similar to: load balacing with https home banking

Hello, people. I read iptables tutorial and lartc, but i''m still confused with one trouble. May be this question was discussed already, so forward me solution, if is. So, there''s a trouble. I have debian etch linux. 2.6.18-4 kernel. On this computer i have three interfaces: eth0 - my lan, eth1, eth2 - providers. By default all internet traffic routed through eth2. But i

Where is the correct place to control what traffic is masq'ed out? This is what I have, but I was told the Forward chain isn't the right place to do this? iptables -A POSTROUTING -t nat -o $WAN -j MASQUERADE iptables -A FORWARD -i $WAN -o $LAN -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A FORWARD -i $LAN -o $WAN -m state --state NEW,ESTABLISHED,RELATED -p tcp -m multiport

Hello, I installed my linux server for 3 months now. It does almost everything (dns, web & mail server, firewall ...). I just encounterd two problems with the firewall: behind this server there are 2 computers: i got emule on one and msn on the other. The problem is that I can''t configure well the firewall fore these 2 rules. I''ve added DNAT rules but it

I''ve just spent a while chasing a false bug in lighttpd and load balancing among external fast cgi processes due to what I think is a documentation bug. Following the info on the wiki page <http://wiki.rubyonrails.com/rails/pages/LighttpdWithProcessScripts>, one would think that something like this works: fastcgi.debug = 1 fastcgi.server = ( ".fcgi" => (

Hу здpаcте shorewall-users, i''m not subscribed to the mailing list so... how can i say to shorewall to do something like this iptables -A POSTROUTING -o eth1 --dst ! 10.0.0.0/8 -j SNAT my_ip well the main part is - "--dst ! 10.0.0.0/8". Do i need to create my own rules at startup (how? or do i need to worry not to break some shorewall rules) or shorewall can be

Calling my home numbers has always worked. Till now. The Asterisk CLI show the following : [Dec 23 10:53:22] NOTICE[25159]: chan_sip.c:12640 handle_response_invite: Failed to authenticate on INVITE to '<sip:092xx90xx at 85.xx.xx.xx>;tag=as5b139383' And after restarting Asterisk, the CLI is flooded by : [Dec 23 11:11:06] WARNING[1468]: chan_sip.c:1817 __sip_xmit: sip_xmit of

Hi, I have made a fresh install of asterisk-1.6.2.10 and when I register my soft phone it gives following error. Rest are default configurations. 32.454370 MY_IP -> ASTERISK_SERVER_IP SIP Request: REGISTER sip:ASTERISK_SERVER_IP 32.454505 67.19.43.202 -> MY_IP SIP Status: 401 Unauthorized (0 bindings) 36.454814 MY_IP -> ASTERISK_SERVER_IP SIP Request: REGISTER

I have a squid proxy running transparently, so in my firewall script I run the following fairly early: iptables -A PREROUTING -t nat -i $LAN -p tcp -m multiport --dports 80,443 -j REDIRECT --to-port 3128 This is a multihomed server so after this change the masquerading was removed (as only web access on the lan side of this server was needed). I now need to masq cleanly one device so that it

Hi, I''m looking to combine a couple of fact names with the value of a class parameter to create and lookup the resulting fact''s value. Is that possible? For example, my class will take the parameter "my_default_nic" from beyond. So I know that as long as $my_default_nic exists on the client, then so will facts like macaddress_<NIC>, netmask_<NIC>,

Hello, I''m trying to install the upload_progress gem and i can''t see the upload progress status. My config is : apache2 with mod_proxy mongrel rails upload.rb : ############## require ''rubygems'' require ''drb'' require ''gem_plugin'' GemPlugin::Manager.instance.load ''mongrel'' => GemPlugin::INCLUDE

I''ve uploaded Beta 4. It corrects a bad bug involving exclusion in the hosts file. In addition, it contains the first release of a new Bridge/firewall implementation that uses the reduced-function physdev match found in kernel 3.6.20 and 3.6.21. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \

I''ve uploaded Beta 4. It corrects a bad bug involving exclusion in the hosts file. In addition, it contains the first release of a new Bridge/firewall implementation that uses the reduced-function physdev match found in kernel 3.6.20 and 3.6.21. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \

Hello everybody. I have a problem with my firewall rules on my Slackware Linux box 9.0 (kernel 2.4.20-xfs). This system is configured with 3 NIC (one for the router, one for the dmz, and the other for the private net). I have written a firewall (iptables) that is processing packet based also on the incoming interface. This firewall is connected in a not good environment where all the NIC (and the

hello. i have following setup: a machine (winChip 200mhz cpu, 32mb ram, linux 2.4.28) acting like a bridge with 2 interfaces (eth0 - to our ISP, eth1 - to our network) machine does not have any IP there is a 802.1q vlan eth0.2 eth0.2 and eth1 are bridged in br0 i have one 4mbit link which i share with my friend, i have 3mbit and he has 1mbit all our IP addresses are public and we have the

Hi, as I promised in LARTC list I created patch for new connbytes match. It matches packets which bellongs to connection which transfered given range of bytes. For those interested it is at http://luxik.cdi.cz/~devik/connbytes/ It was originaly meant to be used with HTB or other qdisc to reclassify long download streams to lower prio class. devik

Hello everybody. I'm experimenting this problem with samba 3.0.2a and linux 2.4.25 with ReiserFS. When I copy (put) a large file (5GB) from a Windows NT terminal server sp6a to the samba-linux box, the md5sum is different between the two file. Files size are identical. I'm using this command to copy these files from windows to samba: xcopy f:\ \\mimas\backup\exchange /e /c /h /r I have

I am currently blocking out netbios UDP port 137 on my firewall and was wondering what the following means in terms of security: Jul 9 16:19:05 oscar kernel: IP fw-in rej eth0 UDP SOMEONES_IP:137 MY_IP:137 L=78 S=0x00 I=46484 F=0x0000 T=111 I have gottena few 100 of these and was wondering if there are some vulnerabilties related to netbios out there?? What do the S/I/F/L fields stand for?? I

https://bugzilla.netfilter.org/show_bug.cgi?id=945 Summary: Transmit performance regression with NAT and 3.14 Product: netfilter/iptables Version: unspecified Platform: x86_64 URL: http://www.linuxquestions.org/questions/linux-networki ng-3/linux-router-non-local-uploads-have-horrible-perf

Hello listmates, It's been a few years since I've set up a router... and for some reason I seem to be getting hung up on this one. Does anybody have a sample iptables config file that would incorporate NAT and forwarding for a simple router? Thanks. Boris.

Louis, Made the changes. Still unable to mount office. Firewall also blocks Thunderbird mail and maybe internet. Will check that more fully later.Any thoughts ob Tony's response? Outputs: martin at radio:/etc$ sudo apt-get install ufw Reading package lists... Done Building dependency tree Reading state information... Done The following packages were automatically installed and are no