Displaying 20 results from an estimated 900 matches similar to: "Shorewall and sshdfilter"
2012 Mar 12
8
CentOS6/RHEL6 - net.nf_conntrack_max not applied
2012 Jan 18
5
virtual serveres
I am in the process of building a new machine to replace several older
servers. I am considering running several virtual servers on one box,
all linux for host and virtual machines using VirtualBox.
Is it possible/advisable to configure shorewall on the host to act as a
firewall for the virtual machines, each having one or more static public IP address?
Any pointers, suggestions and/or
2012 Feb 19
3
Shore wall and multi ISPs and ip addresses
Hi All!
I only ever have complex setups.
Customer site has a dedicated leased line from their ISP terminating on a
Cisco router. Router is configuered with the first usable address on a /28
network - 196.x.y.73. The linux firewall is configured with the remaining 5
ip''s, 196.x.y.74 to 196.x.y.78 and 79 as the broadcast. Sounds normal but here
is the twist. The primary or first ip
2012 Jan 19
5
net2fw:DROP for L2TP VPN
Hi, I am trying to get L2TP roadwarrior VPN working from http://www.shorewall.net/IPSEC-2.6.html#RW-L2TP but i am making a mistake somewhere, appreciate a fresh set of eyes to help. I have the following interfaces: ppp0 - interneteth0 - local networkrem - client openvpnl2tp - ppp for lt2p clients
I am getting the following error logged when trying to connect into the server with L2TP from a remote
2012 Jan 21
9
linux kernel 3.2.x gentoo maclist
how to make this work, its seem to me that netfilter is changed more or
less someplaces that shorewall do not support, using 4.4.27 shorewall
and shorewall6
suggestion welcomed
------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99!
2012 Jan 19
3
Problema link balance and internet bank
Hello
Guys I have problem with internet bank. I have 2 Internet links balancing
mode, thus the bank is charging connection down. I tried to force Internet
traffic (port 80 and 443) for only a link, however it did not work.
How do I make a setting to force the connection to these ports for a
specific link.
Note: I can not use the file as route_rules have neither the source IP (ltsp)
nor of
2012 Feb 12
7
Shorewall 4.5.0
The Shorewall Team is pleased to announce the availability of Shorewall
4.5.0.
----------------------------------------------------------------------------
P R O B L E M S C O R R E C T E D I N T H I S R E L E A S E
----------------------------------------------------------------------------
1) This release includes all defect repair included in
4.4.27.1-4.4.27.3.
2) The start
2012 Jan 22
4
Proxyndp issue
Tom
In Shorewall6 4.4.27 the following proxyndp entry:
2001:4d48:ad51:24::f3 eth2 eth0 no no
does not add the required route.
The code produced in /var/lib/shorewall6/.restart is:
qt $IP -6 route del 2001:4d48:ad51:24::f3/128 dev eth2 run_ip route add
2001:4d48:ad51:24::f3/128 dev eth2
Splitting the line into 2 separate lines:
qt $IP -6 route del 2001:4d48:ad51:24::f3/128 dev eth2
2012 Feb 20
5
Upgrade from Shorewall 4.4.27.3 to 4.5.0.1
I''d like to ask for clarification on the upgrade procedure using tarballs. In the past, with version 4.4, I have downloaded shorewall-4.4.x.y.tar.bz2 and shorewall6-4.4.x.y.tar.bz2, extracted each, and executed ''install.sh -s'' in each directory.
Now there is a new package shorewall-core-4.5.x.y.tar.bz2. As I understand it, with version 4.5, this core package needs to be
2012 Jan 16
4
conntrack entries established before nat
Typically (or at least somewhat occasionally) after a reboot of my
shorewall[-lite] machine I find that I end up with conntrack table
entries for unNATted connections such as:
# conntrack -L -p udp --dport 5060 -d 99.232.11.14
udp 17 59 src=10.75.22.8 dst=99.232.11.14 sport=5060 dport=5060 packets=5472 bytes=3031488 [UNREPLIED] src=99.232.11.14 dst=10.75.22.8 sport=5060 dport=5060 packets=0
2012 Mar 12
1
2 Interface router running KVM with virtual hosts
Hi list!
I would like to modernize my server at home which is still running
Shorewall 3. The server will be running CentOS 6.2 but i also want to use
KVM virtualization to run a Windows host on the same box that i can log
in to remotely.
