Displaying 20 results from an estimated 20000 matches similar to: "Shorewall in Mandriva"
2009 Nov 24
9
initial SW config, failing the "shorewall check"
I''m following the document;
<http://flurdy.com/docs/postfix/>,
and
SSH only
By default Shorewall in Ubuntu has an empty set up. You can find the
default values for Shorewall in
/usr/share/doc/shorwall-common/default-config. And examples in
/usr/share/doc/shorwall-common/examples. We will create a basic set up.
First configure which network adapters we are accessing the net.
cp
2009 Aug 12
6
Shorewall (Openswan) IPSEC VPN MASQ Problem
Hi,
I have setup a IPSEC VPN using Openswan to connect a Draytek router to a
CentOS 5.2/Shorewall 4.2.9 firewall. The VPN establishes OK but I''m
getting a problem with packets from the left hand subnet getting
masqueraded rather than routed down the IPSEC VPN as though they were
going out onto the net. I''ve spent the last day searching Google and so
far I''ve hit a
2009 Aug 29
10
Combatting DDoS attack
Hi,
I''ve been working the past 8 hrs combatting DDoS attacks on websites and dedicated servers I host for clients.
They''re hitting one specific IP address, but coming from thousands of external IP addresses.
I use:
shorewall-4.0.10-3.noarch
How can I tackle this? I''ve blocked many subnets in the blacklist file but it''s made very little difference.
If
2009 Nov 25
7
Multiple ISP Routing Application Error
I''m getting an error when shorewall is trying to add the default routes
for my multi-isp configuration. I''ve attached a shorewall dump... If
anyone can give some input I''d appreciate it.
RTNETLINK answers: Invalid argument
ERROR: Command "ip -4 route replace default scope global table 254
nexthop via 67.110.119.245 dev eth3 weight 1 nexthop via 66.29.181.113
2009 Aug 21
2
Multiple interfaces in a zone (not a standard case)
Hi,
This subject has been brought up in the forum, but it''s a bit different.
If I have a set of tun interfaces. I already defined tun+ as zone A, and I have excluded tun15 as zone B (a subset of zone A).
I need to add tun16 to zone B.
My config:
/etc/shorewall/interfaces:
A tun+ - routeback
B tun15
/etc/shorewall/
A ipv4
B:A ipv4
I tried to define in
2009 Nov 21
5
WG: Policy make troubles once multiple zones are applied
OK - I figured out what it is but maybe someone can give an explanation
here.
If I use he multiple zones configuration I have to do in addition
Hosts
v3005 vlan3005:0.0.0.0/0
And of course this seems to be very logic since this means all ip´s on the
internet.
But I am still confused a lot why this is the first time I have to do it
after using Shorewall over years without to be forced to say
2009 Nov 26
1
Shorewall, OpenVPN, Routing - more a routing(?) problem ...
Hi,
I don''t know any other group of routing gurus like the members of this
list, so may be you can give me some hints.
I do have a shorewall firewall up and running, openvpn is installed on
this server too and is working fine so far except one new situation:
I have set up a new local vlan, which I can access from my other local
vlans, but not from the opnevpn-vlan.
All "old"
2009 Sep 04
1
Upgrade RH EL 5.3 -> 5.4 works - shorewall 4.2.10
Hi,
I did an update from Red Hat EL 5.3 to 5.4.
Everything works so far. May be somewone would like to know....
iptables-ipv6-1.3.5-5.3.el5
kernel-PAE-2.6.18-164.el5
shorewall-4.2.10-3
shorewall-perl-4.2.10-3
Regards,
Götz
--
Götz Reinicke
IT-Koordinator
Tel. +49 7141 969 420
Fax +49 7141 969 55 420
E-Mail goetz.reinicke@filmakademie.de
Filmakademie Baden-Württemberg GmbH
Akademiehof
2009 Aug 26
2
shaping torrent traffic
hi
who can ever help me out with the shaping of torrent traffic?
i have a pptp at ppp0 over eth0 (10.0.0.1/8)
i would like to shape outgoing traffic of rtorrent on these two
interfaces, assume rtorrent is running at port 6999
need 3mbit for ppp0 and 50mbit for eth0
i supposed:
[tcclasses]
ppp0 1 2mbit 3mbit 1
eth0 2 20mbit 50mbit 2
[tcrules]
1 0.0.0.0/0 0.0.0.0/0 tcp
2009 Aug 29
2
ipv6
Hello,
I''m reading this guide on ipv6 (really just getting my "feet wet"):
http://www.shorewall.net/6to4.htm
In the section "Configuring IPv6 using my script" I can read that the IPv6 interfaces are:
INTERFACES="eth2 eth4"
and that correlates fine with the first diagram/figure.
