search for: wans

I thought that the below email would be of interest to LARTC readers. I wasted quite a bit of time tracking down this "feature" (bug?). Any comments that shed light on this would be appreciated. In short, "tc filter" + htb + bridging works only with ip_forward off. Andrew Athan ----------------------------------------------------------------------- All: It seems that

This is a minor release of Shorewall. WARNING: This release introduces incompatibilities with prior releases. See http://www.shorewall.net/upgrade_issues.htm. Changes are: a) There is now a new NONE policy specifiable in /etc/shorewall/policy. This policy will cause Shorewall to assume that there will never be any traffic between the source and destination zones. b) Shorewall no longer

Can someone help me with this problem: My host on the DMZ is inaccessible from the WAN on port 25. I tried to telnet but getting: $ telnet 66.58.99.84 25 Trying 66.58.99.84... telnet: Unable to connect to remote host: No route to host My shorewall/proxyarp is: #address interface external haveroute 66.58.99.82 eth1 eth0 No 66.58.99.84 eth1

Hi list, I can successfully build the driver modules; hdlc, dlci, syncppp, and lmc from the 2.6.18-128.1.14 kernel source rpm, and have managed to create a 'wan kmod' rpm. It all works fine for IPv4, but now I need IPv6 for ppp connections, which doesn't work for me. I think I'll need to back port Krzysztof Halasa's 'ppp for generic hdlc' patches to the

Hi, I''m implementing a linux router with this characteristics: - Multiple adsl with each public ip''s - Multiple LAN ethernets (in a bridge). - Linux IGD I have successfully implemented de 2 first steps, the adsl balanced fine (multipath routing), and the clients bridge fine. My problem is how to use that with linux-igd. My LAN bridge has STP and is implemented for

Hi All, I need to configure a VPN between a FreeBSD-4.8 box and a Linux (FreeS/WAN) box. In the Linux side, the network administrator installed FreeS/WAN with RSA authentication without IKE support. Does anybody knows if is possible to make my FreeBSD box connect a VPN with the Linux box? If so, could point me to a documentation about how to install IPSec with RSA authentication and how to make

Hello folks.. Does any of you know if it is possible to rewrite the ip src in a packet. I have a problem involving a DMZ with external IP addresses routed trough a single WAN IP. When the server initiates a connection, it looks like it comes from the WAN ip instead of it''s designated External IP routed through the WAN. So in short, Is it possible to rewrite the packet in the router,

Since we're on the subject of Samba over the WAN.... (BTW, I'm running three offices with a Samba 3.0.9 PDC and two Samba 3.0.9 BDCs over an FreeSwan based WAN and it works just fine. The WINS server is a must in my book though.) Last Thursday and Friday, one of the remove office's WAN lines went down. While the outages were significant, nothing major happened because of it. But,

Hi List, Does anyone know of a good dual wan router that can handle SIP well and can failover between connections if there is a SIP issue on one of the lines (meaning there still is a connection however there isnt enough bandwith or sip packets arent going thru etc.) ? Thanks. Dovid -------------- next part -------------- An HTML attachment was scrubbed... URL:

Hi all, I''ve a routing problem. I''m setting up a router based on debian (kernel 2.4). I need to setup routing to export an ftp service (ftp server is in dmz) to 2 wan (both). I setup prerouting ad forward rule with no problem. The problem is that reply packet use default gateway (default wan) even though they are enter using the other wan. I solved it marking packets in input

Is anyone using user sets? I''m considering dropping support for them in 2.0 in favor of just listing individual user/groups in the rules file. Thanks, -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hi All, I have a customer that I need to give access to one of our servers over a WAN. Their box is running some windows server version and they use terminal services to let their employees access their applications. We use Samba in or local office environment where it works quite well. I need to know the following: 1) Will Samba work over the internet? 2) Can Samba connections be encrypted or

ClarkConnect Home 3.2 eth0 - WAN - inet - ip:192.168.1.2 gw:192.168.1.1 (connected to my www.woosh.co.nz gatway) wlan - WAN - private community wireless networt - ip:10.252.16.16 gw:10.252.16.1 eth1 - LAN - ip:192.168.2.1 # route add -net 10.0.0.0 netmask 255.0.0.0 gw 10.252.16.1 [root@bowenvale etc]# route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface

hello . i have no problem shaping incoming traffic from WAN how do i shape outgoing traffic to WAN depending on the speed limit of each subnet .... ex: 10.10.6.0 --> 512kbps (DOWNLOAD / UPLOAD) 10.10.5.0 --> 256kbps (DOWNLOAD / UPLOAD) do i have to used forward handle, and used iptables -s 10.10.6.0/24 -d WAN -j MARK --set-mark 101 and used iptables -s 10.10.5.0/24 -d WAN -j MARK

Hello ! sorry for english, but, just don't understand why glusterfs is not destinated to be used over the wan ? I think that if the files are tiny, there's no problem to use this solution over wan.. ? But okay, if file are large.. (don't know .. 100MB - 200MB and more.) i understand that it depend of the internet connection and that's the replication can be so soo soo slow..

Hi, I am having a problem in configuring my machine to use shorewall. Here is my setup Operating System : Mandrake Network Firewall Linux based on Mandrake Linux 8.2 Network Connection : eth0 Connecting to my internal LAN with IP 192.168.1.9 eth1 Connecting to my cable modem with a static IP address 202.88.191.31 When i start with shorewall not configured to

CONFIG_HOTPLUG is going away as an option so __devexit_p is no longer needed. Signed-off-by: Bill Pemberton <wfp5p at virginia.edu> Cc: Rusty Russell <rusty at rustcorp.com.au> Cc: "Michael S. Tsirkin" <mst at redhat.com> Cc: Shreyas Bhatewara <sbhatewara at vmware.com> Cc: "VMware, Inc." <pv-drivers at vmware.com> Cc: Francois Romieu

CONFIG_HOTPLUG is going away as an option so __devexit_p is no longer needed. Signed-off-by: Bill Pemberton <wfp5p at virginia.edu> Cc: Rusty Russell <rusty at rustcorp.com.au> Cc: "Michael S. Tsirkin" <mst at redhat.com> Cc: Shreyas Bhatewara <sbhatewara at vmware.com> Cc: "VMware, Inc." <pv-drivers at vmware.com> Cc: Francois Romieu

Gus: I guess my primary point of confusion is that the non-vpn LAN ip addresses are duplicated in each cluster. So within a cluster, the LAN addresses are unique. But when you look at 2 clusters, 2 different servers share the 10.99.0.11 address. So that is why I created a VPN for inside the cluster on the LAN interfaces using the private 10.0.1.xx range. THen, I created a separate VPN on the

Hi, I am trying to configure the SMTP service on DMZ host. Added the rule: ACCEPT wan dmz:66.58.99.84 tcp pop3 - ACCEPT wan dmz:66.58.99.84 tcp 25 - ACCEPT dmz:66.58.99.84 wan tcp 25 - ACCEPT dmz:66.58.99.84 wan tcp pop3 - issued shorewall clear, shorewall restart, but still couldn''t telnet to the mail server