search for: norcomsoftwar

I''ve set up shorewall with the two-interface mode. pc #1 eth1 ---> ppp0 ---> Internet eth1: 10.10.10.254 eth0: 10.10.10.1 > via a crossover cable pc #2 eth0: 10.10.10.2 (gateway=10.10.10.254) I am able to surf the net with pc #1, but pc #2 is completely cut off from pc #1 and the net. I am also unable to ping from and to pc #2.

Hello, Which port Smb4K uses? I am not able to use Smb4K on my server for the local network. Thanks Varun

Hello, I''m a very happy user of shorewall but I have found a problem or maybe a misconfiguration I made which I can not resolve. I use a fairly large blacklist based on probes, nimda & codered attacks, proxy & relay probes etc. The only problem is that I want to block incoming trafic on all ports FROM a block but it does also block a httpd, ping etc TO a ip in a block what I do

Since you''ve started signing your email, Tom, my machine can''t verify your sig. Where are you publishing your key? -- John Andersen - NORCOM http://www.norcomsoftware.com/

...;'t think its involved. Shorewall clear and/or stop commands make no difference). Settings of the MUA (Kmail) is the same for each account. What would make popping mail via a wireless nic slow from on server but fast to another with the same connection.? -- John Andersen - NORCOM http://www.norcomsoftware.com/

Hello, I want VNC Server,which is outside my network ,add my VNC Client, which is behide shorewall box. How should I config the rule? TIA Thongchai

How does one interpret the mac addresses in the log which seem to have 14 segments... Example, this appears in the log... 00:40:c7:2e:09:c0:00:01:64:4a:70:00:08:00 Yet I can''t find that in the arp table norcomix:~ # arp -an ? (192.168.2.148) at 00:10:4B:6A:AE:E7 [ether] on eth1 ? (192.168.2.149) at 00:D0:B7:1D:F2:F2 [ether] on eth1 ? (24.237.19.16) at 00:10:DC:67:BA:80 [ether] on eth0 ?

First of all, My apologies for this maybe slight OT post, but I have so much confidence and read so much good replies on this list, that I am still asking my question. I''m looking for a linux distribution to use on our school''s homemade routers. The routers are small miniITX based systems with 2 network interfaces. I added a 4 port D-Link network card in some cases, when I

Hi, I''m a home user who doesn''t understand the workings of the Shorewall firewall (or the linux OS on which I''ve just installed it) very well. Having just installed Shorewall 1.4.6c with a default "home user" configuration I gave it a run against the online ShieldsUp scan. Main surprise was that the ICMP echo was enabled. I''ve since gone into

I am making a new box to test with and was trying to install shorewall via rpm. So I download the shorewall 2.2.5 rpm and issue a rpm -ivh shorewall-2.2.5-1.noarch.rpm. I then get an error: error: Failed dependencies: which is needed by shorewall-2.2.5-1.noarch So as you can see there are no dependency issues. I thought I saw this on the mailing list a while ago but I just searched for it I did

I''m using shorewall 2.0.x at home as an Internet gateway for family. However my brother always plays online games overnight, so my parents asked whether I can do something on the gateway to control the time of accessing the Internet. I planned to put a script on crontab to schedule which it will execute say at 12:00 night daily, the script will execute a command will deny my brother

Hola and thanks for any help in advance I installed mandrake 9 a few days ago and wanted to set up some additional rules to shorewall, bu i failed :) What i want to do is basicly route any incomming udp and tcp packets on port 4665 to a workstation behind the router. router with mandrake 9, eth0 (192.168.0.1) internal net, eth1(10.0.0.0) connected to dsl modem and gets a dynamic ip

I want to run dhcp and shorewall on the same computer.It is my gateway and that computer doing NAT for my network.How can I set up shorewall to let only users that get theire static ip address via dhcp, not to let users that had static address.

I will be off of the list until sometime Monday afternoon (Monday is a holiday here in the US). -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net

A violent wind storm is expected in western Washington state later today and such storms often produce power/communications outages. I''ll do what I can to keep things running here. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.sf.net Washington USA \ teastep@shorewall.net

I have 1 NIC with an IP address of 192.168.1.10 >From my understanding, Shorewall is suppose to allow all localhost traffic by default (as long as no fw->fw rules are defined). Is this correct? Will Shorewall automatically recognize both 127.0.0.1 and 192.168.1.10 as localhost addresses or does it need to be configured? My problem is with running Apache Tomcat. When shorewall is

Hello, I am not able to open the web interface for the wrt54g router on the lan. Which port does it use ? Thanks Varun

I''ve got a small network and have successfully used Shorewall on a single IP (static) and two interface setup for the past three years. The firewall also runs DNS, Apache and Sendmail. I''m planning on moving the web server and mail to a DMZ machine and setting up a three interface configuration. As I sit here thinking ahead, I''m not sure I understand how the mail server

...=40275 LEN=33 I don''t get so many as to be a DOS, but they look like some sort of probe. ______________________________________ John Andersen NORCOM / Juneau, Alaska http://www.screenio.com/ (907) 790-3386_______________________________________ John S. Andersen NORCOM mailto:JAndersen@norcomsoftware.com Juneau, Alaska http://www.screenio.com/ _______________________________________________ Shorewall-users mailing list Shorewall-users@shorewall.net http://mail.shorewall.net/mailman/listinfo/shorewall-users

Hallo, i have a problem to configure shorewall to enable scanning over the network with sane. The scanner is located at the firewall hosts local interface. Why do i get a "all2all" message and not "loc2loc" Aug 25 14:55:26 router saned[26946]: saned from sane-backends 1.0.11 ready Aug 25 14:55:26 router saned[26946]: check_host: access by remote host: 192.168.0.250 Aug