search for: jbank

...this. So I''m assuming its me. :P But the Owner.Group and file permissions look wierd on this interface sample compaired to another identical install. The only difference is I upgraded to 2.0.7 on the other pc. This one is starting out fresh from 2.0.7. >>>>>snip toejam jbanks # ls -la two-interfaces total 37 drwxrwxr-x 2 500 501 208 Mar 28 2004 . drwxr-xr-x 10 jbanks users 664 Feb 28 21:56 .. -rwxrwxr-x 1 500 501 5882 Mar 28 2004 interfaces -rwxrwxr-x 1 500 501 3328 Mar 14 2004 masq -rw-rw-r-- 1 500 501 3399 Mar 14 2004 poli...

Hi! Shorewall Users May I know ..what does it means ? Nov 5 12:43:34 netgw kernel: Shorewall:newnotsyn:DROP:IN=eth0 OUT= MAC=00:05:5d:4e:fc:62:00:d0:95:7a:d5:f1:08:00 SRC=210.59.230.239 DST=211.24.146.50 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=36787 PROTO=TCP SPT=80 DPT=20291 WINDOW=65160 RES=0x00 ACK FIN URGP=0 Best Regards, Support

I have allowed ALL of the local users to ping the internet but they currently get the following error and cannot access the internet ! I know it is something I have done wrong (I think it is a routing problem but just cannot find out what) The error is:- Reply from 212.219.13.74: destination host unreachable. My eth1 is 10.0.0.1 and the users can ping that OK My eth0 is 212.219.13.74 (connected

This is a bug-fix roll-up. Problems corrected since 1.4.6: 1) Corrected problem in 1.4.6 where the MANGLE_ENABLED variable was being tested before it was set. 2) Corrected handling of MAC addresses in the SOURCE column of the tcrules file. Previously, these addresses resulted in an invalid iptables command. 3) The "shorewall stop" command is now disabled when

What shorewall rules would be required to allow the OSPF routing protocol to pass fw<->loc? Any suggestions would be appreciated. Ben

Hi I have a (bizarre) problem with ssh, which someone has suggested may be down to the MSS value being too high. I know that within Shorewall I can clamp the MSS value to the MTU-40 value, but is there a way I can set MSS to a discreet value? I just want to (dis)prove the MSS theory at the moment (I know it isn''t a real fix). Thanks, Keith

Dear, All I have 4 ip public in my router 1. For Connection to gateway 2. For gateway Wireless Lan (with ip public) 3. For DMZ 4. For Downtream ISP ------------------History I have two way for connection Internet 1 by Leased Line 128 Up/Down and 256 Down With DVB and i have client with wireless Network. I need Client wireless network can use DVB Network for connection with port 80. What can i

Hi All, Is it possible to establish site-to-site VPN using dynamic IP addresss assigned by ISP ? If yes, I would like to request a sample ipsec.conf for such scenario... Thanks and warmest regards aslay ################################################### # This message has been scanned for viruses and # # dangerous content by Pensteel Digital Solutions # # Open Source Security Server,

I''m getting 2 or three of these a day...Any ideas ? The 192.168.250.zz is a eth0:3 on a box that currently only has eth0:1 active Dec 1 15:47:40 machine-name kernel: Shorewall:all2all:REJECT:IN= OUT=eth0 SRC=my.real.ip.addr DST=66.228.216.22 LEN=68 TOS=0x00 PREC=0xC0 TTL=255 ID=12031 PROTO=ICMP TYPE=3 CODE=1 [SRC=66.228.216.22 DST=192.168.250.zz LEN=40 TOS=0x00 PREC=0x00 TTL=46

Hello Group I am trying to set up a demo of Squid at my location to to a person that has proxy ports blocked on his firewall at his location by having him set his IE Browser set to use proxy server 64.42.49.235 port 80. My thinking was to set up a rule in shorewall which redirects port 80 to 3128 as in a local setting. My test server is running rh 7.3, Shorewall 1.3.14 with one interface

Hello Everyone, This morning I received a personal email from a recent poster asking "Why is Mr. Eastep so mean?". The post went on to explain that I had responded abruptly to the person''s request for help and asked why I wasn''t more helpful to people attempting to understand something new. Good question. Over the last nine months, I have been struggling to deal with