However, further down I read "You will notice that sit1, eth0 and eth2
2009 Aug 25
1
[PATCH] A default log level of ULOG is ignored by the shorewall-perl compiler (but not by shorewall-shell)
Hello,
I tried Shorewall for the first time today. I am currently using an up-to-date
installation of Debian Sid, which has shorewall 4.2.10, shorewall-shell 4.2.10
and shorewall-perl 4.2.10.1.
I noticed that even though I had the following /etc/shorewall/policy file,
iptables would still show LOG rules at the end of the INPUT and OUTPUT chains
instead of ULOG rules. (Other logging related rules
2009 Aug 18
3
Rules based on ipmasq
Hi,
I had installed squid with ntlm authentication and content filtering
from this tutorial:
http://www.howtoforge.com/dansguardian-with-multi-group-filtering-and-squid-with-ntlm-auth-on-debian-etch.
Next to last point is firewall configuration by ipmasq but I have
installed shorewall. This is content of I89tproxy.rul file:
#!/bin/sh
#
# redirect http requests to non-local hosts to the
2009 Oct 30
4
traffic shaping with two internal interfaces
Hi,
my shorewall is version 4.0.15 on Debian Lenny. I have 3 following
interfaces:
eth0 net (4mbit/512kbit)
eth1 loc (100mbit)
eth2 loc (100mbit)
I want to shape traffic from net on two lan interfaces like:
- default is 2000mbit for each local interface
- if is no traffic on eth1 is 4mbit for eth2 (and vice versa)
My tcdevices
eth0 4000mbit 512kbit
eth1 -
2009 Aug 06
1
Potential patch for KVM.xml
First patch ever proposed, if this is the incorrect medium or format
please forgive my ignorance and correct me.
--- KVM.xml 2009-08-06 16:11:03.000000000 -0500
+++ KVM_new.xml 2009-08-06 16:11:26.000000000 -0500
@@ -82,7 +82,7 @@
<para>With this configuration, and with only a single network
interface on
the laptop, this is just a simple <ulink
-
2009 Jun 10
6
Shorewall + IPsec Tunnel
Hi everyone!
First of all, sorry about my bad English and the e-mails extension.
I need some help to implement a VPN connection using shorewall and openswan
as IPSec Tunnel.
My network map:
CLIENT VPN APPLIANCE --> +++INTERNET+++ --> FIREWALL --> OPENSWAN SERVER
(DMZ)
I have two VPN connections with two different subnets to the other end. The
two of then are correctly established.
2009 Jun 18
9
Redirect port 80 away from Shorewall?
Hi There,
Due to shortage computer, I need to install Apache to my Shorewall box (192.168.1.1)
But the real web server is on another box (192.168.1.2)
I tried to put rule:
DNAT net loc:192.168.168.1 tcp 80
But everytime www connection coming in, it will hit my shorewall
Any solution?
Cheer
Access Yahoo!7 Mail on your mobile. Anytime. Anywhere.
Show me how:
2009 Jun 13
5
Why not allow any:<ip>?
I''ve been digging through the various manuals and am a bit irritated with
limitation on the rules system
Why do I have to specify a source zone to allow a source IP range on all
zones? There is no iptables requirement for anything more than a source
address, so I don''t understand why all:<ip> does not just add an accept rule
into the head of the INPUT chain or even simply
2009 Jun 14
6
Access to Server frm authorized range of IPs only
Guys,
i know i saw this somewhere but i cant seem to locate that info now...
Scenario:
...............
I have a simple two interface firewall. The firewall machine also provides some services to the LAN and to the NET.
What i would like to do is allow only a particular range of IPs frm the internet to access those services.
What do i need to do with my ''rules'' file. Ideally
2009 May 15
3
Allowing traffic within same zone on multi-subnet interface
Hi list,
I''m struggling with this problem for a long time, hopefully someone
can explain me what I''m doing wrong:
I have a shorewall installation with
interfaces
net eth0
- eth1
hosts
loc 10.0.10.0/24
loc 10.0.20.0/24
+some other zones and subnets
there are aliases on eth1 for gateways for the two loc subnets
eth1:1 10.0.10.1
eth1:2 10.0.20.1
Everything works fine, loc
2009 Jun 17
2
Issues with dhclient support in 4.2.8
While troubleshooting my MultiISP box, I suspect I might have found
either a bug or an incompatibility with CentOS 5.2.
In prog.header (function detect_dynamic_gateway), Shorewall tries to look for:
/var/lib/dhcp/dhclient-${1}.lease
However (at least under CentOS 5 - unknown about other OSes), this should be:
/var/lib/dhclient/dhclient-${1}.leases
(different path, and "leases"