similar to: accept ping only from certain ips

I want to use lastest version of Shorewall in my fresh debian squeeze instalation, so I follow http://www.shorewall.net/Install.htm#Debian but, modify preferences file was not enough for me, I have to modify/add some other files in /etc/apt/ directory: 1.) include testing repo to source.list 2.) add APT::Default-Release "stable"; to apt.conf and pinning all other packages to stable

Hello all, I''m using shorewall on a linux machine that has two interfaces, eth0 being connected on the internal network (10.10.10.0/24) and eth1 being connected to the external network. On eth0 the IP is statically configured to 10.10.10.254 and there is a dhcp server running for the machines in the private network. On eth1, the IP is dynamically assigned by my ISP modem that acts as

Hi, I am building a firewall that will have two groups of subnets behind it which I''ll provision via vlans. The upstream provider will be supplying a router with a single interface with two subnets routed into it, one is a private connection to the corporate WAN and the other is a public (Internet) block. One group of subnets behind the firewall will be SNAT''d out through a

hello before asking my question I come My name is Santiago and I''m from Spain but I''m in Colombia I followed this guide: https://www.doas.montanalinux.org/proxmox-ve-with-shorewall.html but when I run shorewall check, this error occurs: Checking... Initializing... Determining Zones... IPv4 Zones: net loc Firewall Zone: fw Validating interfaces file... ERROR: Invalid

Le mardi 21 juin 2011 15:32, Tom Eastep a écrit : > -------- Forwarded Message -------- > From: Tom Eastep <teastep@shorewall.net> > Reply-to: Shorewall Users <shorewall-users@lists.sourceforge.net> > To: Shorewall Users <shorewall-users@lists.sourceforge.net> > Subject: Re: [Shorewall-users] routestopped 4.2 to 4.4 > Date: Mon, 20 Jun 2011 13:37:02 -0700 >

Hi, At office, we have I ISPs. I want to lightly monitor each link latency in order to decide several routing. For that, I have only one external server: 1 IP, it's an OVH dedicated server. The quick picture is http://s24.postimg.org/n3436z64l/defaul_route.png Default route is via ISP1. If OVH-server pings IP1: - the request will go through ISP1: it's OK - the reply will go through

Hi, my new server doesn''t find his node *whereas i did the same for my others servers and it works on them*. My key is generated and signed by my master (i had had to add my puppetmaster in /etc/hosts). My node : *node ''vpsXXXXX.ovh.net'' { * * * *}* * * It''s save in vpsXXXXX.ovh.net.pp in puppet/manifests/nodes and in my site.pp i include nodes/* . When i

The following patch adds ocfs support to blkid. --rusty # This is a BitKeeper generated patch for the following project: # Project Name: Ext2 filesystem utilities # This patch format is intended for GNU patch command version 2.5 or higher. # This patch includes the following deltas: # ChangeSet 1.1327 -> 1.1328 # lib/blkid/probe.c 1.15 -> 1.16 #

hello every body my connexion on ovh to pass in UNREACHABLE and not reidentified were not reboot the server. [Apr 7 20:17:21] NOTICE[19947]: chan_sip.c:15605 handle_response_peerpoke: Peer 'ovh' is now Lagged. (2067ms / 2000ms) [Apr 7 20:17:35] NOTICE[19947]: chan_sip.c:19829 sip_poke_noanswer: Peer 'ovh' is now UNREACHABLE! Last qualify: 2067 but my probleme is the adress

Hi, we want to upgrade our infrastructure and are considering renting two different types of server by a provider: - A: one is with 80 GB SSD (and 12 GB memory) http://www.ovh.co.uk/products/eg_ssd.xml - B: the other with 750 GB SATA2 (and 8 GB memory). http://www.ovh.co.uk/products/eg_best_of.xml The target infrastructure will host: - a few public web sites (PHP / MySQL) - a development

Hello, I'm trying to set up IP aliases within a QEMU/KVM guest on CentOS 5.5 x86_64, going through a bridged virtualized interface. The virtualized interface in the guest is configured as follow: # ifcfg-eth1 DEVICE=eth1 BOOTPROTO=none PEERDNS=yes GATEWAY=IP.OF.HOST.GATEWAY HWADDR=11:11:11:11:11:11 IPADDR=IP.OF.GUEST.ETH1 NETMASK=255.255.255.255 ONBOOT=yes ARP=yes USERCTL=no IPV6INIT=no #

I don't know if it's useful to report this: (& who should I report it to?) # yum update [...] * base: mirrors.ircam.fr * extras: mirrors.ircam.fr * fasttrack: mirror.ovh.net * remi-ff: rpms.famillecollet.com * updates: centosq3.centos.org base | 3.7 kB 00:00 cr | 2.9 kB 00:00 extras | 3.4 kB 00:00 fasttrack | 3.4 kB 00:00 Not using downloaded repomd.xml

Hello: I'm trying to track down a kio_http problem using CentOS 6.4 with KDE. This causes multiple kio_http procs to spawn and lots of notifications. Several steps are needed: Create a foo.html with an href foo.html <html><head>Test</head><body><a href=http://ovh.com>http://ovh.com</a></body></html> [^] Use html2ps then ps2pdf to create a PDF

rsync'ing ain't working for me. Is this the right syntax? rsync -avrt rsync://mirror.ovh.net/centos/5.4/updates/i386 --exclude=debug/ updates/ rsync: getaddrinfo: mirror.ovh.net 873: Temporary failure in name resolution rsync error: error in socket IO (code 10) at clientserver.c(107) [receiver=2.6.8] -- John Maclean 07739 171 531 MSc (DIC) Enterprise Linux Systems Engineer

Am 22.11.2014 um 12:51 schrieb Andreas Sikkema: >> but as soon as I configure another sip registration on another server, >> outgoing >> calls drop after 32 seconds. > Are both your servers behind the same NAT router? > thanks for taking part... I don?t know... one is siptrunk.ovh.net and the other one is sip.ovh.fr how can i determine and how could that affect... I

I am attempting to use the Knock.pm from http://www.shorewall.net/ManualChains.html I am not having much luck making the DNAT- knock work for some reason. Anyone else using this on 4.4.4 that can verify if this still works as documented? Thanks ------------------------------------------------------------------------------ Return on Information: Google Enterprise Search pays you back Get the

There are massive attacks on specific port, I want to trap and log just the ip source to this port. Is there anyway to do so with shorewall? Thanks. Willy Mularto sangprabv@gmail.com ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev

Hello, I have 2 ISP uplinks (zones: inet1 and inet2), each with a fixed IP on the outside and a routed subnet (/25 and /26) on the inside. So, behind the firewall i have 2 networksegments (lan1 and lan2) with public IP-addresses. The segments are completely isolated from eachother: hosts in zone "lan1" connect only to "inet1" and hosts in zone "lan2" only connect

Hi folks, I have a server at Soyoustart.com (which is a brand of OVH). I run CentOS 6.7 and have problems with network configuration. I want to add a second public ip (failover ip) to the server and did follow the instructions in the CentOS-section of http://hilfe.ovh.de/AdministrationIpAliasHinzufuegen After executing the required steps I'm not able to reach the host via the second ip

Hi Yves.. This may be silly... but what is the useragent of your sip configuration? In the case that useragent has some special characters like "(.", please remove it and tell us if there is any change!!. Regards. rv 2014-11-22 14:50 GMT-03:00 Eric Wieling <EWieling at nyigc.com>: > Try setting directmedia=no in sip.conf. > > -----Original Message----- > From: