search for: dshield

Hi, Is it possible to get Shorewall to reload the static blacklist file without resetting the packet and byte counters? I am following the guide at http://mudy.wordpress.com/2009/02/21/shorewall-blacklist-spamhaus-dshield/ to periodically generate a blacklist, but "shorewall -qq refresh -n blacklst" resets all my accounting. Is there a way to do this without resetting the counters? I am running the Debian package of 4.5.5.3. Thanks, Roger ----------------------------------------------------------------...

Hi, In last one week I have seen two servers of our organization successfully hacked and some other under attack from some other IP addresses. We would block one IP address on our firewall and after a few hours, they would start getting hits from some another IP address. When I checked them on whois.net, they all were from Amsterdam. Surprisingly, I once had similar attack in the past and it was

I know they have software that does this. I'm just not sure which one it is. Basically here's the scoop. I'm on a cable modem connection with Comcast. I have a firewall router and I run a firewall on CentOS as well. All the same, other computers (probably zombies or hackers) are attempting brute force attacks on a couple of ports on my computer. I've just sat and watched them for

Hi, I''m new to the list, but have been through the documentation, archives, etc. looking for more info... I''ve been using shorewall 1.3.14 for a few months now, has been working well from day one. I''m also using it with dshield (submitting logs and using the block list). I''m thinking of adding snort-inline to the mix (I run apache and postfix on the same box, would like to drop/report the bad guys :-). It relies upon the iptables ''QUEUE'' target, so I''ll need to add an iptables rule or...

Johan B, please let it through+ The headers are needed. I live in the Netherlands, where the police contacts for this sort of thing are grey and unknown to me. The Metropolitan Police (London only) in England is 100% on the ball, but they're under resourced and I don't live in their "manor" (London slang for area). I'd like to push it out to as powerful an organization

I have been using shorewall for years with ipsets. I have encountered a problem after upgrading from 4.2.11 to 4.4.10. When I run ''shorewall-check'' or ''shorewall start'', it halts with the error: ---------------------------------------------------------------------- ERROR: ipset names in Shorewall configuration files require Ipset Match in your kernel and

Hi all, I have a client that has 4 subnets within his building, internet, office, business center and wireless. My plan is to use Shorewall but I have never tested it with more than 2 interfaces. Is this possible? Would there be any issues that might arise. Each subnet would have access to the internet but there will be no communications allowed between the others. Thanks in advance....

Windows XP, Samba 3, Fedora 5.... When I make a windows test print it doesn't appear in the printer window that lists documents in the queue. When I print a CUP test print via the printer configuration tool on the linux box, the testpage appears on my XP machine in the printer window. Help. Dave