search for: masquarad

hi, there was some email problems and i repeat my question too fast, but this is the second part of my questions. - only the rules and policy files give access right? ie. rules in the FORWARD chain of the filter table in iptables ? - is a line in masq file automaticaly add an accept rule too? eg. in msaq file eth0 <internal ip> allow connection from <internal ip> (local zona) to the

Hello Tom, Sorry, please but i again return to IFB question. If i correct understand in current situation IFB haven't profit from ESFQ in common cases (i mean internal networks masquarading) so as we wait from ESFQ allocates bandwidth fairly per source IP(internal) but IFB don't know internal IPs. If i correct, what do you think what can help IFB to solve its main disadvantage (don't see internal IPs)? Thank you, Alex ---- Доставка на дом и в офис п...

...ave 4 interfaces running on RHE3 on a Dell XEON server 2.8Ghz 1Gb RAM. The primary use (only one at this stage) is for the server to handle mac address authentication of clients which it does. The problem however has to do with througput. I have 3 DMZ''s which one is a private range doing masquarading and One Interface connected to the Internet side of my configuration. The other 2 does IP Forwarding. For tests purposes I have a machine on the same side on the Internet running a bandiwdth test program. When I access that program from my DMZ''s the througput is never above 100Kbps. W...

Hello, Are there any good alternatives to the network-nat script on Debian Squeeze? I have tried using (network-script network-nat) and (vif-script vif-nat), but I end up with an error message like Error: Device 1 (vif) could not be connected. ip addr add 10.0.1.259 dev vif4.1 failed with configuration file directive vif =[ ''script=vif-nat,ip=10.0.1.132'' ] I need Internet

Hi; I am using Samba 2.2.0 on a small business network (192.168.1.x). I am running Suse 7.2 on a pentium pro 120. This machine is also the local gateway (isdn) using masquarading. I have a 10 Mbs utp network. I am experiencing an extreme difference in read and write speed over the samba server. Writing from a windows machine (windows 98se) to the linux box gives me data rates of approx 16 kByte/sec, reading from the linux box to the windows machine is near 1 MByte/sec....

hi, is there any reason why there is no such thing as ADD_DNAT_ALIASES in shorewall.conf or in rules (or am i just missed it)? i think about it like in masq file if the masquaraded outgoing interface is different from the default firewall intyerface than i can use ip:<digit> where the digit is the alias number. since dnat is in the rules it can be used from there. eg: if would like to dnat all connection from the internet to an internal machine, that i do: DNAT net lo...

...ia 127.0.0.1 dev lo scope link default via 81.169.188.1 dev eth0 Hello, I configured shorewall (one-interface example-configuration) on my internet server to accept pptp connections. This works fine, but I want my pptp-clients to surf through the tunnel. I think that has something to do with masquarading - but I dont''t know how to setup this. The nic on the server is eth0. The pptp interface (if connection is established) is ppp0 Thx, -- Kai Lippok kai.lippok@kl-mail.de MCDBA / gentoo linux

...USE_SIP_MYSQL_FRIENDS=1 in channels/Makefile) The reason is that I'm using Wellgate FXSes that have second/third/fourth FXS ports bugged when I use a password, but work ok when there is no password. Linking the username to a specific ip could be some kind of security measure so noone could masquarade as that username. what i want is something like what we have in sip.conf: [username] host=dynamic ; <--- this one, we can put IP here instead of 'dynamic' regards, Vahan

...ith QOS enabled and all shaping stuff on), this machine acts as a webserver and is also doing IPFW/MASQ for a small network behind it. Interface eth0 is on the internet, eth1 is connected to the private network. I would like to limit any traffic that originates from the webserver itself so that the masquaraded hosts behind it can still function with a certain amount of assured bandwidth. The problem of course is that all the masqueraded traffice comes through the webserver, so I am not sure how I can shape traffic that comes from eth1 to be of higher priority over traffic that doesn''t. I have...

