search for: osra

...eded gen 2 14:12:11 firewall shorewall: LocIv Zone: eth1:10.1.65.0/24 Jan 2 14:11:37 firewall rc.sysinit: Setting default font (latarcyrheb-sun16): succeeded gen 2 14:12:11 firewall shorewall: LocTo Zone: eth1:10.1.0.0/18 Jan 2 14:11:37 firewall rc.sysinit: Setting hostname firewall.ivrea.osra.com: succeeded gen 2 14:12:11 firewall shorewall: DMZ Zone: eth2:0.0.0.0/0 Jan 2 14:11:37 firewall rc.sysinit: Initializing USB controller (usb-uhci): su cceeded gen 2 14:12:11 firewall shorewall: Deleting user chains... Jan 2 14:11:37 firewall rc.sysinit: Mounting USB filesystem: succeeded...

I''ve installed a bering box acting as a firewall for a lan; the lan is 192.168.1.0/24 the bering box is 192.168.1.254 I''ve installed a squid server 192.168.1.1 It is possible to configure shorewall for a transparent proxy to the squid server? I''ve tryed with REDIRECT loc loc:192.168.1.1:3128 tcp www - !192.168.1.1 in the rules file I get this error: Error:

The rule: ACCEPT loc $FW::3128 tcp www doesn''t work propertly, the http access does not redirect to squid but directly exit. what''s wrong? Thanks ------- Dario Lesca (d.lesca@ivrea.osra.it) -------------------------------------- @@@@@@@ this is my shorewall-1.2.13 config: #[/etc/shorewall/common.def]----------------------------------------------- run_iptables -A common -p icmp -j icmpdef run_iptables -A common -p tcp --tcp-flags ACK ACK -j ACCEPT run_iptables -A common -p tcp --...

...es of the three interface... [root@multilinux temp]# tar xvfz samples-1.4.4/two-interfaces.tgz three-interfaces/ three-interfaces/interfaces three-interfaces/routestopped three-interfaces/masq three-interfaces/policy three-interfaces/rules three-interfaces/zones ------- Dario Lesca (d.lesca@ivrea.osra.it)

...ew rule: REDIRECT net 3128 tcp 80 Comments? -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ teastep@shorewall.net ---------- Forwarded message ---------- Date: Tue, 14 May 2002 19:06:48 +0200 From: Dario Lesca <d.lesca@ivrea.osra.it> To: Shorewall Firewall <shorewall-users@shorewall.net> Subject: [Shorewall-users] Redirect loc::80 to fw::3128 not work The rule: ACCEPT loc $FW::3128 tcp www doesn''t work propertly, the http access does not redirect to squid but directly exit. w...

Hello, on my old system I''m using ipchains. Can anyone help me with converting rule /sbin/ipchains -A forward -j MASQ -s source_addr -d destination_addr 443 -p tcp to shorewall. I know that I can write eth0 source_addr to /etc/shorewall/masq file but I can''t found where I can specify the destination address. The reason for this is to allow one user (computer) access only to

Version 1.0 of the Quick Start Guide and accompanying sample configurations is available at: http://www.shorewall.net/shorewall_quickstart_guide.htm. Comments and suggestions are most welcome. Thanks, -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ teastep@shorewall.net

While I''m in temporary retirement, I''ve decided spend a little time experimenting with new things and making some updates to the web site. The biggest result of this effort to date has been: http://shorewall.sf.net/Shorewall_Squid_Usage.html This outlines how to use Squid as a transparent proxy running on the firewall, in the DMZ or in the local network. In the latter two