similar to: send patchs

Hi Tom and folks, There are some svn or cvs system for the shorewall-dev community?. If Tom want to leave the project for a while, maybe it will be necesary some cooperation system. Regards. -- Juan Jes?s Prieto - Consultor?a TI jjprieto@eneotecnologia.com http://www.eneotecnologia.com --------------------------------------- fingerprint: BFC2 0370 7708 F800 0BEC 60A4 EC71 4BB1 CC85 99F5

I believe that 2.4.0 is about ready to be sent out the door. I''ve made a couple of small changes since RC2 but I don''t believe that they warrant another RC. There remains the issue of what to do about support for Shorewall 2.0 given that 2.2 has only been available since March. It would be my recommendation to make 2.4 the new "stable" release but continue to

Hi all, I have found problems in p2p traffic detection. The ipp2p module works fine but in shorewall the rules written for this protocols never match because the initials p2p connection (login) match in ''-m state --state RELATED,ESTABLISHED -j ACCEPT'' rule before ''-m ipp2p --ipp2p -j DROP'' rule, so netfilter never filter p2p traffic. I have had to run

Perhaps I am on the wrong track but I would like to share some additional observations... I quickly enabled DNS query logging: # rndc querylog Then run another gpupdate on the client. During the Update I see lots of queries: 04-Aug-2016 14:46:58.414 queries: info: client 10.0.1.186#59270 (_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.ad.cyberdyne.local): view internal: query:

Hi all, I dont know if this problem is related to shorewall, but as here we have a lot of firewall experts ... :) We are using a Leaf box (1GHz 256MB RAM) for a network with normal traffic of about 6Mbps but peaks of up to 40Mbps. The chipset of the ethernets is a Realtek. We are experiencing some high latency high CPU usage issues (the CPU is at 90%) and we discovered the process

Hi list, I''m using Dom0 gentoo with xen 3.0.4 and xenman. I have several DomU working and it is really nice :) so all my DomUs are installed with disk images. Now i want to use an ISO to boot and install a linux system (or win). When i try to boot the DomU i dont have nothing, nothing relevant (for me) in logs and i can connect to the console. The state of the DomU is unknow. Any help

Hi all, Anybody has configured a Shorewall firewall to protect Citrix servers? Could you give us some clue on the rules you have to define? Citrix opens a connection from the inside to the outside from a different port (more or less like ftp) and seems not works. Regards -- Jaime Nebrera - jnebrera@eneotecnologia.com Consultor TI - ENEO Tecnologia SL Telf.- 95 455 40 62 - 619 04 55 18

Hi all, First of all I repost this email in shorewall list as there are a lot of firewall experts here that might know what the hell i going on. We have also posted this on the linux bridge list (we needed acceptance first) and leaf list. Very thankful for your understanding. We are experiencing a very strange problem and would need some help. We have a Leaf / Shorewall based box (actually

Hi all, http://www.hipac.org/index.htm I have just discovered this great project. It seems it surpasses standard netfilter in performance. The documentation states they are more or less compatible with standard netfilter, but anybody has tested if it is compatible with shorewall? Tom, have you? Regards -- Jaime Nebrera - jnebrera@eneotecnologia.com Consultor TI - ENEO Tecnologia SL

Hi all, We want to do some stress testing of firewall configurations/hardware. We have discovered hping that seems a great tool for this, but funny enough Shorewall cuts it !!! even when you leave ports open :) So besides hping, any tool for this? Why is shorewall cutting this traffic? Thanks in advance. Regards. -- Jaime Nebrera - jnebrera@eneotecnologia.com Consultor TI - ENEO

Hi all, I have seen Shorewall places the state verification rules (-m state --state ESTABLISHED,RELATED) as the first rule in a zone2zone chain. This means that state checking is done after all the rules involving from this zone to this zone. As you could have a lot of them, wont be better to place them just after checking the state is not invalid? This will mean a lot of packages will be

Need some assistance, I have a firewall I am trying to reinstall the os, on, and I have no idea how to do it, they sent me syslinux, but I have no idea what kernel to use, or really how to install it using syslinux. Please, any help will be appreciated. Scott Latta Network Administrator Techsupport Supervisor Nexity Bank A+, NET+, MCP 205-298-6482

Is anyone using an inline IDS like hogwash or snort-inline to drop packets in a system running shoreline? I _think_ I see how to configure it, but I''d be really interested in finding a howto or something... Thanks! Mike- -- Mornings: Evolution in action. Only the grumpy will survive. -- Please note - Due to the intense volume of spam, we have installed site-wide spam filters at

Even some more observations. I noticed when I join my machine to AD it prompts a second time for the credentials. It does not matter what I enter or even cancel the dialog it will always display an error: Changing the Primary Domain DNS name of this computer to "" failed. The name will remain "ad.cyberdyne.local". Well, actualy this is what I want anyway. I found this

*I have a Ham Radio program, named CQ100, it works fine using WINDOZE, but when I installed the same program on my linux system everything works except there is no-audio I'am using Ubuntu 7.10 linux... The author told me that windoze uses GSM 6.10 codec, plus ACM audio compression manager, these are built-in... So by anychance does anyone know of a program that one can get to use on a

Hello all, a friend has a problem with tiff() which I was unable to help about. I searched the error messages to no avail. When he tries: tiff(filename = "FedeWhyDoesntThisBloodyWork.tif", width = 5, height = 5, units = "cm", bg = "white", res = 1200) Error in tiff(filename = "FedeWhyDoesntThisBloodyWork.tif", width = 5, : unable to start device

*I have asked this once before, but never got any good info as how I can get this codec using wine or crossover...Hopefully some one may have the answer for I am sure that there are many Ham operators out there that would like to find out also... The program CQ100 uses the GSM 6.10 codec that ships with windows, it also uses the windows ACM system (Audio Compression manager)... This info came

*I've been looking into installing the latest version of Compiz-fusion 0.7.6, also the latest plugins... Plus any how to install info... Does anyone know a site to automatically update it, from what I now have that came with 8.04 version of Ubuntu... Thanks for any help would be appreciated... Larry * -- Powered by Debian/GNU/Linux by Ubuntu ver 8.04 Hardy Heron 73 de Larry/wd9esu

Hola:   Desde que he instalado la versión 2.14.0 obtengo el siguiente error al hacer source:   Mensajes de aviso perdidos In readLines(file) : incomplete final line found on ''ejemplo.R''   No hay variación en mi archivo de datos ni en el script de comandos de R sobre el cual realizo el source, con respecto a cuando utilizaba la versión anterior.   ¿Sabéis a qué puede deberse

Hello I am looking for a way to have snort to dynamically update my shorewall config. I have seen software out there but I would like to see if anyone had tried this first. Aslo I would like to know if there is a way clear the Netfilter tables when I do a shorewall restart. The reason being is that when I make a change to my firewall setting I want all connections to have to re-establish