search for: shorewalls

Hi! REDIRECT lan 3328 tcp www - !192.168.0.0/29,10.0.0.0/16 This rules redirect all traffic web to proxy but howto exclude 1 ip from redirect ?? REDIRECT lan 53 tcp domain - REDIRECT lan 53 udp domain - And in this case howto exclude some ip ? Thx.

I just installed Fedora Core 3 uname -r 2.6.9-1.667 I got the latest shorewall''s rpm: http://www.shorewall.net/pub/shorewall/2.2/shorewall-2.2.0/shorewall-2.2.0-1 .noarch.rpm Made my changes Attempted to run shorewall and got: [root@demo shorewall]# shorewall start ERROR: Can''t find iptables executable I haven''t seen this before. I tried to go through all the

Hi! Can I use the old version shorewall 1.2.12 configure as SNAT and DMZ ? Because Debian Linux came with the default shorewall 1.2.12 . Best Regards, Support

I have been using shorewall for years with ipsets. I have encountered a problem after upgrading from 4.2.11 to 4.4.10. When I run ''shorewall-check'' or ''shorewall start'', it halts with the error: ---------------------------------------------------------------------- ERROR: ipset names in Shorewall configuration files require Ipset Match in your kernel and

Hi Tom and list, Still trying to set up Shorewall logging. I understand that Shorewall require syslog to get logging working, however I have metalog. Is this possible to use metalog as logging facility for Shorewall? I was reading http://www.shorewall.net/shorewall_logging.html and it describes other method ( ULOG ). I understand that I have to compile ULOG support in the kernel... where do I

[This email is either empty or too large to be displayed at this time]

I installed Shorewall 2.2.2 on a vanilla install of Fedora FC3 I have not udated the kernel yet. After some fault finding I went back to the 2 interface example configuration files for 2.2.2. In shorewall.conf I have to specify the path for IPTABLES="/sbin". If I leave this commented out then shorewall reports that it cannot find iptables. When I have this line in shorewall will

Having moved from a "cascading LANs" configuration to two independent LANs on eth0 and eth1, I still get some "state INVALID" for which I am not sure what the cause is. Can somebody help me understand its probable origin? Thanks, Costantino [see attachment]

Hi! I don;t know what i am doing wrong because i have still Low ID on aMule. I have action.AllowaMule and accept tcp 4662:4771 and udp 4672. Thanks, Mitja

Hi! I installed shorewall shorewall-2.1.7-1 on a newly installed box. When using 1.4 versions I could enable shorewall in ntsysv, now shorewall doesn''t show up in ntsysv? I am running shorewall on a RedHat Enterprise Linux rebuild (www.taolinux.org). Is this a bug or a feature?

Hi, My main gateway is a router running on OpenWrt Barrier Breaker r37816/ Kernel Version3.10.4. I installed shorewall-lite from openwrt''s repo using opkg but while trying to start shorewall-lite I get the folowing errors: The first error i got was "scp: /var/lib/shorewall-lite: No such file or directory" simply resolved by making the folder "shorewall-lite"

Shorewall 1.3.9 is available. In this release: 1. DNS Names are now allowed in Shorewall config files (I still recommend against using them however). 2. The connection SOURCE may now be qualified by both interface and IP address in a Shorewall rule. 3. Shorewall startup is now disabled after initial installation until the file /etc/shorewall/startup_disabled is removed. 4. The

http://shorewall.net/pub/shorewall/Beta ftp://shorewall.net/pub/shorewall/Beta -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hi, New here... I would like to setup shorewall on a dedicated box protecting a mutiple web, mail and dns server in the datacenter. All the ip address will be public ip (No LAN setup). I would also like to do traffic shaping and install Snort as well in the same box. Can Shorewall do all this? Is there any docs on that? Do i need to configure Shorewall as a bridging firewall in order to do

Hi, I have 2 Debian testing boxes running a very similar setup (both running the latest aptosid kernel); on one of them, since the iptables/libxtables10 packages have been upgraded from 1.4.19.1-1 to 1.4.20-2, shorewall-init can''t start shorewall anymore and for this reason ifupdown also fails triggering firewall up. Shorewall can be successfully started later on, and ifupdown starts

Until further notice, I will not be involved in Shorewall development or support. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.sf.net Washington USA \ teastep@shorewall.net

This is a minor release of Shorewall. In this release: 1. A "shorewall try" command has been added. This command attempts to restart Shorewall using an alternate configuration and if that attempt fails, Shorewall is automatically started with the default configuration. This is useful for remote administration where a failed restart of Shorewall can leave you isolated from

Hello community ! I have posted here my shorewall recipe: http://reductivelabs.com/trac/puppet/wiki/AqueosShorewall If anyone is interested please test and comment to see if we can improve it ! :) I also updated my facter recipe for VERIO vps servers if anyone interested... :) http://reductivelabs.com/trac/puppet/wiki/AqueosFacterVps Hope that helps ! -- Cordialement, Ghislain

hi, i installed and configured the shorewall-2.0.9 for standalone user interface in fc2,then removed the stop ,stopped and the routestopped files from the /etc/shorewall directory,and run the ''shorewall start'' command,at boot time the messages showing that it is not started,this is the /var/log/messages output fore shorewall: Jan 3 04:13:27 localhost netfs: Mounting other

Hello, I installed my linux server for 3 months now. It does almost everything (dns, web & mail server, firewall ...). I just encounterd two problems with the firewall: behind this server there are 2 computers: i got emule on one and msn on the other. The problem is that I can''t configure well the firewall fore these 2 rules. I''ve added DNAT rules but it