search for: fw1

Hi, in my lan I have two firewall, fw1 is the first and manage inte-vlan routing. Fw2 manage internet and dmz. fw1 and fw2 have an interface (eth4 for both fw2 and fw1) on the same subnet that permit to the host behind fw1 to reach internet, my problem is on fw2: eth4 is the NIC that connect fw2 and fw1, I would''t like masq...

...ing. Those QuickStart directions are for Gluster 3.3.something and Fedora 19 seems include 3.4.beta3, so those directions are wrong. This is a brand new, fresh installation with no volumes yet. Anaconda apparently installed these packages with the initial Fedora installation: [root at chicago-fw1 ~]# rpm -qa | grep gluster glusterfs-fuse-3.4.0-0.6.beta3.fc19.x86_64 glusterfs-3.4.0-0.6.beta3.fc19.x86_64 glusterfs-api-3.4.0-0.6.beta3.fc19.x86_64 [root at chicago-fw1 ~]# So then I did: yum install glusterfs-server and it successfully installed. Next I did: systemctl start glusterd.service...

...to create a cluster of two firewalls with Linux-HA so that if the primary fail, the secondary firewall will take over. Note that I don''t care about syncing states between firewalls, they will just have to reconnect :) It''s a typical configuration: _______FW1_______ / | \ INTERNET--ROUTER--< |HB >--SERVER \_______ | _______/ FW2 HB is the heartbeat between the two firewalls. The default gateway of SERVER will be the IP address of the cluster of firewall...

Hello everybody: Here is my "network layout": ISP1 ISP2 | | | | +-----eth0---------eth1------+ | | | FC 3 box | | | +-----eth2---------eth3------+ |

Hi, Does anyone have experience using IPSEC on CentOS in order to connect to vendor IPSEC-based VPN products (specifically Checkpoint FW1) ? Is the included IPSEC implementation sufficient, or do people have to rely on OpenSWAN or FreeSWAN ? I'd be testing tomorrow and I'm interested with experiences others have had and things to look out for. Thanks in advance, -- dag wieers, dag at wieers.com, http://dag.wieers.com/...

Sorry Dag, it is possible to use linux as a roadwarrior client: http://www.fw-1.de/aerasec/ng/vpn-racoon/CP-VPN1-NG-Linux-racoon-roadwarrior.html -------- Original Message -------- Subject: Re: [CentOS] Connecting CentOS to IPSEC VPN (Checkpoint FW1) Date: Mon, 21 Aug 2006 15:20:55 +0200 From: carlopmart <carlopmart at gmail.com> To: CentOS mailing list <centos at centos.org> References: <Pine.LNX.4.64.0608211506400.10079 at horsea.3ti.be> Dag, Using Openswan, racoon, etc ... as a IPSEC gateway to interoperate with CP FW-...

...nk/extension pair on the two boxes and create a dial plan with a prefix like 9|XXX to select an extension on the other box. My problem is that I now have to do this with extremely restrictive firewalls thrown into the mix - firewalls I have no control over. Basically, the setup is: *1 <---> FW1 <---> (Internet) <---> FW2 <---> FW3 <---> *2 I have control over firewall 1 and 3, but not 2. Using port forwarding (4569 UDP) on FW1, I have been able to make calls from *2 to *1. My problem lies with making calls the other way, as I have no way of port forwarding on FW2....

...d just OOB I'm not getting very far, so advice would be appreciated. When I plug in the device I see some entries in /var/log/messages: Jul 27 14:50:30 fcshome kernel: firewire_core: phy config: card 0, new root=ffc1, gap_count=5 Jul 27 14:50:31 fcshome kernel: firewire_core: created device fw1: GUID 0003f300118123f9, S100 lsmod says this: # lsmod | grep fire firewire_ohci 24695 0 firewire_core 50151 1 firewire_ohci crc_itu_t 1717 2 udf,firewire_core I have these 1394-related packages installed: # yum list installed | grep 1394 libavc1394.x86...

Hi, I have a simple question. I have my firewall with 2 external Ip and 1 lan. For example ISP1 FW LAN----Mail Server ISP2 Ok, when i DANT the smpt port to my mail server, I can see that the conection in my mail server comes from the external IP of my ISP. I need to change this so the conection to my mail server cames from the LAN IP from my firewall Is this possible?

