search for: sivamurugu

Hi, In a routed network environment, without the router , we want to use the shorewall as the firewall/router. The ISP has assigned the following set of IP addresses. WAN IP for subnet 1 (DATA) 220.227.202.X/30 ( to be assigned to eth0 of the shorewall) WAN IP for subnet 2 (Voice) 220.227.202.Y/30 ( to be assigned to eth1 of the shorewall) Addresses assigned for Subnet 1 by

Hi, Thanks for your reply . I am attaching the files needed by you herewith. The NAT device is called Pronto gateway which has two interfaces , namely eth0 and eth1. ''eth0'' has an ip address of 203.124.152.66 and eth1 has an ip address of 192.168.1.3 . All the client PCs are in 192.168.1.0 network [behind the NAT, the Pronto gateway] and use 192.168.1.3 as the default

Tom, Is not this query worth answering? -Siva -----Original Message----- From: Sivamurugu K. Pillai Sent: Friday, April 08, 2005 3:14 PM To: ''Mailing List for Shorewall Users'' Subject: ProxyARP in a Routed environment Hi, In a routed network setup , is it possible to use ProxyARP given the condition that the shorewall external interface and the DMZ interface are...

Hi, In a routed network setup , is it possible to use ProxyARP given the condition that the shorewall external interface and the DMZ interface are in a completely different network . That means the gateway of the External interface and the hosts in ProxyARPed DMZ zones are in different network. eth0 ---in 220.227.X.Y/30 -- shorewall external interface eth1 ---in 220.227.A.B/27 -- shorewall

Tom, I use shorewall 2.2.3 with four network interfaces comprising of three zones. I am able to ping some servers from the internet(net-zone) and not others. I do not want to allow ping by default from internet. I have not copied the files action.drop and action.reject into /etc/shorewall. Nor I have a AllowPing rule in rules file. The policy file is pasted below. #SOURCE DEST POLICY

...rt Forwarding (Tom Eastep) 4. Re: Exchange Server in DMZ (Tom Eastep) 5. RE: VPN Passthrough Assistance Needed (Martinez, Mike (MHS-ACS)) 6. Re: Port Forwarding (Ted Gervais) 7. Re: Port Forwarding (Tom Eastep) 8. Re: Port Forwarding (Ted Gervais) 9. Shorewall issue with ProxyARP (sivamurugu) ---------------------------------------------------------------------- Message: 1 Date: Wed, 26 Feb 2003 06:37:44 -0600 From: "i-hacked.com" <hevnsnt@i-hacked.com> Subject: Re: [Shorewall-users] Exchange Server in DMZ To: <shorewall-users@lists.shorewall.net> Message-ID: &...