search for: mynullvoid

Hi, I am using Shorewall in Adamantix. At the moment everything flow fine, my question is that how can I filter the access by computer mac address, I had read the documentation maybe I am ''stupid enough to spot the guide, if so please show me''. What is the rules line if I want to 1. limit ~01-01-01-01-01-01,~02-02-02-02-02-02,~03-03-03-03-03-03-03 to access 202.202.202.202

Hi, At the moment I am controlling my LAN client access to the Inet by their MAC address. Currently I am putting their MAC address in the rules file - now the number of the PC that I want to manage is getting more and more and it is not practicle to do this way anymore. My question is, how can I have their MAC address in other separate file? Regards http://www.debian.org/consultants/#Malaysia

Hi, I had set rules so that my client can only visit few sites instead of the whole net. My question is, how can I allow my client to activate it''s product key and also to run windows update? One more thing is, can I use domain name in the rule config? if yes, can I put just microsoft.com to refer to aaa.microsoft.com bbb.microsoft.com? Please advice

Hi, I had saw a few patches to be applied in order to get the firewall to block based on the application. At the moment I am having problem to block ICQ and Yahoo Msgr. Even I only open a few ports like, the ICQ still able to connect through port 80. Any add-in module for shorewall or anyone able to do this? Regards __________________________________________________ Do You Yahoo!? Tired of

I am missing a tiny detail on understanding a simple port forward: I want to forward just like the FAQ listed, via #ACTION SOURCE DEST PROTO DEST PORT DNAT net loc:192.168.1.3:22 tcp 1022 Which works just fine. Now I also tried this following type of rule, which I thought would work, but it did not. #ACTION SOURCE DEST PROTO DEST-PORT

Hi, Currently I am looking for possibility to have a no-config network enviroment, where in this local area network, we don''t need to set any ip to a computer, it doesn''t matter the computer already have a fixed ip/sm/gw (even doesn''t belong to the enviroment). When ever a browser is ''clicked'', the computer will able to get connected to the internet.

Hi! Maybe I miss some info, in the previous threads, besides than webmin - shorewall, I was made to known that there is another web-gui to manage shorewall. Where can I find it? Thanks http://www.debian.org/consultants/#Malaysia --------------------------------- Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses.

Hi, I am having problem in getting my fw to connect to the net, I had set allow fw net in the policy. I suspect maybe shorewall having problem because I have 5 public IP alias to my fw, which is eth0, eth0:1-eth0:4. Because before I add more ip to this interface my fw able to connect to the net. How can I set one IP to be bind to this fw, or I had to change the rules from fw to fw:w.x.y.z? One

Hi folks Im currently doin firewall project.. the scenario is like this.. my application server open port number 3079 the server ip is 202.188.0.132. and now the port can be accessed from everywhere. Now i want to block all the everywhere accessed. But my problem is, the application will be accessed by few locations that doing transaction with the application server. and the said locations are

http://shorewall.net/pub/shorewall/2.3/shorewall-2.3.0 ftp://shorewall.net/pub/shorewall/2.3/shorewall-2.3.0 WARNING: This is a development release and may be unstable New Features in version 2.3.0 1) Shorewall 2.3.0 supports the ''cmd-owner'' option of the owner match facility in Netfilter. Like all owner match options, ''cmd-owner'' may only be applied to

...So far everything is working well and I''d be happy to share my experience setting up snort-inline as its not easy to find much out there on it. -----Original Message----- From: shorewall-users-bounces@lists.shorewall.net [mailto:shorewall-users-bounces@lists.shorewall.net] On Behalf Of mynullvoid Sent: Tuesday, March 29, 2005 9:34 PM To: Mailing List for Shorewall Users Subject: Re: [Shorewall-users] Shorewall and an inline IDS (snort-inline orhogwash) If I am not mistaken snort-inline is already in snort 2.3.2 --- Michael W Cocke <cocke@catherders.com> wrote: > Is anyone using...

It is with regret that I announce that Shorewall development and support is officially ended. Sean''s post has finally driven it home to me that in the long term, trying to support a project like Shorewall is impossible for a person of my personality and age. Sean -- please believe that this isn''t about you or your post -- your post was just the proverbial straw on this old