I looked through the documentation samples on the shorewall site and found
several bridging configurations but they do not match my setup, yes it
will
2012 Mar 07
2
RTNETLINK answers: File exists when adding providers
When I attempt to start shorewall (version 4.0.15) I get an RTNETLINK error
(see below).
/var/log/shorewall-init.log
[...]
21:02:18 Creating Interface Chains...
21:02:19 Adding Providers...
RTNETLINK answers: File exists
ERROR: Command "ip route add table 1 129.116.XXX.0/24 dev eth2 proto kernel
s
cope link src 129.116.XXX.30" Failed
21:02:25 Shorewall-generated routing tables and
2012 Dec 04
5
Network traffic tool
Hi everybody, I have my firewall with shorewall runing and I dont have a
proxy.
I would like to know which tool can I use to log my web traffic from my
users.
I have ntop working but I dont think this tool helps me on this.
Any suggestion?
Thanks
------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
2011 May 17
3
Powercom issues in NUT (was: PowerCom BNT2000AT ups on nut 2.6.0 - second try)
Dino, Alexey,
there are a number of users suffering issues with your Powercom devices.
Could you (Dino, and Keven if possible) please have a look at the below one,
from Angela, and check for a fix?
I've scheduled to release 2.6.1 next week, and having that fixed is part of
the list.
2011/5/16 Angela Williams <angierfw at gmail.com>
> Hi All
>
> On Friday 13 May 2011 at
2012 Dec 29
10
How could I open Port 1701 for VPN l2tp/ipsec
Hello Mailinglist,
please excuse my bad english - but I am not a native speaker.
My Network looks like this:
Internet --- dyn. IP --- Firewall (shorewall) --- LAN (192.168.X.X)
No I try to connect my iphone (from mobile Internet G3) over VPN
(l2tp/ipsec) with the firewall.
But I canĀ“t open the necessary Port 1701.
/var/log/syslog
...
Dec 30 00:24:29 router kernel: [226128.293757]
2012 May 31
5
Shorewall + squid + multi isp
Hello all,
I''m reading the nice documentation about shorewall with multi isp. And I wonder about squid (non transparent) and shorewall
Can I use on same machine, squid with ldap ident, dansguardian, and shorewall with multi-isp (four or five) ? Perhaps there is a problem because squid mask source IP, shorewall can maintain and load balance sessions for the same source IP ?
Thanks Fred
2012 Mar 05
0
masq and snat
Hi!
Progress is much better now with my new install with not many problems left!
I just have a simple - I hope - question.
I have a few users that need access to the net via masquerade rules. The rest
have to go via squid on the firewall. That all works well.
I also have two windows servers that also need access to the net but they have
to each use a specific outgoing ip address.
I add two
2012 Jan 24
0
Re: Shorewall-users Digest, Vol 68, Issue 25
Sent from my iPad
**************************************************************************************
Marco M. Salimu
IT Manager
VisionFund Tanzania
[P.o. Box 1546]
Mob: +255 784 370294 | +255 715 370294 : Off. Dir-Tel: +255 27 5098, Other: | Tel: +255 27 8218 | Fax: +255 27 8273
Off. Email: marco@seda.or.tz | marco_salim@wvi.org |
Private Email: smarcos2001@yahoo.com smarcos2001@hotmail.com|
2011 Jun 13
1
NUT HCL List
Hi All!
Just an update! The snmp driver seems quite happy with an APC AP9618 managment
card in an APC Smart-UPS RT 5000 XL UPS.
I have an APC AP9630 to test in the near future so will give and update on
that one too!
Cheers
Ang
--
Angela Williams
angierfw at gmail dot com
Linux/Networking Hacker
Blog http://angierfw.wordpress.com
Smile! Jesus Loves You!
2011 May 13
1
PowerCom BNT2000AT ups on nut 2.6.0 - second try
Hi!
Normally nut was just worked and worked for me!
Not this time though!
Distro is Gentoo withe latest nut-2.6.0 emerged today.
Linux kernel version is 2.6.36
UPS is PowerCom BNT2000AT
"Driver" is powercom
ups.conf looks like this! Okay so APC1 is not and APC!
[APC1]
driver = powercom
type = BNT
port = /dev/ttyS1
numOfBytesFromUPS = 16