similar to: DNAT net to net (shorewall 3.2.6)

I''ve upgraded a 3-interface system from 2.0.8 to 3.2.6 on Debian, and I''m not able to make DNAT work anymore. If someone could offer a suggestion of where to look to fix this, it would be very much appreciated. Problem Summary: If I set DETECT_DNAT_IPADDRS=Yes, then I can''t access anything on my DMZ via DNAT. If I set DETECT_DNAT_IPADDRS=No, then **EVERYTHING**

I''ve upgraded a 3-interface system from 2.0.8 to 3.2.6 on Debian, and I''m not able to make DNAT work anymore. If someone could offer a suggestion of where to look to fix this, it would be very much appreciated. Problem Summary: If I set DETECT_DNAT_IPADDRS=Yes, then I can''t access anything on my DMZ via DNAT. If I set DETECT_DNAT_IPADDRS=No, then **EVERYTHING**

Please, help me. Can i forbid and how any outgoing traffic (ping,trace) to rfc1918 networks on my external interfaces? Thank you very much. Aleksandr -------------------- Продукция AcmePower - это зарядные устройства, аккумуляторы формата АА и ААА, сетевые адаптеры, аккумуляторные батареи для фото и видеокамер, ноутбуков и PDA. Гарантия минского сервисного центра.

Hi peploe, i am new in the list, i need know, how blocked the Amule/emule in shorewall? My dist. debian version: 3.2.6-shorewall -- .~. / v \ Seja Livre, use GNU/Linux! /( )\ ^^-^^ ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005.

Dear Shorewall Users :-) I''ve been playing with shorewall for some time now - I found it really interesting and easy tool to organise all the rules and so on (beforethat I''ve been using simple iptables rules in shell script ;-) Generally it''s quite easy to be used, but anyway found one problem which I cannot handle myself - or in other words - cannot find appropriate

Hello, We are using shorewall-3.0.7-1, I was tried the video conference server doesn''t via shorewall that was no problem, can I upgrade shorewall version to fix this problem ? our boss need use video conference this few days, so this is emergency. Thx ~~ --------------------------------- Yahoo! 網上安全攻略，教你如何防範黑客! 了解更多

Dear list, Shorewall is running here with 2 ISP''s: ISP1: corporate ADSL-line with fixed set of IP''s ISP2: fast consumer-grade cable-connection with higher bandwidth All our main traffic (web, e-mail) is routed trough ISP1. Only for special purposes (frequent large ftp-transfers) ISP2 is used, configured trough tcrules. ISP2 is not so reliable as ISP1 (duh) and they sometimes

Hello Tom. Sorry, don't answer on my previouse letter, i forget to set subject. I fix this in current. And now about my question. I ask you before about method of stopping RFC1918 traffic on external interface and you advised me follow rule: REJECT! all net:$RFC1918_NETS Can i replace this rule by 'norfc1918' option in 'interfaces' file for this interface?

Hi George, Thank you for the response. I'm a little unclear on what you mean by a transport. We're using chan_sip, not pjsip. Do you mean a device in sip.conf, using bindaddr to set the address to bind for that device? We've only used bindaddr in the [general] section before, but if it will work in a device that could be the answer. On Fri, 23 Oct 2020 at 00:13, George Joseph

My telco is moving to feeding me over fiber, breaking out with a media converter to one Ethernet interface. At present, I am retaining the static feed over copper on eth0, and taking the two new feeds via vlans on eth1. I have configured the static IP feed on eth1:790 as vlan 790, and that seems to be fine, and eth1:780 as the PPPOE feed, and brought up PPPOE to give me an IP, that is

Hello, We have an Asterisk server with two public IP addresses, let's say 1.1.1.1 and 2.2.2.2. Normally calls come in to 1.1.1.1 and are bridged with a call dialled from Asterisk to an external destination. The external destination sees the SIP packet as coming from 1.1.1.1 and the media address in the SDP is 1.1.1.1, which is great. However if we receive a call in to 2.2.2.2 then the call

I'm using Asterisk on a open server (no firewall or NAT) and trying to communicate with a Grandstream BudgeTone 102 SIP phone which is behind NAT. The BudgeTone is at firmware level 1.0.4.30 and Asterisk is from CVS about a week ago. My problem is that I'm only getting half-duplex communication -- I can hear voice from the Asterisk server but the server does not understand any voice from

thank you very much. this is exactly whats needed for debug example output for your info [Dec 12 15:39:19] DEBUG[2182][C-00000000]: pjproject: <?>:         icess0x7f5d44081e88 .Added new remote candidate from the request: 2.2.2.2:57536 [Dec 12 15:39:19] DEBUG[2182][C-00000000]: pjproject: <?>:         icess0x7f5d44081e88 .New triggered check added: 1 [Dec 12 15:39:19]

https://bugzilla.netfilter.org/show_bug.cgi?id=850 Summary: DNAT applied even after deleting the IP Tables DNAT Rule Product: iptables Version: 1.4.x Platform: All OS/Version: All Status: NEW Severity: major Priority: P5 Component: iptables AssignedTo: netfilter-buglog at

Hi! How I can use L7-Filter (http://l7-filter.sourceforge.net/) with Shorewall? Thank you very much! Bye. ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

OK, thank you George. On Sat, 24 Oct 2020 at 03:16, George Joseph <gjoseph at digium.com> wrote: > > > On Thu, Oct 22, 2020 at 4:13 PM David Cunningham < > dcunningham at voisonics.com> wrote: > >> Hi George, >> >> Thank you for the response. I'm a little unclear on what you mean by a >> transport. We're using chan_sip, not pjsip.

Anybody knows some graphic reporting/analysing program for shorewall 4.0.7 or i have to do it by accounting? -- Javier Martínez Technical Manager ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

Hi I am search a sample config for my linux box: Shorewall 3.2.3 Eth0 => Internet Access 4Mbits on ethernet Eth1 => Lan Eth2 => Lan 2 Eth3 => Lan 3 i want limit the internet access: Eth1 = 2 Mbits Eth2 = 0,5 Mbits Eth3 = 1,5 Mbits but if eth1 don''t use 2 Mbits other lan can use it anyone have a simple sample config for help me ? Thanks bye

Why not use OpenSips/Kamailoo in between? Where you want 1.1.1.1 you pass it along as is. Where you want 2.2.2.2 change the sdp in opensips/kamailio On Thu, Oct 29, 2020 at 20:44 David Cunningham <dcunningham at voisonics.com> wrote: > Hello, > > Does anyone know a way with chan_sip to tell Asterisk to use a specific IP > address for its end of the communication for a specific

I''ve set up a simple 2-interface Linux router using shorewall-perl 4.0.8 (and upgraded to 4.0.9). Everything works flawlessly. One small exception I have noticed (since I''m a new shorewall user I assume this is probably an error on my part). 1. Problem: With no "logmartians" entries in /etc/shorewall/interfaces, shorewall-perl sets