search for: fw2

Hi, in my lan I have two firewall, fw1 is the first and manage inte-vlan routing. Fw2 manage internet and dmz. fw1 and fw2 have an interface (eth4 for both fw2 and fw1) on the same subnet that permit to the host behind fw1 to reach internet, my problem is on fw2: eth4 is the NIC that connect fw2 and fw1, I would''t like masquerading hosts behind fw1, so to eth4 of fw2 arr...

...tates between firewalls, they will just have to reconnect :) It''s a typical configuration: _______FW1_______ / | \ INTERNET--ROUTER--< |HB >--SERVER \_______ | _______/ FW2 HB is the heartbeat between the two firewalls. The default gateway of SERVER will be the IP address of the cluster of firewall. So SERVER->INTERNET will always go through the right FW. But I''m concerned about INTERNET->SERVER (public IP). My question is: will enabling proxy_arp...

Hello everybody: Here is my "network layout": ISP1 ISP2 | | | | +-----eth0---------eth1------+ | | | FC 3 box | | | +-----eth2---------eth3------+ |

...create a dial plan with a prefix like 9|XXX to select an extension on the other box. My problem is that I now have to do this with extremely restrictive firewalls thrown into the mix - firewalls I have no control over. Basically, the setup is: *1 <---> FW1 <---> (Internet) <---> FW2 <---> FW3 <---> *2 I have control over firewall 1 and 3, but not 2. Using port forwarding (4569 UDP) on FW1, I have been able to make calls from *2 to *1. My problem lies with making calls the other way, as I have no way of port forwarding on FW2. My initial thought was to set up a re...

...possible... yes checking for memory.h... (cached) yes checking for cos in -lm... yes checking for pthread_create in -lpthread... yes checking for Ogg... yes checking for oggpack_writealign... no configure: error: Ogg >= 1.0 required ! [root@fw2 libvorbis-1.0.1]# The environment is: uname -a Linux fw2.local 2.4.20-2.3sparc #1 Wed Jan 15 18:27:52 EST 2003 sparc64 unknown Distro is Auroralinux, release Ansel (based on RH 7.3) <p>In the logfile of configure (also attached), i found (at line 651-658) 651 configur...

Hi, I have a simple question. I have my firewall with 2 external Ip and 1 lan. For example ISP1 FW LAN----Mail Server ISP2 Ok, when i DANT the smpt port to my mail server, I can see that the conection in my mail server comes from the external IP of my ISP. I need to change this so the conection to my mail server cames from the LAN IP from my firewall Is this possible?

I don't get this. I am using a freshly installed copy of Fedora 19 and starting up glusterd for the first time. The goal is to have a replicated directory on two systems. But for right now, I can't even start up the glusterd daemon right out of the box. Trying to follow the Quick Start directions at http://gluster.org/community/documentation/index.php/QuickStart is, well, challenging.

Shorewall 4.5.21.4 is now available for download. Problems corrected since 4.5.21.3: 1) The Broadcast actions have been corrected: o --dst-type BROADCAST has been removed from the IPv6 version o A superfluous DROP rule in the IPv4 version has been suppressed. 2) Previously, if an HFSC class was specified with dmax but not umax, then the firewall would fail to start with the

...two ISP feeds (let''s call them ISP-1 and ISP-2) and get 8 static IPs with each feed. The plan is to have the publicly accessible servers sitting in the DMZ connected to ISP-1. Our local intranet (LOC) will be connected to ISP-2. There will be 3 firewall/routers: fw1 between DMZ and ISP-1, fw2 between LOC and ISP-2 and fw3 between LOC and DMZ. Since a picture is worth a 1000 words, here''s the picture (hoping that gmail won''t mangle it): ________ ________ _/ \_ +----------------+ +-------+ / /...

