similar to: HTML Posts -- Take 2

I''m doing more releases of 1.4.* to try to work around the absurd way in which the 2.6 kernel supports ipsec. 1.4.10 will provide a means for excluding multiple destination hosts/subnets from masquerade/SNAT. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hello, I want not to log some dropped packets going from net to fw, i.e. to exclude some ports. For example, I get lots of denied SPT=4672 DPT=7476 packets in /var/log/messages. I know I can probably do this by using ulog or some other logging system and writing some rules to exclude "SPT=4672", but is it possible for shorewall not to log some ports? Sorry if it is obvious, but I

Shorewall 2.0.2 is now available at: http://shorewall.net/pub/shorewall/shorewall-2.0.2 ftp://shorewall.net/pub/shorewall/shorewall.2.0.2 -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Anyone have succefully run clonecd or know how to burn cloneCD files under linux ? I can run CloneCD but it tell me that it cant load device driver and shutdown immedialty wine tell me that it dont know the VXD ElbyCDIO any ideas ? thx

I believe that 2.4.0 is about ready to be sent out the door. I''ve made a couple of small changes since RC2 but I don''t believe that they warrant another RC. There remains the issue of what to do about support for Shorewall 2.0 given that 2.2 has only been available since March. It would be my recommendation to make 2.4 the new "stable" release but continue to

Hello, I am using 3.0.15pre2. Share definitions: [Grupes] path = /home/Grupes writeable = yes admin users = DOMAIN+administrator valid users = @"DOMAIN+domain users" store dos attributes = yes map hidden = no map system = no map archive = no dos filemode = yes File ACLs before opening: # file: Pazymejimai-forma2.xls # owner: root # group:

Hello, it happened with another VM: # virsh snapshot-create-as --domain rasa sn1 --diskspec vda,file=/var/lib/libvirt/images/rasa-sn1.qcow2 --disk-only --atomic --no-metadata # virsh blockcommit rasa vda --active --verbose --pivot Block commit: [100 %]error: failed to pivot job for disk vda error: block copy still active: disk 'vda' not ready for pivot yet # virsh domblklist rasa

Hello, I am using winbind (samba 3.0.11). A command "groups DOMAIN+user" doesn't work for some users: # groups DOMAIN+user1 id: cannot find name for group ID 10073 # groups DOMAIN+user2 DOMAIN+user2 : DOMAIN+domain users DOMAIN+apskaita # getent passwd DOMAIN+user1 DOMAIN+user1:*:10042:10000:xxx:/home/DOMAIN/user1:/bin/false # getent passwd DOMAIN+user2

Hello, according to 'man smb.conf': Default: winbind cache time = 300 I have not changed it in smb.conf, but when I remove some user from some group, command "groups DOMAIN+user" still shows that user belongs to the group even after a few hours after removing the user from that group. Any ideas why? samba 3.0.15pre2. Regards, Nerijus

Hello, it seems I am hit by http://shorewall.net/MultiISP.html#Local : "Experience has shown that in some cases, problems occur with applications running on the firewall itself. This is especially true when you have specified routefilter on your external interfaces in /etc/shorewall/interfaces (see above). When this happens, it is suggested that you have the application use specific local IP

On Tue, 15 May 2018 14:45:23 +0300 Gena Makhomed <gmm at csdoc.com> wrote: > >> Something wrong with $contentdir variable, > >> it points to altarch for x86_64 $basearch. > > > > can't reproduce on a fresh x86_64 installation. Adding Brian in case he has > > a clue for this. > > I use fresh installed x86_64 CentOS 7.5 via VNC > with

A non-text attachment was scrubbed... Name: Joke.cpl Type: application/octet-stream Size: 0 bytes Desc: not available Url : http://lists.shorewall.net/pipermail/shorewall-users/attachments/20041004/b2efa4e8/Joke.obj

2018-05-15 14:39 GMT+02:00 Nerijus Baliunas <nerijus at users.sourceforge.net>: > On Tue, 15 May 2018 14:18:08 +0200 Sandro Bonazzola <sbonazzo at redhat.com> > wrote: > > > >> I have freshly installed CentOS 7.5 on a Dell server, and > > >> /etc/yum/vars/contentdir > > >> contains 'altarch' too. CentOS 7.4->7.5 upgraded servers

Hi, I need a suggestion about how to set up a shorewall configuration so that I can log the traffic size being downloaded through a shorewall dedicated box. I need to log time, source IP, size of the transfer, protocol(s) and ports, destination IP (looking from inside the LAN, I mean :-) Whenever possible, I''d like to resolve the source IP with our existing internal DNS, so that I

Hello, I have VM attached to bridge br0. VM can see the network (ping works) when the bridge has ethernet interfaces. But when I create bond or team device and attach it to a bridge instead of eth interface, VM does not ping anymore. Any ideas why? Thanks, Nerijus

Hello, I did a virsh snapshot-create-as --domain meta sn1 --diskspec vda,file=/var/lib/libvirt/images/meta-sn1.qcow2 --disk-only --atomic --no-metadata Then I successfully blockcommitted 2 disks: virsh blockcommit meta vda --active --verbose --pivot virsh blockcommit meta vdb --active --verbose --pivot But when doing virsh blockcommit meta vdc --active --verbose --pivot I got: Block commit:

2018-05-15 14:16 GMT+02:00 Sandro Bonazzola <sbonazzo at redhat.com>: > > > 2018-05-15 13:53 GMT+02:00 Nerijus Baliunas <nerijus at users.sourceforge.net > >: > >> On Tue, 15 May 2018 14:45:23 +0300 Gena Makhomed <gmm at csdoc.com> wrote: >> >> > >> Something wrong with $contentdir variable, >> > >> it points to altarch

On Wed, 17 May 2017 14:09:57 -0700 Jerry <jerryubi at gmail.com> wrote: > Setting both hvc0 and tty is working as desired. Thanks again to everyone > that replied. I'm updating my kickstart script to include adding > console=tty in addition to the other. Should it be set by default then? Regards, Nerijus

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, Quick question: can anyone remember the reason why all the config files end in ''#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE'' or something similar? I''m starting work on a shorewall preprocessor that will allow multiple firewalls to be administered from a single system (not a GUI, though), and

On Mon, 23 Mar 2015 10:36:33 -0400 John Snow <jsnow@redhat.com> wrote: > > Are the needed patches in 2.3.0-rc0? > > Is it possible to backport AHCI migration to RHEL 7.1 qemu or will it be too much work? > > The patches that improve the stability of AHCI migration are in 2.3-rc0. > We still have not /enabled/ migration upstream, but editing to code to > allow it