search for: fireall

I have added a 4th NIC to my setup, and want to set up wireless. I have started at the configuration Tom has for the last week, and my eyes are crossing. eth0 "net" goes to my internet connected firewall with a 192.168 address eth1 "loc" goes to my switch connected to local switch also 192.168.x eth2 "work" goes to my office with a 172. address eth3 Trying to

Thanks for such a quick reply Tom! Any suggestions then as to what I might do other than putting a second nic in the SBS and opening it up for web access? I don''t like the idea, but since MS SBS includes fireall that is actually what MS suggests. Boyd -----Original Message----- From: Tom Eastep [mailto:teastep@shorewall.net] Sent: January 3, 2005 3:05 PM To: Shorewall Users Cc: Boyd Kelly (Coast Systems) Subject: Re: [Shorewall-users] Outlook Web Access behind shorewall firewalldoesn''t work O...

...have a commercial VPN box, which also acts as our firewall. I wish to replace this firewall functionality with a decicated Shorewall firewall, and use the VPN box only for VPN traffic. At the moment, this VPN/Firewall box is at an internet visible address, x.x.x.85 I wish to make the new Shorewall fireall x.x.x.85 and move the VPN to x.x.x.83 For mail relay purposes, our LAN firewall whether a VPN box, or a shorewall box, cannot be anything other than x.x.x.85. It does simple SNAT. Now: eth1 eth0 x.x.x.85 y.y.y.3 **** |----| --------------...

I'm probably doing something I'm not supposed to even try, but I'm trying for "proof of concept" before physically setting up a distant network because of logistical issues. Anyway, I have tincd running as a service on two windows machines on the same lan. I'm trying to establish a connection between those two computers on the vpn ip's (10.20.30.1 and 10.20.40.1).

Attached is file "QSG-issues-1.0.txt" containing a numbered and commented list of issues collected from contributors and recent lists activity. It might be cool to have these issues in some spiffy issue tracking system like RT or something, but for a low tech start it''ll probably suffice. COMMENTS - IMHO (no particular order): I have searched the archives for additional

Hey all, A while ago today I posted about not being able to get my two interface setup working with a router (di 652 wireless/wired). I recieved help from Tom and got everything in the router turned off and set it up as a switch rather then a rouiter, this still never corrected my problems. Use tcpdump I see there is alot of traffic, but as soon as I dhcpcd eth1 (local) I loose all outside access

Hi, I have a setup problem with Shorewall 4.0.6, which I can''t figure out why it is not working: I want to install a fireall with 2 extra interfaces : - My serv ("dmz") zone is a /28 subnet behind eth1, with a small number of SUN servers (IPs between ABC.DEF.75.1 and .13), one of which is a DHCP server for the 75 subnet. - The loc zone are PCs in the 75 subnet behind eth2 with IPs between ABC.DEF.75.17 and...

...(Coast Systems) wrote: > > Thanks for such a quick reply Tom! > > > > Any suggestions then as to what I might do other than > putting a second > > nic in the SBS and opening it up for web access? I don''t > like the idea, > > but since MS SBS includes fireall that is actually what MS > suggests. > > I have no suggestions -- possibly someone else on the list is familiar > with this issue. We''re running this setup, with Exchange 2003 behind a Shorewall firewall--the new OWA interface is indeed an improvement over the old one. We r...

...y (Coast Systems) wrote: > > Thanks for such a quick reply Tom! > > > > Any suggestions then as to what I might do other than > putting a second > > nic in the SBS and opening it up for web access? I don''t > like the idea, > > but since MS SBS includes fireall that is actually what MS > suggests. > > I have no suggestions -- possibly someone else on the list is familiar > with this issue. We''re running this setup, with Exchange 2003 behind a Shorewall firewall--the new OWA interface is indeed an improvement over the old one. We r...

are you attempting to do this locally, with your machine behind a firewall? I had something similar happen, I had a High and Lo stream, and specifying /HI or /Lo or (nothing) externally worked fine -- internally, no dice. -----Original Message----- From: owner-icecast@xiph.org [mailto:owner-icecast@xiph.org]On Behalf Of azo Sent: Monday, October 15, 2001 8:38 AM To: icecast@xiph.org Subject: Re:

Are there any scenarios that require traffic from a zone to itself to be blocked? If not, Shorewall should possibly allow it as a matter of course. It seems strange having to explicitly create such a policy & it''s not immediately obvious when it is required. -- Taso Hatzi caesar 17 <<-salad cjbx jc vdwwjar jc xi jc jd salad

Hello All, I am looking for a sip phone that is capable of automatic nat. The Cisco ata186 for example works fine for natting with iconnecthere, but as for asterisk, both my 7960 and polycom ip600 require you to set the nat ip on the tftp. Does anyone know a good phone (or ata) that can do this automatically? For example, I want to give a phone to my brother, who is going to europe. His ICH

Hi, I have a problem connecting my Windows98 to the Samba server. The Linux computer comes up in the "Network Neighborhood" control panel, but when I double click on the icon, W98 asks for a password for the "\\machine name\IPC$" resource. But my password will not me accepted. I have logged in as user "root" with a given password on both computers. When I set

Hi all, I''m attempting to use the puppetlabs-firewall module. In testing, rules are enabled in a random order, so it seems necessary to utilize puppet stages to guarantee proper ordering. I created a module to organize my firewalling. It consists of localfw::pre to open the INPUT chain for established and related connections, localfw::default for most normal rules, and localfw::post to