similar to: Where to RTFM details of kernel options/parameters.

Javier Fernández-Sanguino Peña has discovered an exploitable vulnerability in the way that Shorewall handles temporary files and directories. The vulnerability can allow a non-root user to cause arbitrary files on the system to be overwritten. LEAF Bering and Bering uClibc users are generally not at risk due to the fact that LEAF boxes do not typically allow logins by non-root users. For 2.0

Hi all, Currently at work we use a commercial product called "Gnatbox", which, I believe, is a BSD derivative running on a floppy disk. They have a pretty UI and all, but I''d feel much safer/happier with a GNU/Linux box and Shorewall doing the same thing. In fact, I''m doing something very close to this at home using Openwrt and Shorewall on my WRT54G router, but I

Hi, I own a UPS HP T750. Is there a driver for this UPS (either serial or USB)? thx kp

Hello all. I created a "plug and play" kind of solution for bridge-based QoS LAN-WAN traffic shaping. Based on the LEAF bering-uClibc branch, I''m calling it ''QBox'' and the project site for now is located at: http://content.cs.luc.edu/projects/comp412/q-box I''m interested in any feedback you might have. This is based off of experience I have over the

What speaks for it and which speaks against it that Firewall and squid run on the same machine? Regards Menki ------------------------------------------------------- All the advantages of Linux Managed Hosting--Without the Cost and Risk! Fully trained technicians. The highest number of Red Hat certifications in the hosting industry. Fanatical Support. Click to learn more

After gaining some experience with the new release model, it has become apparent to me that a small adjustment is warrented. I previously announced that updates to the stable release would only contain bug fixes. I''m modifying that slightly to allow for small low-risk enhancements; large and/or risky enhancements will still be restricted to the development release. We have seen this

Greetings, What programming languages besides shell scripting are used in shorewall? What knowledge is needed to help in shorewall development? I figure iptables is a goood bet but is there anything else as well? Thank you for your time. Regards, Jason

This isn't an esp urgent issue, but I'd like to use a certain RAM diagnostic (Doc Mem) which I've already posted a note about a couple of months ago. Simply won't work booting the floppy disk image via MEMDISK. In the interim, I've tried to resolve this by changing things on my side. I'm pretty sure it's a XMS incompatibility, as it fails differently depending on

Hi Tom,  I´m very glad using Shorewall I proud to say that use it in my whole network (215 Real IP´s over ProxyArp) I can filter everyone have mac-control of then etc etc. Well I´m like a child playing with it :) But now, have a question there is any way to filter or use an Anti-virus in this network ? To drop packets with virus ?? To scan HTTP request ?? Or maybe use Dansguardian ? Did you

On 01/03/2015 08:56 AM, Gene Cumm wrote: > On Fri, Jan 2, 2015 at 3:43 PM, Geert Stappers <stappers at stappers.nl> wrote: >> On Sat, Dec 27, 2014 at 05:07:04PM +0100, Geert Stappers wrote: >>> On Mon, Dec 22, 2014 at 11:06:58AM +0200, Ady wrote: >>>>> On Sun, Dec 21, 2014 at 12:21:32PM -0800, Patrick Masotta wrote: >>>>>> [ ... Failed to

I want to build a robust firewall for a resort installation. The resort''s telephony is entirely VOIP, asterisk based. We have the following internet feeds: 1) 512/512 kb fixed bandwidth leased line with static IP from Telco- primary connection, expensive, to use for VOIP, VPN traffic, mail server, SSH access for remote work. Reliable. 2) 256/512 kb ADSL from Telco, not fixed IP -

Hi, Wich mini Linux distribution do you recommend? My idea is to use Shorewall in a Soekris mother, with some mini Linux installed. Thanks and Best regards, Andrés

--On Wednesday, January 15, 2003 8:57 AM +0000 Julian Church <jc@ljchurch.co.uk> wrote: > Tom > > There''s no reason you should let a complete stranger question your better > judgement, but weren''t you supposed to be taking a break from all of this? > The problem I am having is "Now what do I do with myself in the early mornings and evenings?":

On Sat, Jan 3, 2015 at 12:53 PM, John 'Warthog9' Hawley <warthog19 at eaglescrag.net> wrote: > On 01/03/2015 08:56 AM, Gene Cumm wrote: >> On Fri, Jan 2, 2015 at 3:43 PM, Geert Stappers <stappers at stappers.nl> wrote: >>> On Sat, Dec 27, 2014 at 05:07:04PM +0100, Geert Stappers wrote: >>>> On Mon, Dec 22, 2014 at 11:06:58AM +0200, Ady wrote:

I have been using the LEAF Bering firewall for a year or so. It boots with Syslinux 1.75. But Bering is too large for a 1440KB floppy, so it formats the diskette as 1680KB. Recently I found a small Compaq 2266 box to replace a larger Compaq 7170 to run the firewall. But when I try to boot the Bering diskette on the 2266 I get the following message: Loading Linux ............ Boot failed:

Hello, I am using syslinux to boot a Soekris net4801 into LRP/Lince 1.2 linux. Net4801 has no video card - it has only a serial port. During bootstrap syslinux writes the text file syslinux.dpy to the serial port but it breaks the line every 15th character. I tried syslinux versions 1.66 and 2.11 with same results. In the Archives from June 3, 2002 , there is a message on this subject

>That should work, *IF*: > >a) hda5 is a FAT12/16 filesystem; >b) hda5 is <= cyl 1024. > > -hpa I got thinking booting off a logical partition might not be allowed, so I changed the LEAF/Bering logical partition to a primary, hda4. Then I ran "syslinux d:" from a Win98SE DOS-box to (try to) initialize the partition's boot record. And added this from a

Hi Tom and other gurus, I modified SHOREWALL (version 2.0.15) for bridging and I cannot restart it. I got the following error ... Processing /etc/shorewall/policy... Policy ACCEPT for fw to net using chain fw2net Policy REJECT for fw to loc using chain all2all Policy DROP for net to fw using chain net2all Policy ACCEPT for loc to fw using chain loc2fw Policy ACCEPT for loc to net

being a complete novice with syslinux, I was hoping someone here could help me out. I have a USB Key that I have "broken" into two areas. General storage in the "back" and space for several live distributions on the front. What I need to do now is figure out how to make a syslinux.cfg file that would let me pick which one to boot at startup time. Basically, I want a menu

I was trying out the INCLUDE command within menu.c32 (via pxelinux, actually gpxelinux) and noticed that it's broken. The symptom is that the text is included, as expected, but the subsequent text from the including file is wrong. In some cases it actually pulls from above the INCLUDE leading to the INCLUDE being reprocessed (an infinite recursion). (The recursion seems to stop after 20-30