Displaying 20 results from an estimated 1000 matches similar to: "Shorewall 2.2.0 RC5"
2005 Jan 12
1
Shorewall 2.0.15
My sincere apologies for the messed up 2.0.14. I didn''t realize that I
had merged a change from 2.2.0 but hadn''t tested it.
http://shorewall.net/pub/shorewall/2.0/shorewall-2.0.15
ftp://shorewall.net/pub/shorewall/2.0/shorewall-2.0.15
1. The range of ports opened by the AllowTrcrt action has been expanded
to 33434:33524 to allow for a maximum of 30 hops.
2. Code mis-ported
2005 May 31
11
More Tests for 2.4.0-RC2 - strange behaviour
Hi all,
I was trying to test ROUTE specific code with a multi-isp serviced box.
There is a bug somewhere, but I''m not able to understand what the real
problem is:
when I issue a "shorewall show capabilities" I get:
Loading /usr/share/shorewall/functions...
Processing /etc/shorewall/params ...
Processing /etc/shorewall/shorewall.conf...
Loading Modules...
Shorewall has
2004 Dec 30
4
Shorewall 2.2.0 RC3
http://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-RC3
ftp://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-RC3
Just a few bug fixes:
* The following error message could appear during "shorewall stop"
clear":
local: lo:: bad variable name
*
* The rate limiting example in /etc/shorewall/rules has been
changed to use the RATE
2005 Jan 10
5
Traceroute unblocking, single interface, policy drop
I have a shorewall 2.0.14 running on a single interface machine (nwww in
the log below) that is attempting to be well screwed down. The policy
file reads:-
#SOURCE DEST POLICY LOG LEVEL
LIMIT:BURST
fw net DROP info
net all DROP info
# The FOLLOWING POLICY MUST BE LAST
all all
2005 Jan 07
1
Shorewall 2.2.0 RC4
http://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-RC4
ftp://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-RC4
New Features:
1. A listing of loaded iptables kernel modules is now included in the
output of "shorewall status".
Problems Corrected.
1. Several problems associated with processing the IPSEC column in
/etc/shorewall/masq have been corrected.
-Tom
--
2005 Feb 01
4
Shorewall problem
I am getting the following message when Shorewall stops can anybody shed
any light on this message and where I should be looking? Thanks
root@bobshost:~# shorewall stop
Loading /usr/share/shorewall/functions...
Processing /etc/shorewall/params ...
Processing /etc/shorewall/shorewall.conf...
Loading Modules...
Stopping Shorewall...Processing /etc/shorewall/stop ...
IP Forwarding Enabled
2004 Dec 06
3
OT Linux/Gateway alternative for WAN compression/accelerator
I''m building a 10 branch/1 headquarter network with Shorewall/Linux as
gateway on all locations.
The TI guy asked me if there is a way to ''cache'' TCP/UDP traffic between them.
I crawled on Internet and I only find very expensive solutions for
this. Some of them appeared in this comparison article:
http://www.networkcomputing.com/showitem.jhtml?docid=1524f5
Does anyone
2004 Oct 23
3
New Contribution
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Adem has contributed a nice IP Subnet chart which I''ve placed at
http://shorewall.net/pub/shorewall/contrib/IPSubNetMask.html
Thanks Adem!
- -Tom
- --
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@shorewall.net
PGP Public Key \
2004 Aug 10
2
[OT] Bandwidth reporting tool recommendations
Hi,
Also, does anyone have a recommendation for a reporting tool that shows
bandwidth use, for each IP and each interface on a Shorewall FW?
Tried BandwidthD, but couldn''t get it to compile on Mandrake10...
NAAT might fit the bill - if it doesn''t mess-up my shorewall setup...
Thanks for any suggestions,
Richard.
2005 Feb 05
9
Hot Fallover
Hello List:
Recently our shorewall FW server went dead (PS failure) & brought the entire
system down. Luckily we are testing the FW and other servers, so we did not
loose anything. Now we have decided to setup two Shorewall FW servers with a
primary & another fallover FW server.
I have done some research cruised the Internet and found that a product
''UCARP''
2005 Jun 08
2
policy or rules
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Dear all,
I''m a bit confused on the rules and would like your help.
