Displaying 20 results from an estimated 2000 matches similar to: "Re: Shorewall-users Digest, Vol 50, Issue 25"
2010 Aug 05
1
Correct way to use quagga and shorewall
Hi,
I''ve setup quagga on a shorewall firewall server.
The only purpose for this is to use BGP to connect to a "peering platform" supplied by our data centre supplier.
There are some very large ISP''s (and other various providers including google) on this peering platform and connecting to it will speed up access to/from our services and hosted servers.
The physical
2008 Jan 10
5
Want to log all ISP traffic to ULOG
I want to use fprobe-ulog (http://fprobe.sourceforge.net/) to generate
NetFlow information about traffic going through my router. The question
is how to get the logging rules added to the appropriate chains (I''m
assuming eth2_in and eth2_out in my case)? I''m using the perl version
of shorewall 4.0.6.
--
Orion Poplawski
Technical Manager 303-415-9701
2004 Feb 01
4
Shorewall 2.0.0 Alpha2
http://shorewall.net/pub/shorewall/Alpha/shorewall-2.0.0
ftp://shorewall.net/pub/shorewall/Alpha/shorewall-2.0.0
See if this change to proxy arp is more palatable.
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@shorewall.net
2004 Jul 23
4
shorewall 2.0.3a, (ULOG) doesn''t log anything
Dear all:
Im using shorewall 2.0.3a (debian) w/ ULOG. shorewall starts ok, and the
firewall is running, but nothing is printed on the logs.
I try, for example, to do a connection to a port that is opened on the
server but closed by the FW and I get a connection refused. If I stop
the firewall, this port is accesible from the outside.
I think I''ve followed all the steps on
2004 Feb 17
12
Metalog and Shorewall
Hi Tom and list,
Still trying to set up Shorewall logging. I understand that Shorewall require syslog to get logging working, however I have metalog. Is this
possible to use metalog as logging facility for Shorewall? I was reading
http://www.shorewall.net/shorewall_logging.html and it describes other
method ( ULOG ). I understand that I have to compile ULOG support in the
kernel... where do I
2004 Aug 08
1
using ULOG
hi,
if i would like to use ulog (in order to split netfilter messages from
other kernel messages), than i have to set all loglevel to ULOG? and
then is there any way to define diferent loglevel for eg. maclist?
thanks in advance.
yours.
ps. it''s a bit confusing that all loglevel parameter name is LOG_LEVEL
except BLACKLIST_LOGLEVEL:-(
--
Levente
2004 Dec 16
9
Some help for a beginner please: terser logging
Dear newfound friends,
please be patient. For me reading and writing in English is more painful
than dissecting IP traces :)
I have tried reading through the FAQ but could not quite understand:
I would like the logs to be terser. I think I can live without MAC, LEN,
TOS, PREC, TTL, ID fields normally (maybe need them only in special
situations). Could not understand if/how I can achieve this.
2013 Aug 31
23
ERROR: Log level INFO requires LOG Target in your kernel and iptables
Hi,
I have 2 Debian testing boxes running a very similar setup (both running
the latest aptosid kernel); on one of them, since the
iptables/libxtables10 packages have been upgraded from 1.4.19.1-1 to
1.4.20-2, shorewall-init can''t start shorewall anymore and for this
reason ifupdown also fails triggering firewall up.
Shorewall can be successfully started later on, and ifupdown starts
2004 Dec 18
2
UNDI NDIS DOS Driver
I found the 3Com one, but I'm looking for the intel one. The PXE PDK
doesn't have it anymore, and the intel site points me to the proboot.exe
archive, which has no *.dos files in it. Does anyone know of other generic
drivers for dos that work with memdisk's keeppxe option?
2011 Oct 19
5
Instalation of lastest version of Shorewall in Debian
I want to use lastest version of Shorewall in my fresh debian squeeze
instalation,
so I follow http://www.shorewall.net/Install.htm#Debian
but, modify preferences file was not enough for me,
I have to modify/add some other files in /etc/apt/ directory:
1.) include testing repo to source.list
2.) add APT::Default-Release "stable"; to apt.conf
and pinning all other packages to stable
2005 Feb 21
12
NAT
Hello,
I installed my linux server for 3 months now. It does almost everything
(dns, web & mail server, firewall ...).
