search for: weblet

...horewall (netfilter) logs. The app uses the standard stdin/stdout mechanism. This makes it simple to use in a cgi-bin situation. I (re)wrote the application with the Bering/LEAF (leaf.sourceforge.net) firewall in mind, and I have included the scripts needed to incorporate parsefw into the Bering Weblet application. (weblet.lrp) I also had newbies in mind, so I included text descriptions next to most of the currently exploited ports, and it created HTML links to the "Firewall Forensics" "Firewall FAQ" destination port section. (www.robertgraham.com/pubs/firewall-seen.html) Th...

I''ve installed a bering box acting as a firewall for a lan; the lan is 192.168.1.0/24 the bering box is 192.168.1.254 I''ve installed a squid server 192.168.1.1 It is possible to configure shorewall for a transparent proxy to the squid server? I''ve tryed with REDIRECT loc loc:192.168.1.1:3128 tcp www - !192.168.1.1 in the rules file I get this error: Error:

Dear Shorewall Users, having noticed that the request for a WebGUI is growing, after a very short conversation I''ve had with Tom, I''d like to let you all evaluate the Web interface to Shorewall I''ve written, integrating the original weblet package made available for the LRP project. ---------------------------------------------------------------------------- Preamble Thank you Tom for every nice thing - Shorewall included - you have taugth and given us ---------------------------------------------------------------------------- Feat...

It occurred to me over the last few days that in fact I hadn''t been a model ShoreWall Citizen so I went to the site and visited this link for inspiration: http://www.cityofshoreline.com/about/history/index.html Here I was reminded of just how open source communities are suppose to work. Just like the early beginnings of Shoreline, Tom has brought together many scattered settlements

...vpn3 fw all #ACCEPT fw vpn3 all #ACCEPT vpn3 net all #ACCEPT net vpn3 all # # Bering specific rules: # allow loc to fw udp/53 for dnscache to work # allow loc to fw tcp/80 for weblet to work # .... deleted for brevity.... firewall: -root- # The logs that result from the 8 ACCEPT lines being commented out are: f3:08:00 SRC=192.168.1.3 DST=192.168.1.254 LEN=88 TOS=00 PREC=0x00 TTL=128 ID=21018 PROTO=UDP SPT=5000 DPT=5000 LEN=68 Dec 9 11:18:48 firewall Shorewall:all2all:RE...

...irewall: -root- # cat /etc/shorewall/init if [ -z "`ip rule list | grep www.out`" ] ; then ip rule add fwmark 202 table www.out ip route add default via 192.168.2.1 dev eth2 table www.out ip route flush cache fi firewall: -root- # cat /etc/shorewall/start # # dumping the rules for the weblet so it can run without root rights # chown sh-httpd.adm /var/sh-www/data shorewall show >/var/sh-www/data/firewall chown sh-httpd.adm /var/sh-www/data/firewall shorewall show nat >/var/sh-www/data/masq chown sh-httpd.adm /var/sh-www/data/masq iptables -t mangle -A PREROUTING -i eth3 -p tcp --...