similar to: ipmasqadm and default route on masqueraded host

Excuse me form reposting the quesiton, but I didn''t find any solution. Any suggestion is welcome Hi, I''m running a Debian 2.2r2 on a university server with 3 public ip o(1.1.1.1 2.2.2.2 and 3.3.3.3 on one ethernet card (but soon we will have three cards). There''s a tunnel (implemented with vtund on a tun interface with local address 192.168.1.10 and remote

Hi All, born out of frustration with conflicting info on the net, I thought I'd share a simple guide to set up the port forwarding side of masquerading... this presumes you already have basic ipchains setup and simple masquerading of internal machines installed. PORT FORWARDING USING IPMASQADM. “Ipmasqadm” supercedes the “ipportfw” feature. 1 - Upgrade to Kernel 2.2.12-20 if not already

Just responding in case this may be of help to somebody with firewalling issues. Not sure if this is off on a tangent to the original question... Here are three different forms of common firewall scripts and ways of getting SIP to work behind them. The third one has some additional stuff beyond just SIP although I can't remember why I wrote it that way. I've been having no fun using

Howdy, I tried tackling this on irc with Ivo, but I suspect that irc may really not be the best medium for technical discussions, so I'll reprise it here. I am trying to duplicate the "tinc from behind a masquerading firewall" example from the tinc web site: (home) <--> (masquerading firewall) <--> (office) 192.168.1.21 192.168.1.1/1.2.3.4

Hi All I have had a look through the documentation but I can''t see how to do this. I want to setup DNAT for an incoming connection. The connection must be forwarded to a server on a masqueraded server behind the firewall. The tricky part is I need to forward to a different port to the one that the request arrived on. I can do this: firewall.public.ip:5800 ->

Greetings from a newbie! (Well, to this list anyway) I''m having a problem and I hope someone here might be able to help... I am strongly expecting an answer along the lines of "upgrade to v2.4.x", but I would REALLY preffer to avoid that for now... The setup: "Home brewed" v2.2.24 (will patch to v2.2.25 later today) with the DS8 patch applied. Currently

Hi all, I have tried to figure out how to do this one but I think I have just confused myself more. My firewall is a 2 interface setup, the same box is my router to my uplink. I''m not using nat at all and have a public IP range behind this machine. net = eth0 loc = eth1 Most of my rules are mainly the basic HTTP(ACCEPT) net loc:111.111.111.112 SMTP(ACCEPT) net

Hi Folks, I have configured pxelinux.0 to allow chain-booting freebsd pxeboot.0 from it like this: label fbsdpxe KERNEL pxeboot.0 This works as expected, so no issue with that. There's one weird thing however. If I rename pxeboot.0 to pxeboot (omitting .0) and change the config file accordingly it throws this error at me: Invalid or corrupt kernel image. Same happens if I

Hi, I'm from Italy (sorry for my english...). I've two questions about the plot function. I've to create a simple graph for the data set "n_species": species=sqlQuery(dati, "select count(distinct species), season from captures_complete_r group by species, season") n_species=tapply(species$count, species$season, sum) n_species=data.frame(n_species) n_species

Hi, Some words about my Dovecot setup: - 10 dovecot servers - each server has some local mailboxes - each server has proxying enabled to seamlessly connect to another host if the mailbox is not local Running Dovecot 1.1.1 on FreeBSD 6.3-RELEASE-p3. First of all, local mailbox access is fine. Proxying works also as expected. Now for the actual problem: Shortly after startup, Dovecot starts

Hello, I'm trying to set up port forwarding in IPTABLES and so far it's working great from the internet, but when I attempt from my internal LAN using the External IP address, it fails. EXTIF="eth0" INTIF="eth1" EXTIP="xxx.xxx.xxx.xxx" INTNET="192.168.1.0/24" INTIP="192.168.1.1" PORTFWIP="192.168.1.13" >From the internet,

Hello David, After some experiments and discussions I came to the following result concerning private NT-Box connecting to a LAN via ipchains and using all NETBIOS services (incl. domain-logon): Cross-subnet browsing with NETBIOS could only be done by a local master browser in the private net. I first thought of using Samba on the Linux router for that. But the Samba service would have to use

Hi, There appears to be a bug in 2.5.1p2 that is not present on 2.3.0p1. The environment in question is Solaris, on either Intel or Sparc. The arrangement is as follows: System bar forwards a port from itself to system baz by doing su portfw -c 'ssh -2 -P -N -f -g -L 3333:baz:22 baz' System foo, which can talk to bar but not baz, initiates an ssh connection to bar port 3333, and is

I have the following forced up mew by evil telco problem: - One IP - Homebrew LAN - portforwarding for some services. - extra PPTP/ppp layer to an internal 10.* network which mutilates DNS answers. Setup: Machine A has ip a.b.c.d (real IP) and is reachable over ADSL with it from the world. It does NAT for an internal LAN 192.168.0.0/24) and has portforwading turned on for some ports (eg 80)

hi i recently searched in the mailinglist archive and found similar problems, whose solutions helped very much, thank you. i have the following scenario: a firewall with one lan interface eth0 10.1.1.1/24 and two uplink interfaces eth1 10.2.2.1/24 eth2 10.3.3.1/24 each uplink interface does SNAT: iptables -t nat -I POSTROUTING -o eth1 -j SNAT --to-source 10.2.2.1 iptables -t nat -I POSTROUTING

Hello! I have encountered a bug using tincd with Microsoft Windows: Below you'll find my Setup and my Logs. In short, i do the following: 1. office running tincd 1.0.7 and waiting for connections (no ConnectTo, but this does not resolve the issue) 2. the supporter starts up tincd 1.0.7 on windows (native) 3. ping from windows ("support") to the office: Here the error occours:

I have some stuck channels that I think I'm going to have to bounce Asterisk to get rid of, but am curious to know what they are and how they've managed to accumulate. The show up with a channel identifier of '(None)' as in the output below, and do not show up in the soft hangup list, and so can't be cleared by that method. Here is the output from iax2 show channels:

Greetings All, I have a ssh server which allows sftp connections from the Internet while ssh connections from within the local net, here is the config: Code: Port 11111 Port 11113 Protocol 2 LogLevel DEBUG

I've noticed that my W2K clients connect to Samba much more quickly if I run it on port 445 instead of 139. However, my WNT clients then won't connect at all. I read somewhere that it was possible to forward the requests on port 139 to port 445. Anyone know how to do this or how to listen to both ports simultaneously? Thanks, Jason Joines Open Source = Open Mind

This seems to be happening only when using the pop3c plugin. Any advice? root at imap01:/etc/dovecot# doveadm -D -o imapc_user=chat_logs at xxxxxx.com -o 'imapc_password=*******' -o pop3c_user=chat_logs at xxxxxx.com -o 'pop3c_password=*****' backup -u chat_logs at xxxxxx.com -R imapc: doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root):