similar to: Passing traffic between separate public subnets on same interface

RC 3 is now available for testing. Problems corrected: 1) The Shorewall and Shorewall6 ''load'' and ''reload'' commands previously used the setting of RSH_COMMAND and RCP_COMMAND from /etc/shorewall/shorewall.conf (/etc/shorewall6/shorewall6.conf). These commands now use the .conf file in the current working directory. 2) The new parameterized

RC 3 is now available for testing. Problems corrected: 1) The Shorewall and Shorewall6 ''load'' and ''reload'' commands previously used the setting of RSH_COMMAND and RCP_COMMAND from /etc/shorewall/shorewall.conf (/etc/shorewall6/shorewall6.conf). These commands now use the .conf file in the current working directory. 2) The new parameterized

I am in the process of building a new machine to replace several older servers. I am considering running several virtual servers on one box, all linux for host and virtual machines using VirtualBox. Is it possible/advisable to configure shorewall on the host to act as a firewall for the virtual machines, each having one or more static public IP address? Any pointers, suggestions and/or

Hi All! Been quite a few years and lots of water under the bridge but here I am back! I have a customer that has now decided they need a bit more bandwidth over and above their fixed line! They are not in a good area for ADSL because of copper theft and being a bit to far from the closest DSLAM! They have installed a wireless link and I have made certain that put it behind my simple iptables

Hi, I am trying to get L2TP roadwarrior VPN working from http://www.shorewall.net/IPSEC-2.6.html#RW-L2TP but i am making a mistake somewhere, appreciate a fresh set of eyes to help. I have the following interfaces: ppp0 - interneteth0 - local networkrem - client openvpnl2tp - ppp for lt2p clients I am getting the following error logged when trying to connect into the server with L2TP from a remote

Hello Everyone, We have a standalone Debian Wheezy box for game/web/VoIP server. My problem is that somehow the inbound traffic is limited to 4kbit/s to 8kbit/s by default whereas it''s set to 3*full/10 with 9*full/10 ceiling. The interface is set to 100Mbit/sec and it actually gives that performance with the corresponding outbound traffic limits. Naturally when I stop shorewall this

Hi all, I''m not able to use shorewall for manage a bridge. I get the following error: ERROR: BRIDGING=Yes is not supported by Shorewall 4.4.13.3 Same error with version 4.4.11.4 I have read many documents, but I didnt find any solution. I have test many configuration (managing hosts,interfaces,zones files), but I get always the same error. Have I to compile a new kernel? With which

Hello Guys I have problem with internet bank. I have 2 Internet links balancing mode, thus the bank is charging connection down. I tried to force Internet traffic (port 80 and 443) for only a link, however it did not work. How do I make a setting to force the connection to these ports for a specific link. Note: I can not use the file as route_rules have neither the source IP (ltsp) nor of

G'Day List, Can someone help me out a bit please. I just installed Fedora Core 3 on a Dell Power Edge 400 SC and am trying to install * I am following http://www.voip-info.org/wiki-Asterisk+Step-by-step+Installation After running: cd /usr/src/asterisk make clean make make install make samples The instructions says: Configuring Asterisk - Login to your server as user

I cannot connect to the INTERNET via my stand alone computer or my wireless laptop with the /etc/shorewall/interface setting I have. What Interface setting will allow me to connect to the Internet? Please see attached document for more details. ------------------------------------------------------------------------------ Free Software Download: Index, Search & Analyze Logs and other IT

how to make this work, its seem to me that netfilter is changed more or less someplaces that shorewall do not support, using 4.4.27 shorewall and shorewall6 suggestion welcomed ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99!

Hi, I''ve setup quagga on a shorewall firewall server. The only purpose for this is to use BGP to connect to a "peering platform" supplied by our data centre supplier. There are some very large ISP''s (and other various providers including google) on this peering platform and connecting to it will speed up access to/from our services and hosted servers. The physical

G'Day All, Greetings and best wishes. Many moons ago I had an Asterisk system running. Steve Totaro helped me quite a bit. Just now I installed Asterisk NOW 1.5 Beta, and am at the command prompt.....I thought there was a GUI with Asterisk NOW. Anyway, where can I find the install/config documentation or how to launch the GUI, as I have look around on the site but cannot locate it.

Hi, I''m using Shorewall and LSM to load-balance 3 ISPs. My configuration works, but when an ISP is disabled, LSM is unable to ping from the associated interface. I understand why it happens : when `shorewall disable isp1` is called, Shorewall flushes the routing table isp1, and removes the nexthop in the balance table. So when I want to ping 8.8.8.8 from eth1, no rule allows it.

Hello all Have a small problem. We use Samba as our PDC for a large amount of NT clients. We also use Sophos anti-virus to protect the workstations and servers. The problem basically is that although I can get Sophos to work properly I have to go to the actual workstation to install it from the server. Once I've done this Sophos works fine and automatically updates from the server.

hello list shorewall I encounter serious problems with this Multi-port Match: Available . my custom kernels do not provide this option that prevents me from compiling shorewall 6 plesase correct this maybe a bug fix --  http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7  gpg --keyserver pgp.mit.edu --recv-key 092164A7 http://urlshort.eu fakessh @

I'm pretty new to KVM and have a KVM CentOS 7.1 hypervisor running a few VMs. I'm moving all my VMs from an ESXi host as I want to use KVM in future. Most of my VMs are working except for one which is running a Sophos UTM router (Sophos UTM is similar to products like pfSense <https://www.pfsense.org/>, Smoothwall <http://www.smoothwall.org/> etc). The host has 3 physical NICs

Hi, I'm not sure what sort of diagram you mean, but I'll have a try. Does this help? It sounds like I need to do something to enable routing on what I've labelled "NIC3" on the diagram - can you please explain what I need to do? [image: Inline image 1] Regards, Phill On Tue, Sep 1, 2015 at 4:53 PM, Ajey Gore <ajeygore@gmail.com> wrote: > Can you please drop a

Hi LARTC experts, Can you help me with this scenario? I have been lurking on this list for a while, but I am very green wrt advanced routing. I have a slackware linux based server in a vehicle with a high bandwidth satellite connection which is only available while the vehicle is stationary. This satellite connection comes in via eth0. But while the vehicle is moving or stationary, we can