Hi everyone, I need your help. I would like to create a front-back architecture with Xen. My physical server has only one public Interface. Currently, my DOM0 is using the network-route configuration: *(network-script ''network-route netdev=eth0'') (vif-script vif-route)* My DOM1 is configured with a public IP + proxy_arp with DOM0. DOM1 can connect any address on

...11.0.1 | |---- 10.11.0.2 Win2K MYGROUP | |---- 10.11.0.95 Win95 MYGROUP | |---- 10.11.0.98 Win98 MYGROUP | \ | \__ SHARED PRINTER |eth1 10.11.0.40 LinuxRouter MASQUARADE (NAT) (kernel 2.4) |eth0 | 192.168.0.98 ------- 192.168.0.95 AnotherWin98 AnotherWin95 MYGROUP MYGROUP No system is currently configured to run WINS services. GOAL -------- Have the windows systems on the 192.16...

...0.2/24 Server 2 to second ISP ( only certain ips route through that) # network 195.0.0.0/8 must route through here outside: eth1 10.0.1.35/24 private: eth0 10.0.10.1/24 I use `ip rule add fwmark` and `iptables -t mangle PREROUTING` to route packets marked for 195.0.0.0/8 through 10.0.10.1/32 I masquarade the packets leaving eth1 on server 2 to 195.0.0.0/8 I want my DMZ section to be able to route to that network as well via 10.0.10.1 obviously when a packet from 195.0.0.0/8 send me a mail it comes in on server 1(via the internet) and should go back out server 1 ( with src routing enabled ) My...

i''ve read your http://lartc.org/howto/lartc.rpdb.multiple-links.html article as well as Advanced IP Routing (esp. chapter 10.4) and still unable to make this thing work. am i that helpless? :) is there anyone to guide me through the multiple ISP setup? into details. i got 2 dsl connections from different ISPs (A and B), both connections use PPPoE, both got assigned with dynamic IPs

Hi all, first time that i tried to use xen. My goal is to reach in ssh all the domUs after i manage to get a connection through openvpn. Like they were real servers. I installed the openvpn server on my dom0 (ubuntu 9.04 + default package + latest debian-xen-amd64 kernel) After connecting to the openvpn server I''m able to do direct ssh just to the dom0. For reaching domU i had do it with

The Rd.sty LaTeX package is used when building the R manuals, and by the LaTeX pages produced from the man pages. I have tracked down some problems G?bor Cs?rdi was having recently (see "Re: [R] preformatted and '#' in manual pages" in R-help) to a LaTeX problem, and am trying to work out how to fix it. Specifically, the .Rd file he was using had a structure like \dQuote{

...get this to the mail list... could you post it and/or answer it for me? Thx. I have been having problems configuring TINC properly. SCENARIO: -------------- I have two linux boxes (A and B), each with one private network and one routable IP address (2 NICs). They are both running ipchains and masquarading very stable. I start tincd on A with no ConnectTo variable set. I start tincd on B with a ConnectTo of the routable IP address of A. A review of the var/log/messages shows the connection come up on both systems. Now, B can ping A's tap address, and the private network behind A. :-) But A...

Hi everybody, I've spent last 16 hours trying to get Tinc working on my two almost identical linux boxes. Both are running Debian stable with backported Openssl and self-compiled kernel 2.4.24 with ebtables-patch to enable bridging firewall. Both firewalls have both masquaraded and just bridged nets behind (LAN & DMZ) and they are working perfectly. Now I need to get from my home to the other LAN so that I could f.ex. administer printers from my home if needed. My home LAN has 10.10.0.0/16 and the other end's LAN 10.0.0.0/16. I compiled Tinc on other, faste...

I''m planning a multi isp setup and cafully read the documentation. One thing that bothers me is the masq file. The example uses a single ip address on each public interface. I have multiple addresses on both public interfaces (16 on one and 64 on the other). I''m a bit confused about what to put in the masq file in this situation. Any insights would be appreciated. Ronald --

Hi Patrick, That's right. DSNodes are coupled to the original function. For function clones, you first need to get the original function, and then use the DSNode from that function. FuncInfo contains the information if a function is a clone and what the original function is. If you want to find the corresponding DSNode for some instruction, you must call PA::FuncInfo::MapValueToOriginal(

hi if i remove the rule for transparent redirection from my firewall script then it works well. what can be the connection of transparent redirection with samba please help me out. i m in a grate trouble. the detailed problem is below Regards Azeem >From: "azeem ahmad" <azeem484@hotmail.com> >To: samba@lists.samba.org >Subject: [Samba] iptables and samba >Date: