search for: firestarter

Hi, I'm using Firestarter as my firewall. If I restart the network or my DSL line goes down, I have to manually restart Firestarter. I have sh /etc/firestarter/firestarter.sh stop and then sh /etc/firestarter/firestarter.sh start in my ip-up.local file. I confirmed ip-up.local us being executed by placing an entry in the...

Hi, I am planning to use <firestarter> to manage the incoming and outgoing network connections. Please give me some valuable read abouts and tips about this package. - Will it be a good choice for network management? What are the other options? If i choose to install Firestarter : - Have you installed and used Firestarter in Ce...

...entos notebook's wireless connection. (yes the corp notebook has wireless, but they frown on us using it!) I have started with Shorewall via webmin. I suspect that since my main firewall is Astaro, I will figure out Shorewall. But in an earlier post to this list, there was a reference to Firestarter (http://www.fs-security.com/). Thing is there is no Redhat/Centos 5.0 rpm, only 4.x. Anyone out there know if it will work?

Hello, I see manage of firewall in CentOS (called security), and seems difficult to manage, not enough powerful. I am searching a middle term between scripts of iptables to manage and Security manager of CentOS. I know FireStarter, another similar? -- Devel in Precio http://www.pas-world.com

...and added eth0 as a port. Then I changed /etc/shorewall/interfaces to use lan0 instead of eth0, and added the routeback option. After this, pinging works fine within the network, but I''m not able to access the Internet from the laptop. Internet access from the firewall itself works fine. Firestarter, which I used earlier, is working fine in the same configuration (Internal interface: lan0, external: ppp0). /etc/shorewall/interfaces: #ZONE INTERFACE BROADCAST OPTIONS net ppp0 - tcpflags,norfc1918,routefilter,nosmurfs,logmartians loc lan0...

Well I think this system is back on 3.5. How do I tell? Have not used it in a while... I need a NAT for some quick testing and this box was available. Only a 6gb drive, so I can't install Astaro (which I have licenses for). So is there a simple way to turn on NATing? Should I upgrade to 4.2? This box is behind a firewall, so security risks are not the issue. This time.

...o, I get this message: "iptables v1.3.5: > invalid mask '255' specified Try 'iptables -h' for more information. > A subent mask of 255? In my opinion it should be something like > <address>/24 or 255.255.255.0. > Seems to me that your settings are not correct, firestarter doesn't know > your subnet mask. > > > regards > Olaf > > That message is what I don't understand. My subnet is declared correctly, I even went back and checked. Firestarter says it starts but doesn't seem to enable NAT because nothing behind the firewall can r...

>Date: Sun, 17 Apr 2005 13:28:05 -0400 >From: "ryanag@zoominternet.net" <ryanag@zoominternet.net> >Subject: Re: [Shorewall-users] dumb, dumb question **follow-up on > support-request documentation** >To: Tom Eastep <teastep@shorewall.net> >Cc: Mailing List for Shorewall Users > <shorewall-users@lists.shorewall.net> >Message-ID:

Hi, I'm using the generic system-config-securitylevel-tui program on a remote server to configure my firewall. So far it's been fairly decent, allowing me to open up ports and whatnot. But I want to start blocking a couple of outgoing ports on my machine. I want to lock it down so the only traffic going in our out of my machine is stuff that I specify. Is there a way to do this

I need a decent, easy, firewall on Centos. This is for test systems, so I do not need a lot. For 'a lot', I use and Astaro firewall. I had used Firestarter once, but found out that it cannot handle routing between a public and private network. Basically saying this is impossible. Of course, if your private network is addressed per RFC 1918 (that I co-authored), I can understand the difficulty, but otherwise.... Anyway, I found firehol, but this...

...me a 100 x 20 circuit for $99/mo with 5 statics) I used to run Untangle, but as of version 9, you are forced to use their build in protocol policies versus the firewalling I am used to (Deny All and then opening holes for specific IP's, etc). There are so many firewall distros to choose from. FireStarter, IPCOP, etc. The box I was going to use is a P4, 3GB RAM, 3 GB NICS. I could always use a beefier box also if there was really a need to for such a task. I am used to some Cisco PIX boxes and they just seem fast on hardly any specs. I had a PIX 525 that only had 256mb of RAM about 8 years ago a...