I just encounterd two problems with the firewall: behind this server
there are 2 computers: i got emule on one and msn on the other. The
problem is that I can''t configure well the firewall fore these 2 rules.
I''ve added DNAT rules but it
2006 Dec 15
1
catching DNAT''ed packet
Hi.
I have a Server''s network with some servers in it, all with
192.168.1.0/25 ips. There is also a router in that network with ip
192.168.1.1. This router also connected to a client''s network
10.10.0.0/16 with ip 10.10.100.1.
All services on each server are given their virtual address from one of
two virtual networks 192.168.1.128/28 and 192.168.1.144/28.
192.168.1.128/28 is
2004 Aug 28
1
Logging to Console - this one is different
OK. Let me preface by saying I''ve read
http://www.shorewall.net/shorewall_logging.html;
http://www.shorewall.net/FAQ.htm -- FAQs 6,6a,tb,tc,6d,16,17 and 21;
http://marc.theaimsgroup.com/?l=gentoo-security&m=106040714910563&w=2;
http://www.shorewall.net/troubleshoot.htm; man syslog; man 3 syslog; man
syslogd; man klogd; man printk; man dmesg; skimmed through all of the
2002 Mar 17
2
ulog support in shorewall?
Hi,
I''ve just recently switched off my (lame) hardware firewall onto an
old box running linux 2.4.18, iptables 1.2.6 and shorewall 1.2.9. I''m
kinda new to linux firewalling myself but so far Shorewall has taken
much work from me.
While reading myself into iptables I saw that just recently something
called ULOG (userspace logging) has been implemented in newer kernels
and
2004 Jul 15
3
slight simplification to firewall log_rule_limit code
I think you can change the existing firewall logging code for
log_rule_limit (where you have one case for for LOGRULENUMBERS and
another almost identical case without) down to this slightly shorter
version with no duplication (excerpt):
if [ -n "$LOGRULENUMBERS" ]; then
eval rulenum=\$${chain}_logrules
[ -z "$rulenum" ] && rulenum=1
fi
case
2003 May 20
1
Can't resolve local names - Master Browser Issues? Production servers please help!!!!
I have 4 Linux servers all running samba.
Everything has been working fine until yesterday.
With no changes to the network or to the servers samba has quit working
right.
The problems all relate to samba not being able to look up names against
the master browser.
When I try to mount using a windows pc name I get this error...
[root@fileserver pdk]# mount -t smbfs -o username=pdk,passowrd=XXXXX
2010 Nov 08
15
Can I use shorewell stuff for my problem
Hi all, Im new to shorewell, can anyone guide me whether I can use
shorewell for my work.
I have a requirement in our work:
Each system shall have two Ethernet card interfaces(system means hardware
devices, servers, clients in other words any device or host used in the
project). The IP address of each interface will be of different networks,
subnets and gateways completely. Bcoz if one of
2010 Jan 21
6
Shorewall 4.4.6 and Multiple ISP with 2 routed subnets
Hello,
I have 2 ISP uplinks (zones: inet1 and inet2), each with a fixed IP on the outside and a routed subnet (/25 and /26) on the inside. So, behind the firewall i have 2 networksegments (lan1 and lan2) with public IP-addresses. The segments are completely isolated from eachother: hosts in zone "lan1" connect only to "inet1" and hosts in zone "lan2" only connect
2009 Aug 25
1
[PATCH] A default log level of ULOG is ignored by the shorewall-perl compiler (but not by shorewall-shell)
Hello,
I tried Shorewall for the first time today. I am currently using an up-to-date
installation of Debian Sid, which has shorewall 4.2.10, shorewall-shell 4.2.10
and shorewall-perl 4.2.10.1.
I noticed that even though I had the following /etc/shorewall/policy file,
iptables would still show LOG rules at the end of the INPUT and OUTPUT chains
instead of ULOG rules. (Other logging related rules
2007 Sep 05
6
NAT-aware traffic analysis
I have tried using iptraf for my NAT firewall to analyse the IP traffic.
Basically I am faced with this difficulty of related the source IP
to the outgoing interface to the internet, so I am wondering if
anyone has a suggestion for a different ways to do it, or a suggestion
for a better tool.
Details :-
Supposed : eth0 - LAN
eth1 - WAN1
eth2 - WAN2
And then