similar to: Announce: shoregen 0.1.1 release

Anyone know how/where we can get some? It has been raised before: http://lists.shorewall.net/pipermail/shorewall-users/2004-July/013594.html I''d like to see an IRC or Jabber service for both support and development. -- Paul <http://paulgear.webhop.net> -- Did you know? OpenOffice.org has built-in PDF creation. Better yet, it''s compatible with Microsoft Office, and

Hi folks, Over the weekend Ron has made some good progress with functionality available at http://devel.shorewall.net, and i''ve converted all of the content i had placed at http://shorewall.dyndns.org (which is now a redirect to the former). Please have a look around and give your feedback, either here or on the site itself. -- Paul <http://paulgear.webhop.net> -- Did you know?

Greetings to all of the Shorewall community! We''d like to find out a little more about the environments in which Shorewall runs, and to this end i''ve created a survey. It is mostly designed to allow Shorewall users to see how their environment compares with that of the average Shorewall user (if such a thing exists!), but the results may be used by the Shorewall team to assist

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi folks (mostly Tom), In which shorewall configs is the ordering of entries significant? I know about rules & policies, and if i remember correctly zones under some circumstances (when one is a sub-zone of another), but are there any others? I am trying to work out (for my multi-firewall preprocessing script) whether i need to process

Hi folks, I''m conducting a straw poll for your opinions on whether we should send CVS commit logs (probably with diffs) to the shorewall-devel list, or to another (new) list? I can see advantages to both ways: separate lists mean that people who aren''t contributing code don''t get flooded with code noise, but a single list will help keep everyone involved in the

Hi folks, I''ve added a couple of ''help wanted'' ads to our SourceForge project. You can see them at http://sourceforge.net/people/?group_id=22587 I''ll add more as i have the opportunity. If you can think of other jobs we need to assign, please let me know. -- Paul <http://paulgear.webhop.net> -- Did you know? Using accepted quoting conventions makes

Hello, Usually when i''ve a hole to poke through firewalls, i have many hosts to update : workstation firewall, lan firewall, the other lan firewall, and the server behind the last firewall. all of them are managed with shorewall... Is there a smart way to update them all at once ? What you guys do on your firewalls ? thanks. -- xavier

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Quick question: can anyone remember the reason why all the config files end in ''#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE'' or something similar? I''m starting work on a shorewall preprocessor that will allow multiple firewalls to be administered from a single system (not a GUI, though), and

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Can someone refresh my memory on the difference between the following (where dmz contains an RFC 1918 address host)? ACCEPT net dmz tcp 80 - all DNAT net dmz tcp 80 I''m trying to generate a script for maintaining multiple interconnected firewalls from shared policy, rules, and zone files, and i

A request has been logged with SourceForge support to have the subscriber list and archives of these mailing lists imported. You will automatically be subscribed to the new list - please update your mail filters if required. During the changeover, please do not use these lists if possible, since the archives from this point on will not be preserved if you send to

Lars Jensen wrote: > Hi paul, > > The documentation for the routestopped configuration file at > http://shorewall.sourceforge.net/Documentation.htm#Routestopped says > that the host must be listed separated by commas. If this is done, an > error occurs upon reboot, and shorewall doesn''t load at all (debian). It > is necessary to include double quotes also, like this:

Hi folks, As the subject says, the Shorewall users mailing list has been moved to SourceForge.net. I''m still manually processing a number of subscribe and unsubscribe requests that have occurred since we requested the import. The list archives are now available via: http://sourceforge.net/mail/?group_id=22587 and you can manage your subscription to the new list at:

Hi folks, When we first started talking about Shorewall post-Tom, a few people offered to help with testing. Would those people please raise their hands again? :-) I''m investigating Nicolas Helleringer''s recent message on shorewall-users (http://lists.shorewall.net/pipermail/shorewall-users/2005-June/018898.html), and a good test environment would come in really handy,

Hi folks, I''m feeling the need to get an updated feel for where our users are at with respect to Shorewall, and i''m thinking about running a survey again. My thoughts at the moment are that we should have two separate surveys: one to find out about users and their thoughts, and the other to find out about the systems on which Shorewall is running. If you have any thoughts

Hi folks, Has anyone out there done port forwarding or DNAT for UDP packets that are normally sent to the broadcast address (255.255.255.255)? I have to support a nasty database application called FileMaker Pro (those of you who know it are probably groaning about now), which uses broadcasts to locate the database server. Theoretically, i can get around this requirement by using LDAP lookups

Hi folks, Last night and this morning i''ve hacked up a quick web site for coordinating our development work based on Drupal (http://drupal.org). You can find it at: http://shorewall.dyndns.org I''ve put a few ideas in there - feel free to use the comments or sign up for an account and create your own pages (particularly in the two books about development and web site work).

Hello, With reference to the problems listed below. I too am having incredibly long start up times. I''m talking minutes here (around 5 minutes). My configuration is not complex I don''t think. We are you using ldap too and the settings are bellow. The network is up as I''m restarting shorewall whilst the machine is running. Any suggestions? Is there no way to

The params file appears to be simply "sourced" by the firewall script, which means one can put any Bourne shell code into it and it will execute it. This feature isn''t documented, so I''m wondering if it can be documented and thus guaranteed to always work. I''d like to dig out the IP parameters of my interface cards from the ifcfg-eth? files and set shorewall

2005/5/27, Paul Gear <paul@gear.dyndns.org>: > > I think a champion for the samples is just what we need right now. Tom > carried so much of shorewall completely on his own, but we can''t afford > to do that. We need each person to take responsibility in one > particular area, and then get in and *do* it. The samples are there in > CVS now

The 1.2 firewall contains messy logic to support the old sample configurations in that any rule that contains "none" in any of its columns is ignored. I''m considering removing that messiness in 1.3 and seek the opinion of the list. Thanks, -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ teastep@shorewall.net