search for: man1918

...ewall/Beta http://www.shorewall.net/pub/shorewall/Beta In this release: 1. Entries in /etc/shorewall/interface that use the wildcard character ("+") now have the "multi" option assumed. 2. The ''rfc1918'' chain in the mangle table has been renamed ''man1918'' to make log messages generated from that chain distinguishable from those generated by the ''rfc1918'' chain in the filter table. 3. Interface names appearing in the hosts file are now validated against the interfaces file. 4. The TARGET column in the rfc1918 fi...

Shorewall 1.3.3 is now available for download. In this release: 1. Entries in /etc/shorewall/interface that use the wildcard character ("+") now have the "multi" option assumed. 2. The ''rfc1918'' chain in the mangle table has been renamed ''man1918'' to make log messages generated from that chain distinguishable from those generated by the ''rfc1918'' chain in the filter table. 3. Interface names appearing in the hosts file are now validated against the interfaces file. 4. The TARGET column in the rfc1918 fi...

...source destination 0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3389 to:192.168.1.190 Mangle Table Chain PREROUTING (policy ACCEPT 42485 packets, 9375K bytes) pkts bytes target prot opt in out source destination 65 8740 man1918 all -- eth0 * 0.0.0.0/0 0.0.0.0/0 state NEW 1904 1213K pretos all -- * * 0.0.0.0/0 0.0.0.0/0 Chain INPUT (policy ACCEPT 9130 packets, 2117K bytes) pkts bytes target prot opt in out source destination Chain FORWARD (policy AC...

Hi List, I read this list for nearly two years and learnt a lot, but now i have a very strange problem I can''t solve.. I have a firewall machine running Debian, which connects a small office to the internet via a DSL-line (with pppoe) and which is running Shorewall. It allows all outbound traffic and accepts pptp, openvpn and ssh-connections (on a non-standard port) from the internet.

...dpt:6346 to:192.168.1.1 0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:6346 to:192.168.1.1 Chain PREROUTING (policy ACCEPT 992 packets, 106K bytes) pkts bytes target prot opt in out source destination 437 65376 man1918 ah -- eth0 * 0.0.0.0/0 0.0.0.0/0 992 106K pretos ah -- * * 0.0.0.0/0 0.0.0.0/0 992 106K tcpre ah -- * * 0.0.0.0/0 0.0.0.0/0 0 0 MARK tcp -- eth3 * 0.0.0.0/...

....0.4:80 0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 to:192.168.0.4:443 Mangle Table Chain PREROUTING (policy ACCEPT 10 packets, 1262 bytes) pkts bytes target prot opt in out source destination 4 950 man1918 all -- eth0 * 0.0.0.0/0 0.0.0.0/0 state NEW 10 1262 pretos all -- * * 0.0.0.0/0 0.0.0.0/0 Chain INPUT (policy ACCEPT 6 packets, 312 bytes) pkts bytes target prot opt in out source destination...

...92.168.10.4 0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:7778 to:192.168.10.4 Mangle Table Chain PREROUTING (policy ACCEPT 3 packets, 249 bytes) pkts bytes target prot opt in out source destination 0 0 man1918 all -- eth0 * 0.0.0.0/0 0.0.0.0/0 state NEW 3 249 pretos all -- * * 0.0.0.0/0 0.0.0.0/0 Chain INPUT (policy ACCEPT 3 packets, 249 bytes) pkts bytes target prot opt in out source destination...

I have searched your FAQ''s and read the documentation on your site as well as googling. I am not able to figure this out. If you have any ideas can you please help. I am using the linux-ha failover with redundant firewalls. As part of the function of the linux-ha software consists a service called heartbeat which is a connection from each failover node through a serial cable or ethernet.

...#39;' 0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 to:192.168.110.42 Mangle Table Chain PREROUTING (policy ACCEPT 32M packets, 16G bytes) pkts bytes target prot opt in out source destination 47 2359 man1918 all -- eth0 * 0.0.0.0/0 0.0.0.0/0 state NEW 396 79941 pretos all -- * * 0.0.0.0/0 0.0.0.0/0 6 729 MARK tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 MARK set 0xca Chain OUTPUT (polic...