search for: loudas

> Message: 2 > Date: Fri, 03 Dec 2004 10:10:35 +1300 > From: Paul <lists@loudas.com> > Subject: [Shorewall-users] another network to add > To: Shorewall List <shorewall-users@lists.shorewall.net> > Message-ID: <41AF84CB.5080304@loudas.com> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Hi Tom (and others) > encase you don...

...ieve what I want. I want to be able to ipsec into either device (eth2 or eth3) and have all the traffic passed through the correct interface. any help … please J Paul. ---------------------------------------------------------------- This message was sent using IMP, at http://webmail.loudas.com

Hi, I have a big "name problem" with my internal mail server (10.0.0.152). It is "seen" on the internet through DNAT (213.58.230.27). Also there is a MX record pointing to the machine. Everything works fine from the outside. However i can''t set the mail clients on the lan pointing to the mx record, because this one points to 213.58.230.27 and the firewall

Having moved from a "cascading LANs" configuration to two independent LANs on eth0 and eth1, I still get some "state INVALID" for which I am not sure what the cause is. Can somebody help me understand its probable origin? Thanks, Costantino [see attachment]

Hi folks, Last night and this morning i''ve hacked up a quick web site for coordinating our development work based on Drupal (http://drupal.org). You can find it at: http://shorewall.dyndns.org I''ve put a few ideas in there - feel free to use the comments or sign up for an account and create your own pages (particularly in the two books about development and web site work).

Dear Shorewall Users, having noticed that the request for a WebGUI is growing, after a very short conversation I''ve had with Tom, I''d like to let you all evaluate the Web interface to Shorewall I''ve written, integrating the original weblet package made available for the LRP project. ---------------------------------------------------------------------------- Preamble

Hi guys/gals .. as mentioned earlier I''m rebuilding my fw. I have shorewall/iptables/kernel blah blah all ready to go. I''ve written some udev rules so that I can have lan0, wave0, wave0:1, golive0, iconz0 as my interface names (might make for easy maintenance .. named after each ISP) The ongoing struggle is VPN. pptp with mppe is being a pig. ipsec/racoon didn''t work

interfaces: local eth0 192.168.1.255 dhcp golive eth1 172.30.15.255 wiredc eth2 202.37.230.127 dhcp wave eth3 203.96.213.255 hosts: ipsec eth2:192.168.192.0/24 rules: DNAT wiredc local:192.168.1.3 tcp 80 - DNAT wave local:192.168.1.3 tcp 80 - 203.96.213.73 The rules here

In masq can I Eth2 eth0:!192.168.1.3/32 Eth3 192.168.1.3/32 Then somehow with routing Route add default 202.x.x.x. (my eth2 address) Route add default 203.x.x.x (my eth3 address) src 192.168.1.3 Any clues? Also .. can How do I achieve this: In rules REDIRECT 80!eth0:192.168.1.3/32 8080 - !192.168.1.0/24 (in human readable format) Redirect everything on port 80 to port 8080

how can I check whether packets are being marked as per my tcrules file? 4 0.0.0.0/0 202.37.230.93 udp 500 4 fw 0.0.0.0/0 udp 500 also can someone confirm what ports are needed to be opened for ipsec? 1701,1723,47,500 ??? P.

I know this isn''t a shorewall question, but I hope somebody might be able to point me the right direction. here''s the error: Apr 10 18:19:07 trinity kernel: BUG: using smp_processor_id() in preemptible [00000001] code: modprobe/11068 Apr 10 18:19:07 trinity kernel: caller is ip_conntrack_init+0x255/0x369 [ip_conntrack] Apr 10 18:19:07 trinity kernel: [<c02ec398>]

Hi Tom (and others) encase you don''t know my network already ;) here''s a quick run down eth0 lan 192.168.1.1/255.255.255.0 eth1 wan1 172.30.7.4/255.255.240.0 eth2 wan2 202.37.230.93/255.255.255.192 eth3 wan3 203.96.213.73/255.255.254.0 I''ve got routes and rules for all the above interfaces :) I want to add another one, however I fear this might cause some issues I have

Firstly I don''t think this is a shorewall problem, but I suspect shorewall might be able to solve it for me. I''ve posted this so far at http://mandrakeusers.org/index.php?showtopic=18942 I''ve stumble upon a problem that has me stumped I have a multipath router using 2.6.8.1 with patches from here http://www.ssi.bg/~ja/#routes basic setup: ___ ISP1