...: deb http://probability.ca/cran/bin/linux/ubuntu gutsy/ deb http://releases.ubuntu.com/ hardy-backports main restricted univer The first seems to pass muster just fine. The second line has been the problem. That's the fourth site I tried plugging in and I get 404ed every time. I do run the Firestarter firewall but that shouldn't be a problem, should it? If it blocked that would it not have blocked all updating? Is the line correctly formed? Is there a site that will work? Is that line strictly necessary, or can I drop it as unneeded with the Gibbon? Any help much appreciated... -- Brian L...

I've read a number of articles, googled the web for a few months and now attempting at turning my CentOS box into a gateway for the third time. Configured my dhcpd.conf and other related files and all seems to be working, I can have my M$ desktop leasing an ip address and all. The problem is when I want to go out to the internet I keep on getting the Request Timed out error. I'm pretty

Who would / Who wouldnt need to run SELinux? I have linux server at home. Would I need to run SELinux? What are the advantages of SELinux? What is the average home user doing?

https://bugzilla.netfilter.org/show_bug.cgi?id=699 Pablo Neira Ayuso <pablo at netfilter.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |pablo at netfilter.org Resolution|

...Should include IPv6 support from the beginning Bug #509201 [netcfg] Debian Installer does not work with IPv6 Ignoring request to alter tags of bug #231003 to the same tags previously set Ignoring request to alter tags of bug #509201 to the same tags previously set > tag 230150 +ipv6 Bug #230150 [firestarter] firestarter: IPv6 not supported. Added tag(s) ipv6. > tag 219140 +ipv6 Bug #219140 [iputils-ping] iputils-ping: please merge ipv6 support Added tag(s) ipv6. > tag 189205 +ipv6 Bug #189205 [apache-ssl] apache-ssl: ipv6 build of Apache-SSL Added tag(s) ipv6. > tag 182480 +ipv6 Bug #182480 {...

...Should include IPv6 support from the beginning Bug #509201 [netcfg] Debian Installer does not work with IPv6 Ignoring request to alter tags of bug #231003 to the same tags previously set Ignoring request to alter tags of bug #509201 to the same tags previously set > tag 230150 +ipv6 Bug #230150 [firestarter] firestarter: IPv6 not supported. Added tag(s) ipv6. > tag 219140 +ipv6 Bug #219140 [iputils-ping] iputils-ping: please merge ipv6 support Added tag(s) ipv6. > tag 189205 +ipv6 Bug #189205 [apache-ssl] apache-ssl: ipv6 build of Apache-SSL Added tag(s) ipv6. > tag 182480 +ipv6 Bug #182480 {...

...face firewall setup and all is good, almost. I am hosting virtual websites and DNS behind shorewall no problem. However I am trying to use SFTP via a different port number and have no luck even though Putty works well. Is there anything weird to sftp and shorewall? My lab uses a different firewall (firestarter) and it works OK. I am using; DNAT net loc:192.168.20.10:22 tcp 522 I would also like to stop 169.254.0.0/16 in masq but can''t find where it is coming from. As per suport instruction I include all the following; [root@shields-svr00 shorewall]# shorewall version 2.0.10 [root@shields-svr...

Dear list members, Masquerading does''not work for me. This is a Mandrake Linux 10 system, but I use another kernel, that included in the original distribution (original: 2.6.3, now used 2.6.8 because of a lot of suck with OpenSwan with kernels prior 2.6.4). The problem seems to be similar or identical mentioned here:

...As we have only a single bridge and loops are not possible, turn spanning tree protocol off # /usr/sbin/brctl stp br0 off # # Bring up the bridge with IP 192.168.1.10 and add the default route # /sbin/ifconfig br0 192.168.1.10 up /sbin/route add default gw 192.168.1.1 #stop firewalls /sbin/service firestarter stop /sbin/service iptables stop Does anyone have qemu working in a bridged network mode and can share... I would appreciate it. When I boot my guest OS I do not get a DHCP address. Jerry