW server went dead (PS failure) & brought the entire system down. Luckily we are testing the FW and other servers, so we did not loose anything. Now we have decided to setup two Shorewall FW servers with a primary & another fallover FW server. I have done some research cruised the Internet and found that a product ''UCARP''

I''d like to setup a box with 2 NICs as a firewall which will also rate limits outbound traffic. What happens when/if that box hangs or is rebooted? I''d like a solution that when there is a failure, traffic can still go through the box even though the firewall and rate limiting functions will no longer be in effect. I believe that this is "failing closed" but have