similar to: Non-unique IP removal issue

After upgrading our router from redhat 7.3 (linux 2.4.18 ) to mandrake 10.0 (linux 2.6.3) some of our routing scripts failed. This configuration worked properly before we changed distributions. X.X.X.2 is supposed to recieve traffic for X.X.X.6 and nat that to Z.Z.Z.46 ip addr list |grep ''eth[0123]'' 2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen

Hi everyone. I am so baffled by the following problem: Office 1 is using ADSL and it is building a VPN tunnel with IPSEC to Office 2. Both ends are using shorewall/freeswan firewalls. Diagram: Office1 fw --- VPN TUNNEL --- Office2 fw --- cisco router ----- VLANS | DMZ Office 1 has the following interfaces: 2: eth0:

Hi, I have been a shorewall user for a long time now, and it has been working flawlessly. I have now changed ISP and my new DSL connection is PPPoE. My setup is as follows: internet <--------> 3com812 Officeconnect (bridge mode) <----> eth0 <-------> linux box <----> eth1, eth2, eth3, eth4 <---> other internal networks Things are working fine, but the link is

Shorewall 4.5.1.1 I have 5 interfaces on a centos box, the first two are internal on two different subnets, the next two are two different ISP''s and the last one is a private network for testing and administration. The second internal subnet (eth1) is rejecting all the arp requests to it and I get the following in the log files ever second or two - May 16 05:28:54 services kernel:

I have a setup with two Internet providers. One circuit (net0 == eth1) is used primarily for employees and tunnels to other sites. The other (net1 == eth2) is for the production machines that customers access. Everythung works in teh sense that packets get to where they are sent (mostly) but I recently I had a sniffer on the system and noticed a problem I cannot solve. traffic coming in

Hi list, I try to install the following network: /-----------------\ | Firewall 1 | \-----------------/ ___________________| |_________________ | 10.2.6.1 10.2.2.1 | | eth1 | | 10.2.6.11

Hello Tom, I''ve been using Shorewall for years without problems. My previous version of shorewall was 1.4.6b-1. Everything worked just fine. Today I upgraded using rpm to 2.0.8-1. After update no one can connect to any interface from net. Server can connect to outside world fine and those described in routestopped have no problem connecting. Any help correcting this problem would be

Having a problem with the 3 interface setup. I can get DMZ hosts, and FW to see internet, but anything on LOC interface is unable to get out. My first post to the list didn''t have the information needed, sorry for that, but thank you for pointing me to more resources. I''ve looked at the problem myself some more, but am still stuck. Shorewall Version: 2.2.1 ip addr show 1:

Hi to everybody, I write because I have just configure a shorewall to be used as firewall, proxy(with squid) and gateway to 2 internet connections, and it looks to work properly but now I''d like to add a new feature: I would to redirect some specific traffic (emule''s one) only to one of those links. This is my diagram:

Hello Tom, I have successfully configured proxy arp subnettinng on my network with three hosts in a Dmz. And it works great. (using proxyarp in interfaces) I also tryed this on network below same trouble. However for this network below I have tryed to configure one host in a Dmz (using /etc/shorewall/proxyarp) which works and comes up after I set it up and clear Isp''s arp

A site I administer has dual T1''s. We have this set up according to NANO-HOWTO[1] using Julian''s routes patch on a late model 2.4 kernel. All is well, has been working well for a long time. Recently one of our T1 providers went belly up and we got something better. Now we have a /28 where previously we only used one IP per interface. Present interfaces: eth0 - T1#1, single

Hello, I've been trying to implement a bridge in place for a clustered firewall at one of our office locations. Currently we NAT two class C's internally. We decided, for performance reasons, that it would make sense to put our servers into an official DMZ. So we started this bridging project. Our goal is to have two redundant firewalls in place. There is no need for active/active.

Dear all, I''ve the following problem with routing + NAT: If I''ve two ISP and I''m using two nexthop in default route with MASQUERADE on both ISP links, I see routing cache regenerated, but sometimes packets sent to a new link (after cache regeneration) uses wrong source address for masquerading. Here is the config. I''ve two links to outside via two

Hi, after migrating to shorewall firewall from my own iptables rule set (to utilise freeswan vpn tunnels) I have successfully configured a 3 interface firewall with net2net vpn tunnels, with the help of the shorewall documentation. However I cannot seem to configure my final step which is to masq another subnet attached to my LAN (LANB, via Cisco 1603 router) to get internet access via the

Sorry this is the right message. Hi all, in my school I have: - two Netopia router for ADSL (perform NAT), - one linux box with 3 ethernet card I want to make a load balancing on the two ADSL line. I have configured the system as follow: The LAN interface, of the two ADSL router, have address (A) 192.168.0.254 (B) 192.168.2.254 The 3 ethernet card, on the linux box, have address: -eth2

We switched over from a bordermanager firewall to a shorewall firewall. Some stuff is not working now. I realized that I had not created the route for the network that is not working however once I created it, it still didn''t work. Most of our network is fine however some pieces are not working. [Net] - [Shorewall] - [LAN] - [Cisco] - [Clients and servers not working] The firewall

(non-subscriber -- please CC: any responses to me, thanks.) I need to have port forwarding to an external interface''s IP address enabled from the behind the firewall, but I don''t want all internal traffic routed through the firewall as per http://www.shorewall.net/FAQ.htm#faq2a , just the traffic to two ports. Is there any way to do this? (I know this is more properly handled

I am running 2.4.20 with Julian Anastasov''s patches (routes-2.4.20-9.diff), iptables v1.2.6a, iproute2-ss010824 on Debian. I have set up our internal gateway to multihome 2 T1''s as described in http://www.linuxvirtualserver.org/~julian/nano.txt . The only difference is that I use multiple IP''s on the external interfaces. EXA A.B.C.225 --------------------

Hello, I cannot establish Xserver connection via wireless subnet, while telnet is working fine. There was a similar problem before in Shorewall over IPSEC that Tom had fixed. Also, ping is working, but traceroute is not. Finally, PuTTY gets a connectivity error after couple minutes of inactivity over wireless when connected to the firewall/gateway. Wireless is configured per instructions in

Can you please drop a rough diagram here? I think you are routing through this VM and must have shared the host interface. - ajey On Tue, Sep 1, 2015 at 7:39 AM, Phill Edwards <philledwards at gmail.com> wrote: > I'm pretty new to KVM and have a KVM CentOS 7.1 hypervisor running a few > VMs. I'm moving all my VMs from an ESXi host as I want to use KVM in > future. Most