similar to: Inbound traffic shaping issue with a phantom limit

Hi, I''m using Shorewall and LSM to load-balance 3 ISPs. My configuration works, but when an ISP is disabled, LSM is unable to ping from the associated interface. I understand why it happens : when `shorewall disable isp1` is called, Shorewall flushes the routing table isp1, and removes the nexthop in the balance table. So when I want to ping 8.8.8.8 from eth1, no rule allows it.

Hi, In samba logs I see these entries. {"timestamp": "2024-03-22T17:00:13.553400+0530", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4624, "logonId": "d42e868adc3300ef", "logonType": 3, "status":

RC 3 is now available for testing. Problems corrected: 1) The Shorewall and Shorewall6 ''load'' and ''reload'' commands previously used the setting of RSH_COMMAND and RCP_COMMAND from /etc/shorewall/shorewall.conf (/etc/shorewall6/shorewall6.conf). These commands now use the .conf file in the current working directory. 2) The new parameterized

RC 3 is now available for testing. Problems corrected: 1) The Shorewall and Shorewall6 ''load'' and ''reload'' commands previously used the setting of RSH_COMMAND and RCP_COMMAND from /etc/shorewall/shorewall.conf (/etc/shorewall6/shorewall6.conf). These commands now use the .conf file in the current working directory. 2) The new parameterized

I am in the process of building a new machine to replace several older servers. I am considering running several virtual servers on one box, all linux for host and virtual machines using VirtualBox. Is it possible/advisable to configure shorewall on the host to act as a firewall for the virtual machines, each having one or more static public IP address? Any pointers, suggestions and/or

Hi, I have a multi-isp configuration both on ppp interfaces. As one of them is 32Mbit/s and the other is 8Mbit/s , I have a weight setting of 4 to 1 as in the following providers file entries: vdsl 1 0x10000 - ppp1 - track,balance=4 adsl 2 0x20000 - ppp0 - track,balance=1 I would also like to have fallback between them so that if one is

I have read everything I can find in the docs and faqs about this, and I feel there must just be some simple thing I''m not doing, but I''m stumped. Two interfaces, eth0 and eth1.  eth1 is the WAN connection to the upstream provider, and has a single IP and the default gateway.  Connection uses bgp. eth0 is the LAN interface, and has multiple IP addresses, private (ie., 10.0.2.x)

Hi, My main gateway is a router running on OpenWrt Barrier Breaker r37816/ Kernel Version3.10.4. I installed shorewall-lite from openwrt''s repo using opkg but while trying to start shorewall-lite I get the folowing errors: The first error i got was "scp: /var/lib/shorewall-lite: No such file or directory" simply resolved by making the folder "shorewall-lite"

Hi All! Been quite a few years and lots of water under the bridge but here I am back! I have a customer that has now decided they need a bit more bandwidth over and above their fixed line! They are not in a good area for ADSL because of copper theft and being a bit to far from the closest DSLAM! They have installed a wireless link and I have made certain that put it behind my simple iptables

Hi, I am trying to get L2TP roadwarrior VPN working from http://www.shorewall.net/IPSEC-2.6.html#RW-L2TP but i am making a mistake somewhere, appreciate a fresh set of eyes to help. I have the following interfaces: ppp0 - interneteth0 - local networkrem - client openvpnl2tp - ppp for lt2p clients I am getting the following error logged when trying to connect into the server with L2TP from a remote

Hello Rowland, 1. We always have been using self compiled samba not the binaries. In fact, when we started we started on CentOS and then when CentOS became an upstream edition, we moved to RHEL, but continued with self compiled samba, never moved to prebuilt binaries. 2. SSSD - We are not using sssd anywhere. We have many Linux Servers but those are not members of AD domain. Only the web

Hi all, I''m not able to use shorewall for manage a bridge. I get the following error: ERROR: BRIDGING=Yes is not supported by Shorewall 4.4.13.3 Same error with version 4.4.11.4 I have read many documents, but I didnt find any solution. I have test many configuration (managing hosts,interfaces,zones files), but I get always the same error. Have I to compile a new kernel? With which

Hi, I use shorewall-4.5.4 + lsm-0.143 and it does not seem to work as expected... When all providers are up, everything seems fine. When one goes down, lsm says "link <provider> down event"... and it seems ok but we then experience some problems such as a few unreachable sites, DNS problems... If I remove the downed provider from all confs and restart, everything works again.

Hi, I'm trying to make a legend with a justified list of numbers, so I thought I would use phantom(0) to align the 3-digit numbers properly with the 4-digit ones: legend(x, y, xjust=1, yjust=1, lty=c(1,2,3,4,5), adj=c(0,0.5), legend=expression(phantom(0)*300*plain(K), phantom(0)*550*plain(K), phantom(0)*830*plain(K),

There's a phantom domain master browser showing up in my Samba nmbd.log file. I keep thinking that maybe it is left over in one of the files that I transferred over from the old server to the new server and it isn't clearing itself out. Is there a way to clear that and is it possible to have a phantom browser fighting over the Domain from a copied over file? I transferred all of the

Hello Guys I have problem with internet bank. I have 2 Internet links balancing mode, thus the bank is charging connection down. I tried to force Internet traffic (port 80 and 443) for only a link, however it did not work. How do I make a setting to force the connection to these ports for a specific link. Note: I can not use the file as route_rules have neither the source IP (ltsp) nor of

About once a day I have noticed a phantom incoming call with a caller ID of asterisk@192.168..<cut off>. When I answer the call there is a dial tone and the call is disconnected. Any clues? David Koski david.nospham@kosmosisland.com

Hi all, I have a client that is having problems with phantom calls. I have not been able to see it happen myself, but they say when it happens, the display on the phone (polycom 301's) says "Device" is calling, but when they answer the phone, there is only silence and then they hang back up and it sometimes rings again. I've been trying to track this down for a couple of

I have a Samba 3.0.4 server configured as a PDC. NetBIOS name of the server is "SERVER"; name of the workgroup is "AEC". Problem is that there's now a phantom workgroup called "SERVER" when I try to browse the network. Since there's no clients configured in this workgroup, any attempts to browse this workgroup fail. When I attempt to use User Manager for