similar to: Can't access remote workstations without MASQUERADE

Hi I have using a Bering (LRP) box with shorewall, and I must enable IP masquedare only a few hosts on my network. I want to enable only masquerade from 192.168.0.2 to 192.168.0.25. What I must do ? I known that I have to configure the /etc/shorewall/masq file, but I don''t known how. Thanks in advance.

Hi. I'm new in Asterisk with MGCP. I set up a MGCP user agent and start asterisk with the next configuration files. '--------------- extensions.conf ---------------------------------------------------- [general] static=yes writeprotect=yes [globals] ap1 => mgcp/aaln/ap200@64.76.148.186 [macro-apl1] exten => s,1,Dial(${ARG1},30,Ttmr) ;exten => s,2,Voicemail(u${MACRO_EXTEN})

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi!, ok here is my question, I have 2 ISP''s connected to the firewall, and I already set up th routing tables, I have a 256k and a 1.5m connection, and I want a couple pcs from the internal network to masquerade through the 256k connection and the rest through the 1.5m connection, how do I setup this on shorewall??? I am not subscribed to the

Hello guys I don''t know if this thing has been posted before (if it was , please forgive me). I have 7 computers at home and I want all of them to have access to the internet. In order to do that , I set up a linux router (2 network cards) as a usual router (eth0 : 82.77.69.75 - internet connection ; eth1 : 192.168.10.1 - local network) . The other computers have ips ranging from

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=64 Summary: Conntrack-Table is not cleared on inferface down using target MASQUERADE Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: other Status: NEW Severity: normal Priority: P2 Component: NAT

Package: xen-utils-common Version: 3.0.3-0-2 Severity: normal I'm not an expert in networking but I think that the current setup when using network-nat for domains is insecure. I've configured : (network-script 'network-nat netdev=eth1') (vif-script vif-nat) So when only domain 0 is started, I get the following : # iptables -L -n Chain INPUT (policy ACCEPT) target prot

Dear list members, Masquerading does''not work for me. This is a Mandrake Linux 10 system, but I use another kernel, that included in the original distribution (original: 2.6.3, now used 2.6.8 because of a lot of suck with OpenSwan with kernels prior 2.6.4). The problem seems to be similar or identical mentioned here:

Dear all, I''ve the following problem with routing + NAT: If I''ve two ISP and I''m using two nexthop in default route with MASQUERADE on both ISP links, I see routing cache regenerated, but sometimes packets sent to a new link (after cache regeneration) uses wrong source address for masquerading. Here is the config. I''ve two links to outside via two

https://bugzilla.netfilter.org/show_bug.cgi?id=821 Summary: Rosa Product: iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: iptables AssignedTo: netfilter-buglog at lists.netfilter.org ReportedBy: andoandre at gmail.com

my network: local pc(192.168.1.2)-->openwrt_adsl_router A( 192.168.1.1/24&11.22.33.44pppoe&10.10.10.1/24 tinc)<---remote B: 10.10.20.1/24 ^ | remote C:10.10.0.1/24 all running tinc 1.0.x, ADSL router

https://bugzilla.netfilter.org/show_bug.cgi?id=1105 Bug ID: 1105 Summary: masquerade fully broken when no prerouting chain is created Product: nftables Version: unspecified Hardware: x86_64 OS: other Status: NEW Severity: major Priority: P5 Component: kernel

Hi all, I'm observing an issue that as soon as libvirt starts, UPD broadcasts going through physical network (and unrelated to any virtualization) get broken. Specifically, windows neighbourhood browsing through samba's nmbd starts suffering badly (Samba is running on this same box). At the moment I'm running a quite outdated version 1.2.9 of libvirt, but other than this issue,

I have a server that is also a firewall router at a public library with a fiber optic Internet connection. It is running kernel 2.6.32-642.4.2.el6.x86_64 (current CentOS 6.8) and Iptables 1.4.7 (current stock CentOS 6.8). I having trouble with Internet throughput. I am supposed to be getting 20Mbits down and 20MBits up, but I am not getting that. It has no problem doing 20MBits down, but for

Hi Daniel and Laine, [...] >> -A POSTROUTING -o br0 -j MASQUERADE >> -A POSTROUTING -o enp0s25 -j MASQUERADE >> -A POSTROUTING -o virbr2_nic -j MASQUERADE >> -A POSTROUTING -o vnet0 -j MASQUERADE > > *None* of those rules were added by libvirt (unless your build of [...] > You can verify my "counter-claim" by running "virsh net-destroy" for all

Hi Here is a short description of my network: ppp0 (adsl) ppp1 (adsl) | | | | --------------------- | Router | | Firewall | | MASQUERAD | | DNAT | | | | eth0 | --------------------- | | | ---------------------- |

Hi all, I have read and done the LARTC HOW-to and almost everything work''s execpt from the inside network. When load balancing over the two access it only work on the linux router/nat machine 1) I am running stock mandrake kernel 2.6.8.1-12mdk and using stock shorewall config 2.0.8 2) I have two internet link and two internals link. Load balance setup work for the linux router/nat

Hello! I've setup tinc almost succesfully, but there is one problem remaining with a routing issue. Short Description of the situation : Workstation A (192.168.1.3) | | Tinc Host "50K" (192.168.1.1) | | <Unknown Firewall> + + + <Masq Firewall (Linux)> and Tinc Host "oeoe" (192.168.2.1) | | Workstation B

https://bugzilla.netfilter.org/show_bug.cgi?id=958 Summary: MASQUERADE does not work on recent kernels Product: netfilter/iptables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: major Priority: P5 Component: NAT AssignedTo: netfilter-buglog at lists.netfilter.org

I use since a lot of time a "classical" two-interfaces setup, with the net interface connected to an ADSL modem in half-bridge mode, which receives a public IP from the ISP and gives it to the Linux net interface; the lan interface has the 192.168.30.0/24 class. Now I need to change this setup, because my new ISP (that will switch soon to a FTTS VDSL2 connection) sent me a VDSL2

Hi, this might be a dumb question, but I''m not finding much information online. I''m trying to setup a 2.6 linux box to run nat across multiple upstream links as a simple way to aggregate bandwidth. I found the instructions in lartc section 4.2 (http://lartc.org/howto/lartc.rpdb.multiple-links.html) fairly clear and straightforward. I implemented those, and a couple of trivial