search for: firewall2

I just tried to set up a tinc test installation, but I guess I did something wrong, because I can only ping one direction. Here's my setup (lan1,192.168.99.0)<-->firewall1<-vpn->firewall2<-->(lan2,192.168.100.0) firewall1 has tap0 on 192.168.88.2 firewall2 has tap0 on 192.168.88.3 i set up the following routes : on firewall1 : 192.168.100.0 gw firewall2(192.168.88.3) on firewall2 : 192.168.99.0 gw firewall1(192.168.88.2) firewall2 is the "server" (does not connect...

(Please forgive the cross posting; I know many SuSE users subscribe to both the Samba and SuSE-e discussion groups and will get this message twice.) I had always been frustrated trying to get SuSE's Firewall2 to play nicely with Samba and support seamless network browsing. After much experimentation and a lot of Googling, I was finally able to get this working. By "working", I mean that the Network Browsing desktop icon in SuSE 9.2 functions perfectly. I am documenting it here hoping it...

...n device eth1 and eth0 of Firewall 2, port 21 are redirected on 10.2.4.12 - All incoming request on device eth1 of Router 1 are redirected on 10.2.3.10 On router 1 * ftp 10.2.3.10 is OK On firewall 1 * ftp 10.2.2.10 is OK * ftp 10.2.6.11 is wrong: When I sniff eth0 on Firewall2, I see the response of ftp server with 10.2.3.10 source ip whereas my iprules and iproute are [root@firewall2 root]# ip rule list 0: from all lookup local 32764: from 10.2.2.10 lookup T2 32765: from 10.2.3.10 lookup T1 32766: from all lookup main 32767: from all lookup 2...

I have 2 firewall in HA with keepalived. Can I use active the same tinc configuration on 2 firewalls ? using tun Interface with same ip on all 2 nodes is a problem ? tun device advertise itself on the network having an IP/MAC pairs (ARP) or the IP is only used by the system internally for routing so using the same configuration is right ? so one firewall be active, the other is passive. With this

...rks at IP level. This is a sample configuration. firewall1 lan = 172.16.1.11/19 (ALWAYS ACTIVE) - "Physical Network Interface" - system config as ifcfg-... 172.16.1.10/19 (VIP Keepalived Make active) - Active/Passive configuration with firewall2 firewall1 vpndr1 = 172.16.1.10/8 (ALWAYS ACTIVE) - "Virtual Network Interface" - tinc config as tinc-up started as service firewall2 lan = 172.16.1.12/19 (ALWAYS ACTIVE) - "Physical Network Interface" - system config as ifcfg-......

...illustrate: --------------- Unix username: krish NT username: Account Flags: [U ] User SID: S-1-5-21-3135006320-233574996-2523178827-5648 Primary Group SID: S-1-5-21-3135006320-233574996-2523178827-3005 Full Name: KRIS HOSINO Home Directory: \\firewall2\krish HomeDir Drive: Logon Script: kix32.exe sat.kix Profile Path: \\FIREWALL2\profiles\krish Domain: SATB Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Mon, 18 Jan 2038 19:14:07 GMT Kickoff time: Mon, 18 Jan 2038 19:14:...

...terisk. I've done simple > setup > and BT100 can call Asterisk and place outgoing calls. However I cannot set > him to qualify, cause it is claimed as unreachable. > > I have port redirection at Firewall 1 (to 5060 and rtp 5004 to > grandstream) > and 5060 and rtp ports on Firewall2. But I guess I am missing something. > I've setup Asterisk to work behing nat and it works OK, on same route and > same local network Iax phone is operating also ok in both ways. > > On grandstream I've setup public NAT adress, then keep alive to 10 sec, > (tried also some o...

