similar to: macro for dnat through alternate public ip (alias)

Hello *, a simple question. Is there something similar to iptables-apply in shorewall? ciao, a. ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead

Hello all, I have an asterisk sip/iax peer behind a linux gateway doing nat. I''m using pppoe with a dynamic ip that changes frequently. The problem is when the line drops the sip/iax registrations drop as well, and they don''t register thereafter. When I check the conntrack entries, I noticed the entries still have the old wan ip address and because of keepalive (i''m

Hi, my shorewall is version 4.0.15 on Debian Lenny. I have 3 following interfaces: eth0 net (4mbit/512kbit) eth1 loc (100mbit) eth2 loc (100mbit) I want to shape traffic from net on two lan interfaces like: - default is 2000mbit for each local interface - if is no traffic on eth1 is 4mbit for eth2 (and vice versa) My tcdevices eth0 4000mbit 512kbit eth1 -

Hi, This subject has been brought up in the forum, but it''s a bit different. If I have a set of tun interfaces. I already defined tun+ as zone A, and I have excluded tun15 as zone B (a subset of zone A). I need to add tun16 to zone B. My config: /etc/shorewall/interfaces: A tun+ - routeback B tun15 /etc/shorewall/ A ipv4 B:A ipv4 I tried to define in

Dear shorewall users: I am going to implement VPN IPSEC pass through. Got shorewall as the main firewall interfacing the internet. I found Tom''s documentation on how to do it. The question is: there''s an argument that VPN pass through (pass through NAT) will undermine the importance of AH (source: freeswan site). Is it true? ------------------------ Lito Kusnadi

Hi everyone. I am so baffled by the following problem: Office 1 is using ADSL and it is building a VPN tunnel with IPSEC to Office 2. Both ends are using shorewall/freeswan firewalls. Diagram: Office1 fw --- VPN TUNNEL --- Office2 fw --- cisco router ----- VLANS | DMZ Office 1 has the following interfaces: 2: eth0:

Hi. I am trying to force some traffic that goes to address 203.7.93.94 through a VPN tunnel. I use freeswan 1.98b and Shorewall 1.4.6c in one machine. The 203.7.93.94 is in the DMZ on the other end. (Both ends use the same shorewall and freeswan). I have successfully set up a tunnel between the two network (using a point to point topology, not hub). I added a static routing that redirect

Hi, I''ve been working the past 8 hrs combatting DDoS attacks on websites and dedicated servers I host for clients. They''re hitting one specific IP address, but coming from thousands of external IP addresses. I use: shorewall-4.0.10-3.noarch How can I tackle this? I''ve blocked many subnets in the blacklist file but it''s made very little difference. If

R-Listers. The following is a rant originally sent privately to Frank Harrell in response to remarks he made on this list. The ideas are not new or original, but he suggested I share it with the list, as he felt that it might be of wider interest, nonetheless. I have real doubts about this, and I apologize in advance to those who agree that I should have kept my remarks private. In view of this,

Hello all, I'm new to asterisk. Our company wants to setup an asterisk server and will eventually move to IP centric phones, but they don't want to just throw away the old Siemens PBX, so during the process we want to integrate it with asterisk. Is it possible? and how? thanks. Lito -------------- next part -------------- An HTML attachment was scrubbed... URL:

Hello, First , thanks to Tom for it''s great job ! Netfilter is really easy and powerfull with shorewall. So, I have configured two firewalls whith shorewall using keepalived for the redundant VRRP stuff. FW-a is MASTER and FW-b is BACKUP. Everything works correctly and FW-b upgrade to MASTER when FW-a is down or disconnected. FW-b downgrade to BACKUP when FW-a comes back. But when I

Can someone point me for good VRRPD (rfc2338) implementation on linux. Some stable and live project Thanks _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Hi all, I'm confused, in digium website, it says: TDM2400P: It supports a combination of up to 6 FXS and/or FXO modules for a total of 24 lines. 6 plus 6 is 12, how come it's 24? if I have 24 PSTN lines, i'll be needing 24 FXOs. Pls. elaborate. thanks. Lito -------------- next part -------------- An HTML attachment was scrubbed... URL:

Hi!I've a question: I've 2 asterisk, I want pull the ethernet wire and then reconnect it after 5 second, using the VRRP protocol, where must I set the IP for the connection goes on the second asterisk? I want this: I call to asterisk1, then I pull the ethernet wire down, vrrp makes up the other asterisk but not the audio streaming...the callers are always pointed to asterisk1, but for the

BSD/OS issues with 1.0.2a dev make tests [ -d `pwd`/regress ] || mkdir -p `pwd`/regress [ -d `pwd`/regress/unittests ] || mkdir -p `pwd`/regress/unittests [ -d `pwd`/regress/unittests/test_helper ] || mkdir -p `pwd`/regress/unittests/test_helper [ -d `pwd`/regress/unittests/sshbuf ] || mkdir -p `pwd`/regress/unittests/sshbuf [ -d `pwd`/regress/unittests/sshkey ] || mkdir -p

Hello all, is it possible to define a pilot number in asterisk, say I have 3 direct lines and I want one of those direct lines to be used as pilot number? When that number is contacted it will be redirected to the available zap and original zap that receive it will be freed to receive another call. It can only be used when all 2 lines ares used. Thanks. Lito -------------- next part

Hi! I' ve this problem: I've 2 asterisks box, asterisk11 and asterisk12, and one wi_fi phone. I call from wi_fi to a X-lite phone on a windows xp.I've setuped the X-lite to my vrrp IP (vrid IP) and the call is ok, I call from the wi_fi to X-lite and from the X-lite to wi_fi. In asterisk panell is all ok, and I listen the voice to the xp and in the wi_fi phone. asterisk12 is my master.

Hi. Is anyone using conntrack-tools to implement gateway failover on a network with windows clients? I set it up with ucarp and keepalived, and found that gratuitous ARP doesn''t always seem to update the cache on Windows machines. It works the first time, but if a second failover happens, the client continues to send stuff to the wrong MAC address. Linux machines work fine.

Hey guys, I'm trying to install keepalived 1.2.19 on a centos 6.5 machine. I did an install from source. And when I start keepalived this is what I'm seeing in the logs. It's reporting that the VRRP_Instance(VI_1) Now in FAULT state. Here's more of that log entry: Sep 29 12:06:58 USECLSNDMNRDBA Keepalived_vrrp[44943]: VRRP Instance = VI_1 Sep 29 12:06:58 USECLSNDMNRDBA

If you are having trouble reading this email, read the online version<http://now.eloqua.com/es.asp?s=491&e=78675&elq=55426a8b6c714f5bb6f2bf4b5d37bf55> . <http://app.en25.com/e/er.aspx?s=491&lid=215&elq=55426a8b6c714f5bb6f2bf4b5d37bf55> Dear Lito, *The information in this email is given to you in advance to make you aware of an impending product release