search for: screenio

Hello, I''m a very happy user of shorewall but I have found a problem or maybe a misconfiguration I made which I can not resolve. I use a fairly large blacklist based on probes, nimda & codered attacks, proxy & relay probes etc. The only problem is that I want to block incoming trafic on all ports FROM a block but it does also block a httpd, ping etc TO a ip in a block what I do

...168.2.241) at 00:C0:02:58:66:93 [ether] on eth1 ? (192.168.2.11) at 00:A0:C9:32:F4:03 [ether] on eth1 ? (192.168.2.233) at 08:00:46:63:9D:BD [ether] on eth1 ? (24.237.16.1) at 00:01:64:4A:70:00 [ether] on eth0 ______________________________________ John Andersen NORCOM / Juneau, Alaska http://www.screenio.com/ (907) 790-3386

I''ve set up shorewall with the two-interface mode. pc #1 eth1 ---> ppp0 ---> Internet eth1: 10.10.10.254 eth0: 10.10.10.1 > via a crossover cable pc #2 eth0: 10.10.10.2 (gateway=10.10.10.254) I am able to surf the net with pc #1, but pc #2 is completely cut off from pc #1 and the net. I am also unable to ping from and to pc #2.

...olve names or ping. What have I overlooked in my haste??? Is there a diagnostic mode where I can (without changing all the config files) turn on logging of all rules so I can see where things are going awry? ______________________________________ John Andersen NORCOM / Juneau, Alaska http://www.screenio.com/ (907) 790-3386

First of all, My apologies for this maybe slight OT post, but I have so much confidence and read so much good replies on this list, that I am still asking my question. I''m looking for a linux distribution to use on our school''s homemade routers. The routers are small miniITX based systems with 2 network interfaces. I added a 4 port D-Link network card in some cases, when I

Hola and thanks for any help in advance I installed mandrake 9 a few days ago and wanted to set up some additional rules to shorewall, bu i failed :) What i want to do is basicly route any incomming udp and tcp packets on port 4665 to a workstation behind the router. router with mandrake 9, eth0 (192.168.0.1) internal net, eth1(10.0.0.0) connected to dsl modem and gets a dynamic ip

...ceive. Loss of connection happens when the socket is handed off to a spawned task (windows naturally). Never fails with 10meg nics. Never. Has anyone heard of such a thing, and what to do about it? -- ______________________________________ John Andersen NORCOM / Juneau, Alaska http://www.screenio.com/ (907) 790-3386 .

Since you''ve started signing your email, Tom, my machine can''t verify your sig. Where are you publishing your key? -- John Andersen - NORCOM http://www.norcomsoftware.com/

...:08:00 SRC=208.138.130.16 DST=24.237.22.45 LEN=53 TOS=0x00 PREC=0x00 TTL=251 ID=8288 DF PROTO=UDP SPT=53 DPT=40275 LEN=33 I don''t get so many as to be a DOS, but they look like some sort of probe. ______________________________________ John Andersen NORCOM / Juneau, Alaska http://www.screenio.com/ (907) 790-3386_______________________________________ John S. Andersen NORCOM mailto:JAndersen@norcomsoftware.com Juneau, Alaska http://www.screenio.com/ _______________________________________________ Shorewall-users mailing list Shorewall-users@shorewall.net http://mail.shorewall.net/mail...

...not familiar with all the protocalls and services. None of these are terribly complex, and most of them can be figured out by watching the logs, but every little bit helps. ______________________________________ John Andersen NORCOM / Juneau, Alaska http://www.screenio.com/

...ive. Loss of connection happens when the socket is handed off to a spawned task (windows naturally). Never fails with 10meg nics. Never. Has anyone heard of such a thing, and what to do about it? -- ______________________________________ John Andersen NORCOM / Juneau, Alaska http://www.screenio.com/ (907) 790-3386 .

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 DeveloperCube is a new project started by veterans of the web development industry. We are proud to announce that we are now the Official Shorewall Support Forum. We are an online community offering discussion geared towards web developers, designers, and administrators of all skill levels. There are topics ranging from how to market your website,

Happy New Year to everyone: I have followed the instructions at shorewall.net/samba.htm. I''ve restarted the samba server, shorewall, rebooted, everything. And from my network I cannot browse available shares on the firewall (192.168.1.1) telnet 192.168.1.1 138 fails with connection refused, which I don''t understand. All other open ports respond with a string. -- Philip

hi: Just a litle update: 41/8 allocated to AfriNIC (APR 2005). 73/8 allocated to ARIN (MAR 2005). hope it helps.

The basic functionality of Shorewall 2.2.2 works fine with the soon-to-be-released SuSE 9.3 (I have an early copy). I''ll be trying it over the weekend with more complex configurations involving IPSEC and OpenVPN. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \

Thankyou the information provided was informative to say the most. Quote "Shorewall Masqurading made simple ?" I will not comment any futher about my simple question as I see nothing but backtracking information. Maybe all the usless information is somthing to do with the below, Linux how it works! First you must remember that 98% of linux programmers are kids or they have been

Hello all, I don''t want this to be a tome'' but felt a comment was in order. Many new users (Linux and Shorewall are no different) are more apt to not read the manual(RTFM) as they view it as "Taking to long" and don''t understand it''s relevance in their particular scenario. This is unfortunate in the case of Shorewall. As the documents are not only

Since RedHat announced the discontinuence of RedHat Linux, I''ve been diversifying shorewall.net. The systems here now are as follows: a) Firewall -- Debian testing (Installed using the Sarge online installer). b) File Server -- SuSE 9.0 Professional c) Desktop -- Mandrake 9.0 d) Web/Mail -- RedHat 9.0 I think that I will wait until I can afford to build a new

Tom, or whomever reads this, when I say disconnect I mean close out IE6, sorry for so unclear on this point. My IP address never changes unless I unplug the modem. I have had the same IP address for ... well since I had to reset it to hook it up to my Linux box.which was 2 weeks ago. If I set DHCP on my eth1 interface that will contradict the static address I have assigned to it,

Is there a new exploit out for SNMP lately? My shorewall is logging a lot of hits on UDP 161 lately. ______________________________________ John Andersen NORCOM / Juneau, Alaska http://www.screenio.com/ (907) 790-3386