...figuration. > > > > firewall1 lan = 172.16.1.11/19 (ALWAYS ACTIVE) - > "Physical Network Interface" ? system config as ifcfg-? > > 172.16.1.10/19 (VIP Keepalived Make active) - > Active/Passive configuration with firewall2 > > firewall1 vpndr1 = 172.16.1.10/8 (ALWAYS ACTIVE) - "Virtual > Network Interface" ? tinc config as tinc-up started as service > > > > > > > > firewall2 lan = 172.16.1.12/19 (ALWAYS ACTIVE) - "Physical > Network Interfac...

...nom 300 ) also don't support IAX so it's all SIP. The configuration is a follows Asterisk PBX 10.202.17.217/24 ------>| 10/100-Switch |-----> Firewall1 pfsense X.Y.Z.250 -------->ITSP Sip Porvider public internet LocalPhones 10.202.17.1-25/24 -_---->| 10/100-Switch |-----> Firewall2 Watchguard ----->ISP internet Connection <-----Firewall3 | remote office | ----Remote User Phone 192.168.97.74/24 There is a Lan2Lan VPN tunnel between the Firewall2 and the Remote Office Firewall3 I can Ping the remote office phone from the asterisk PBX at all times. Now I have my Sip.con...

...t;> >> firewall1 lan = 172.16.1.11/19 (ALWAYS ACTIVE) - >> "Physical Network Interface" ? system config as ifcfg-? >> >> 172.16.1.10/19 (VIP Keepalived Make active) - >> Active/Passive configuration with firewall2 >> >> firewall1 vpndr1 = 172.16.1.10/8 (ALWAYS ACTIVE) - "Virtual >> Network Interface" ? tinc config as tinc-up started as service >> >> >> >> >> >> >> >> firewall2 lan = 172.16.1.12/19 (ALWAYS AC...

...; >> firewall1 lan = 172.16.1.11/19 (ALWAYS ACTIVE) - >> "Physical Network Interface" ? system config as ifcfg-? >> >> 172.16.1.10/19 (VIP Keepalived Make active) - >> Active/Passive configuration with firewall2 >> >> firewall1 vpndr1 = 172.16.1.10/8 (ALWAYS ACTIVE) - "Virtual >> Network Interface" ? tinc config as tinc-up started as service >> >> >> >> >> >> >> >> firewall2 lan = 172.16.1.12/19...

...use BT100 as local extension to Asterisk. I've done simple setup and BT100 can call Asterisk and place outgoing calls. However I cannot set him to qualify, cause it is claimed as unreachable. I have port redirection at Firewall 1 (to 5060 and rtp 5004 to grandstream) and 5060 and rtp ports on Firewall2. But I guess I am missing something. I've setup Asterisk to work behing nat and it works OK, on same route and same local network Iax phone is operating also ok in both ways. On grandstream I've setup public NAT adress, then keep alive to 10 sec, (tried also some other setups but didn'...

...setup > > and BT100 can call Asterisk and place outgoing calls. However I cannot > set > > him to qualify, cause it is claimed as unreachable. > > > > I have port redirection at Firewall 1 (to 5060 and rtp 5004 to > > grandstream) > > and 5060 and rtp ports on Firewall2. But I guess I am missing > something. > > I've setup Asterisk to work behing nat and it works OK, on same route > and > > same local network Iax phone is operating also ok in both ways. > > > > On grandstream I've setup public NAT adress, then keep alive to 10...

...UBSCRIBE requests are mostly harmless... And then there's other protocols - e.g. IAX - I'll have a look at the data format for IAX and see if I can do the same for that too - although I haven't heard of any slamming type attacks on IAX - yet... The file is at http://unicorn.drogon.net/firewall2 Please don't just run it without having a look through it though - you might find yourself locked out of your own system! The FTP port ranges are set to match those I use in proftpd, so you might have to change those if using FTP and/or other FTP servers... The timing stuff can be expanded to...

Hi! I don;t know what i am doing wrong because i have still Low ID on aMule. I have action.AllowaMule and accept tcp 4662:4771 and udp 4672. Thanks, Mitja