Hi, I have a setup that consist of 2 firewalls connected over dialup and PPP. Each side of the ppp are protected by shorewall. One side of the PPP masquerades everything not addressed to the local network to its eth0 (the net). fw1 <---- ppp (dialup) -----> fw0 <----- NET When making an http request to a site on the Internet from the machine not directly connected to the net (fw1), the request hangs. I have checked that I can ping addresses on the net and that my DNS resolution works correctly. Running tcpdump on...

Hi Everyone, In my HVM guest''s config file, I have given my guest 3 interface. I have called them fw1, fw2 and fw3. I have joined each interface to a bridge on the Dom0. This does appear when I do a "brctl show". However, there are 3 other interfaces also added called tapx.0,tapx.1 and tapx.2 (Where x is the domain ID for the guest). Furthermore, I am only able to run tcpdump on the t...

Hi, I have an DNAT ISSUE with PREROUTING. This is my setup. I have 2 firewalls running iptables. Pls asume 1.2.3.4/29 is the internet interace of FIRST firewall. 2.3.4.5/29 is the internet interface of SECOND firewall. it has DMZ zone. in that DMZ zone, mail server runnig @ 192.168.100.3 Now I want to DNAT port 25 of FISRT firewall ( i.e - its ip address - 1.2.3.4/29) to the internet ip

...is net4501 boards. We have two ISP feeds (let''s call them ISP-1 and ISP-2) and get 8 static IPs with each feed. The plan is to have the publicly accessible servers sitting in the DMZ connected to ISP-1. Our local intranet (LOC) will be connected to ISP-2. There will be 3 firewall/routers: fw1 between DMZ and ISP-1, fw2 between LOC and ISP-2 and fw3 between LOC and DMZ. Since a picture is worth a 1000 words, here''s the picture (hoping that gmail won''t mangle it): ________ ________ _/ \_ +----------------+...

...ll2(192.168.88.3) on firewall2 : 192.168.99.0 gw firewall1(192.168.88.2) firewall2 is the "server" (does not connect) and firewall1 connects to it. A link is established on server start and I can ping the eth address (192.168.100.1) of firewall2 from firewall1, but not the eth address of fw1 from fw2. If I switch fw1 to server and fw2 to client, it works the other way round. The situation is though, that client can access server eth but server cannot access client eth. ---------------------------------------------------------------------- Johannes Walch NWE...

Hi to all, +-------+ eth1 +-------+ | |==========| | ''network 1'' ----| A | | B |---- ''network 2'' | |==========| | +-------+ eth2 +-------+ A and B are routers # tc qdisc add dev eth1 root teql0 # tc qdisc add dev eth2 root teql0 # ip link set

I have this configuration: UA1 ---> FW1 ---> Asterisk ----> FW2 --> Internet --> UA2 UA has provate address (192.168.x.x) Asterisk has public address I want to be reach somebody at the internet. My idea was that asterisk works as a Proxy. Then i would have a SIP/RTP connection between UA1 and Asterisk and an other SIP/RTP...

Hi All, 3.4.0 and 3.3.2 releases of GlusterFS are now available. GlusterFS 3.4.0 can be downloaded from [1] and release notes are available at [2]. Upgrade instructions can be found at [3]. If you would like to propose bug fix candidates or minor features for inclusion in 3.4.1, please add them at [4]. 3.3.2 packages can be downloaded from [5]. A big note of thanks to everyone who helped in

...---- | Cisco 26xx Router ----------------- | ----------------------- | | FW1 FW2 ---- ---- | | ------------------------------- | | | | | DNS1 DNS2 RADIUS MAIL DATA Questions: (1) Is somebody using '&...

Hi, I am migrating from one ISP to another, and would like to run both simultaneously for a while. So: (both netmask 255.255.255.248) [ISP1] 24.106.62.180 [ISP2] 209.181.237.230 | | | | \ / -----[ HUB ]----- | | -------- eth0 --------- | Linux FW/Server | ---------eth1 --------- | | [ HUB ] | 10.0.0.x/255.255.255.0 The default IP on

Hi, I was wondering how a linux box configured as a firewall stacked up against some of the commercial products like checkpoint-1 and gauntlet. Can someone direct me to a good book or online doc that compares linux to some other firewall methods? Mind you, I''m not talking about a firewall in the classical sense, ie ip forwarding turned off and used as a proxy, but the typical Linux box