similar to: Shorewall 1.4.9 news discrepancy

On Wednesday 10 December 2003 06:33 am, Tom Eastep wrote: > On Tuesday 09 December 2003 09:29 pm, you wrote: > > I am sorry. I thought I was clear. I guess I did not state explicitly > > the discrepancy. > > Sorry for being snippy -- I shouldn''t let my personal problems leak out onto > the list. > > > The comments (#) I put in the original post (below)

Shorewall 1.4.9 is now available. http://shorewall.net/pub/shorewall/shorewall-1.4.9 ftp://shorewall.net/pub/shorewall/shorewall-1.4.9 Unless something urgent comes up, this will be the last release of Shorewall 1.x. Release notes are attached. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \

http://shorewall.net/pub/shorewall/Beta ftp://shorewall.net/pub/shorewall/Beta Problems Corrected since version 1.4.8: 1) There has been a low continuing level of confusion over the terms "Source NAT" (SNAT) and "Static NAT". To avoid future confusion, all instances of "Static NAT" have been replaced with "One-to-one NAT" in the documentation and

Hello, Is is possible to do "shorewall reject 1.1.1.1 tcp 25" ? So I can dynamically blacklist offensive smtp senders, but only have shorewall reject certain types (smtp) traffic from them? Thanks, Alex Martin http://www.rettc.com

Hello, Mike Noyes and myself have populated http://wiki.rettc.com with the shorewall FAQ. This wiki is running MediaWiki, http://www.mediawiki.org. Currently, a couple items are not complete. I have just begun a heavy semester of mathematics/physics studies, and do not have much time to give to this. But, it is online, and seems to be stable. I will keep an eye out for abuse, and limit

Hello, I have forwarded this to the shorewall-users list. You will find better support for this obscure problem there. Regards, Alex Martin http://www.rettc.com Cristian Valentin Barean wrote: > Hello ! > My name is Barean Cristian, and I have a network of 35 users, on a > Linux Mandrake 9.2 server. > As I was adding more users in my network, I found a problem with

In the Shorewall/ CVS project: Problems Corrected: 1) There has been a low continuing level of confusion over the terms "Source NAT" (SNAT) and "Static NAT". To avoid future confusion, all instances of "Static NAT" have been replaced with "One-to-one NAT" in the documentation and configuration files. 2) The description of NEWNOTSYN in

Hello, In reference to http://wiki.rettc.com/wiki.phtml?title=Wiki_Shorewall_FAQ ; Well, after a lot of emails I setup a wiki for shorewall, etc. It has proved to be completely useless. I have noticed one slight distro specific example added, a couple typo additions and fixes, otherwise, all contributions have been in excess (Tom...), or in malign. For my uses it has proven of little use as

The following systems will be down this weekend for server rebuild: shorewall.net lists.shorewall.net www1.shorewall.net ftp1.shorewall.net rsync.shorewall.net cvs.shorewall.net This will affect: Shorewall site and archive search Mailing list archives Mailing lists CVS Primary DNS for shorewall.net I will start the rebuild on Saturday morning and hope to be done by Saturday

Lorenzo Marignoni reports that: o Shorewall 1.2.10 is in the Debian Testing Branch o Shorewall 1.2.11 is in the Debian Unstable Branch Thanks, Lorenzo! -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ teastep@shorewall.net

Good post Alex, I agree that all the talk of Wiki and FAQ''s are getting off topic from what the main problem is... Tom dealing with questions already answered in the faq. The documentation there is already very good. I also think that shorewall-newbies is probably not the best way to go. The idea of shorewall-developers (Tom and those that want to be included) and Shorewall-Users (NOT Tom

I am new to Shorewall and FreeSwan, please excuse my ignorance I was wondering if someone could help me. I had help getting my FreeSwan running with the following iptables commands: iptables -I FORWARD -s 0/0 -d 192.168.1.0/24 -i ipsec0 -o eth1 -j ACCEPT iptables -I FORWARD -s 192.168.1.0/24 -d 0/0 -i eth1 -o ipsec0 -j ACCEPT If I manually run this FreeSwan works, however I am not sure

Has anyone successfully setup a shorewall Ucarp solution?

Hello, Today I restarted the firewall machine during an outage of the ADSL line overhere. At the boot Shorewall did not start but stopped during start. The problem was that the ADSL line was down so no DNS server available to resolve hostnames. I have a hostname in "blacklist" file and therefore shorewall did not start. Is this problem solvable without putting an IP address in the

Hello I am looking for a way to have snort to dynamically update my shorewall config. I have seen software out there but I would like to see if anyone had tried this first. Aslo I would like to know if there is a way clear the Netfilter tables when I do a shorewall restart. The reason being is that when I make a change to my firewall setting I want all connections to have to re-establish

Shoot! Sorry Tom. I thought I replaced your e-mail address with the shorewall list address. I got it working!!! I finally figured out what I was doing wrong. Pays to write down what I want to accomplish versus flying by the seat mof my pants. The ACCEPT+ is G R E A T! Took care of some of my issues along with removing the redirect rule (yeah, yeah...I should have thought it over more

as subject

Hi all! I have got a vpn connection set up using FreeSwan and shorewall. Everything works fine but I want to add another subnet to the whole. This means that 1 box will get two net-to-net connections. I want to limit the services on one subnet however. Cuurently I have defined a vpn zone for the current connection and allow all vpn<->loc traffic. How would I go about in tightening the

Hello, I have the go ahead to fix documentation. For starters I will clean all extraneous crap from the markup. Then fix any errors and typos. If anyone sees any gramatical errors or typos or needed clarifications or expansions or whatever, please post them here. Or additional FAQ entries, etc, all will be considered. I hope to keep most of this conversation on the shorewall-devel list. Any

http://shorewall.net/pub/shorewall/Beta ftp://shorewall.net/pub/shorewall/Beta This is Beta 1 with the following Changes: a) The fix for SNAT in DNAT rules has been included. b) An updated rfc1918 file is included. c) The documentation is no longer part of the base release. Stay tuned for announcements on how the documentation is going to be released. -Tom -- Tom Eastep \ Nothing is