...68.88.3) on firewall2 : 192.168.99.0 gw firewall1(192.168.88.2) firewall2 is the "server" (does not connect) and firewall1 connects to it. A link is established on server start and I can ping the eth address (192.168.100.1) of firewall2 from firewall1, but not the eth address of fw1 from fw2. If I switch fw1 to server and fw2 to client, it works the other way round. The situation is though, that client can access server eth but server cannot access client eth. ---------------------------------------------------------------------- Johannes Walch NWE Network-...

Hi Everyone, In my HVM guest''s config file, I have given my guest 3 interface. I have called them fw1, fw2 and fw3. I have joined each interface to a bridge on the Dom0. This does appear when I do a "brctl show". However, there are 3 other interfaces also added called tapx.0,tapx.1 and tapx.2 (Where x is the domain ID for the guest). Furthermore, I am only able to run tcpdump on the tap in...

Hi to all, +-------+ eth1 +-------+ | |==========| | ''network 1'' ----| A | | B |---- ''network 2'' | |==========| | +-------+ eth2 +-------+ A and B are routers # tc qdisc add dev eth1 root teql0 # tc qdisc add dev eth2 root teql0 # ip link set

I have this configuration: UA1 ---> FW1 ---> Asterisk ----> FW2 --> Internet --> UA2 UA has provate address (192.168.x.x) Asterisk has public address I want to be reach somebody at the internet. My idea was that asterisk works as a Proxy. Then i would have a SIP/RTP connection between UA1 and Asterisk and an other SIP/RTP connection between Asterisk a...

Hi, I am migrating from one ISP to another, and would like to run both simultaneously for a while. So: (both netmask 255.255.255.248) [ISP1] 24.106.62.180 [ISP2] 209.181.237.230 | | | | \ / -----[ HUB ]----- | | -------- eth0 --------- | Linux FW/Server | ---------eth1 --------- | | [ HUB ] | 10.0.0.x/255.255.255.0 The default IP on

...---- | Cisco 26xx Router ----------------- | ----------------------- | | FW1 FW2 ---- ---- | | ------------------------------- | | | | | DNS1 DNS2 RADIUS MAIL DATA Questions: (1) Is somebody using ''UCARP''...

Hi, I have an DNAT ISSUE with PREROUTING. This is my setup. I have 2 firewalls running iptables. Pls asume 1.2.3.4/29 is the internet interace of FIRST firewall. 2.3.4.5/29 is the internet interface of SECOND firewall. it has DMZ zone. in that DMZ zone, mail server runnig @ 192.168.100.3 Now I want to DNAT port 25 of FISRT firewall ( i.e - its ip address - 1.2.3.4/29) to the internet ip

Hi, Can anyone confirm that if I want to do h323 proxying that I do not need codecs installed? For example if the codec being used is g723.1, I don't need the codec installed locally because there is no compression or decompression being done on my server; the incoming traffic is simply being sent out on another h323 channel (h323 in->h323 out). Is this correct? Thanks, Chetan

...dress.... or #2 asterisk trying to get back to me as 192.168 on public internet.. got canreinvite=yes and no. nat=yes qualify=1000 externaladdr=IP of (em1) localnet=172.16.0.0/12 i would need help form someone who did a sismilar setup.. i do run carp and pfsync also on the FW. mirrored to FW2 down ATM... anyhelp appreciated.. banging head on the wall for 2 weeks now..

Hi! It''s me again bothering you guys, what I want to do is to give full bandwidth to VPN traffic and limit the rest to 30KB/s (kilobytespersecond), ok? Here''s what I have: tcclasses ################################## eth0 1 1kbps 70kbps 1 eth0 2 1kbps 30kbps 2 default eth1 3 15kbps 10000kbps 1 eth1 4

Hi All, 3.4.0 and 3.3.2 releases of GlusterFS are now available. GlusterFS 3.4.0 can be downloaded from [1] and release notes are available at [2]. Upgrade instructions can be found at [3]. If you would like to propose bug fix candidates or minor features for inclusion in 3.4.1, please add them at [4]. 3.3.2 packages can be downloaded from [5]. A big note of thanks to everyone who helped in