similar to: Updated PDFs available

Juraj Ontkanin has informed me that he has updated the PDF files for 1.3.14a. The PDFs are available at: ftp://slovakia.shorewall.net/mirror/shorewall/pdf/ http://slovakia.shorewall.net/pub/shorewall/pdf/ Also available (or will be shortly) at your favorite mirror in the contrib/pdf directory. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net

The PDFs are available at: ftp://slovakia.shorewall.net/mirror/shorewall/pdf/ http://slovakia.shorewall.net/pub/shorewall/pdf/ rsync://slovakia.shorewall.net/shorewall/pdf/ -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net

PDFs are available at: ftp://slovakia.shorewall.net/mirror/shorewall/pdf/ http://slovakia.shorewall.net/pub/shorewall/pdf/ rsync://slovakia.shorewall.net/shorewall/pdf/ -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.sf.net Washington USA \ teastep@shorewall.net

The .pdf is ready at: ftp://slovakia.shorewall.net/mirror/shorewall/pdf/ http://slovakia.shorewall.net/pub/shorewall/pdf/ -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

The following systems will be down this weekend for server rebuild: shorewall.net lists.shorewall.net www1.shorewall.net ftp1.shorewall.net rsync.shorewall.net cvs.shorewall.net This will affect: Shorewall site and archive search Mailing list archives Mailing lists CVS Primary DNS for shorewall.net I will start the rebuild on Saturday morning and hope to be done by Saturday

FYI... ---------- Forwarded Message ---------- Subject: RE: [Shorewall-users] 2.6 kernel ipsec and shorewall Date: Thursday 23 September 2004 07:44 From: "Jonathan Schneider" <jon@clearconcepts.ca> To: "''Tom Eastep''" <teastep@shorewall.net> I must have been up too late working on this, looking at it the next day I noticed I completely forgot

FYI This bug will prevent ''shorewall restore'' from working if you have "!<single IP address>" in the ORIGINAL DEST column. -Tom ---------- Forwarded Message ---------- Subject: [PATCH] Another iptables-save buglet Date: Wednesday 14 September 2005 15:09 From: Tom Eastep <teastep@shorewall.net> To: netfilter-devel@lists.netfilter.org The conntrack

I have created shell script for MRTG statistics of droped/rejected packets: ftp://slovakia.shorewall.net/mirror/shorewall/mrtg/ http://slovakia.shorewall.net/pub/shorewall/mrtg/ rsync://slovakia.shorewall.net/shorewall/mrtg/ example: http://slovakia.shorewall.net/pub/shorewall/mrtg/example/ It is not based on /var/log/messages (syslog), but iptables counter. A lot of packets are droped/rejected

Hi I have 2nic firewall . I had to open some ranges of udp and tcp ports . I faced a problem that although all the ports are open Some functionality was not working . Any body used shorewall with H323 Voip traffic DNATed . Any help is appretiated . Thanks ----- Original Message ----- From: <shorewall-users-request@lists.shorewall.net> To: <shorewall-users@lists.shorewall.net> Sent:

http://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-Beta2 ftp://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-Beta2 Problems Corrected: 1. The "shorewall check" command results in the (harmless) error message: /usr/share/shorewall/firewall: line 2753: check_dupliate_zones: command not found 2. The

http://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-Beta2 ftp://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-Beta2 Problems Corrected: 1. The "shorewall check" command results in the (harmless) error message: /usr/share/shorewall/firewall: line 2753: check_dupliate_zones: command not found 2. The

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 As I pointed out to Wilson in a private message, this appears to show that no other connection requests (other than port 3000) are being sent from the client to the server (or at least no other connection requests are being received by the Shorewall box). Wilson: Are you sure that the client is supposed to open port 3001 on the server and not the

mrtg-drop-hits v1.3 Thanx a lot to Steve Cowles for his help and improvements CHANGELOG: 1.3 - 2003-01-10 - fix: size of counter_file equals zero - Bering/ash compatibiliy added by Steve Cowles - INSTALL.snmp added by Steve Cowles - small cleanup in INSTALL ftp://slovakia.shorewall.net/mirror/shorewall/mrtg/ http://slovakia.shorewall.net/pub/shorewall/mrtg/

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 To reflect recent allocations by the IANA, the following files are available: For Shorewall 2.0.0b and earlier: http://shorewall.net/pub/shorewall/errata/1.4.10/rfc1918 ftp://shorewall.net/pub/shorewall/errata/1.4.10/rfc1918 For Shorewall 2.0.1 and later: http://shorewall.net/pub/shorewall/errata/2.0.10/bogons

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The initial file that I uploaded was incorrect. If you downloaded a file that still contains 72.0.0.0/8 then please download again. Sorry for the confusion. An updated bogons file is available at: http://shorewall.net/pub/shorewall/errata/2.0.8/bogons ftp://shorewall.net/pub/shorewall/errata/2.0.8/bogons Thanks to Lorenzo Martignoni for bringing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 An updated bogons file is available at: http://shorewall.net/pub/shorewall/errata/2.0.8/bogons ftp://shorewall.net/pub/shorewall/errata/2.0.8/bogons Thanks to Lorenzo Martignoni for bringing the resent IANA allocations to my attention. - -Tom - -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \

PDF Documentation for Shorewall 1.3.13: ftp://slovakia.shorewall.net/mirror/shorewall/pdf/ http://slovakia.shorewall.net/pub/shorewall/pdf/ rsync://slovakia.shorewall.net/shorewall/pdf/ Juraj

Hi Tom, Many thanks for that, that''s really helped. Netfilter is indeed dropping the packets as invalid. Thanks and regards, Frances -----Original Message----- From: Tom Eastep [mailto:teastep@shorewall.net] Sent: 23 March 2007 18:05 To: Shorewall Users Subject: Re: [Shorewall-users] Expected handling of [SYN] when expecting[SYN, ACK]? Frances Flood wrote: > Basically, if the

Updated rfc1918 and bogons files are now available: rfc1918 for Shorewall 2.0.0 and earlier: http://shorewall.net/pub/shorewall/errata/1.4.10/rfc1918 bogons for Shorwall 2.0.1: http://shorewall.net/pub/shorewall/errata/2.0.1/bogons Thanks go to Thomas Backlund for pointing out that the file was out of date. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool

Thanks for such a quick reply Tom! Any suggestions then as to what I might do other than putting a second nic in the SBS and opening it up for web access? I don''t like the idea, but since MS SBS includes fireall that is actually what MS suggests. Boyd -----Original Message----- From: Tom Eastep [mailto:teastep@shorewall.net] Sent: January 3, 2005 3:05 PM To: Shorewall Users Cc: Boyd