I''ve 4 NIC,
eth0 --> WAN (net)
eth1 --> OSPF1 (bb1)
eth2 --> OSPF2 (bb2)
I would like to enable all the icmp function (ping and traceroute)
Wonder what effect will the following policy make.
bb0 all ACCEPT info
bb1
2005 Jun 05
1
Shorewall 2.4.0
Note: Because of the short time that has elapsed since the release of
Shorewall 2.2.0, Shorewall 2.0 will be supported until 1 December 2005 or
until the release of Shorewall 2.6.0, whichever occurs first.
http://shorewall.net/pub/shorewall/2.4/shorewall-2.4.0
ftp://shorewall.net/pub/shorewall/2.4/shorewall-2.4.0
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
2005 May 20
1
Shorewall 2.2.5
This will be my last 2.2 release. It contains a couple of small bug
fixes that I had laying around.
http://shorewall.net/pub/shorewall/2.2/shorewall-2.2.5
ftp://shorewall.net/pub/shorewall/2.2/shorewall-2.2.5
1) Previously, if PKTTYPE=No in shorewall.conf then pkttype match would
still be used if the kernel supported it.
2) A typo in the ''tunnel'' script has been corrected
2005 Feb 02
1
Shorewall 2.0.16
This release back-ports the DROPINVALID shorewall.conf option from 2.2.0.
1) Recent 2.6 kernels include code that evaluates TCP packets based on
TCP Window analysis. This can cause packets that were previously
classified as NEW or ESTABLISHED to be classified as INVALID.
The new kernel code can be disabled by including this command in
your /etc/shorewall/init file:
echo 1
2005 Feb 16
1
Shorewall 2.2.1
This release just rolls up the fixes for the few problems that have
surfaced in the first two to three weeks of Shorewall 2.2 availability.
If 2.2.0 is working ok for you, there is no reason to upgrade.
So far I''ve been very pleased with the stability of the 2.2 release and
attribute much of that to the new release model.
http://shorewall.net/pub/shorewall/2.2/shorewall-2.2.1
2005 Jan 03
3
Shorewall 2.0.14
http://shorewall.net/pub/shorewall/2.0/shorewall-2.0.14
ftp://shorewall.net/pub/shorewall/2.0/shorewall-2.0.14
New Features:
1. Previously, when rate-limiting was specified
in /etc/shorewall/policy (LIMIT:BURST column), any traffic which
exceeded the specified rate was silently dropped. Now, if a log
level is given in the entry (LEVEL column) then drops are logged
2005 Mar 12
1
Shorewall 2.2.2 (Corrected)
I forgot to add the last new feature to the previous announcement.
Shorewall 2.2.2 is now available.
http://shorewall.net/pub/shorewall/2.2/shorewall-2.2.2
ftp://shorewall.net/pub/shorewall/2.2/shorewall-2.2.2
Problems Corrected:
1. The SOURCE column in the /etc/shorewall/tcrules file now correctly
allows IP ranges (assuming that your iptables and kernel support
ranges).
2.
2005 May 02
4
streaming from the sound card
Hi,
I'm trying to set up Icecast and Ices to stream from my sound card's
line-in. I'm using ALSA. I'm experienced in Linux but haven't spent much
time on multimedia and I'm new to streaming. Platform is Mandrake 10.1
with kernel held to 2.4. The sound card is working and I can record to
file using sox.
Ices and Icecast both start okay, and aren't logging any
2005 Mar 09
20
WebGUI Scripts announcement
Dear Shorewall Users, having noticed that the request for a WebGUI is
growing, after a very short conversation I''ve had with Tom, I''d like to
let you all evaluate the Web interface to Shorewall I''ve written,
integrating the original weblet package made available for the LRP project.
----------------------------------------------------------------------------
Preamble
2005 May 02
1
Shorewall 2.2.4
http://shorewall.net/pub/shorewall/2.2/shorewall-2.2.4
ftp://shorewall.net/pub/shorewall/2.2/shorewall-2.2.4
Problems Corrected:
1. The error message:
Error: No appropriate chain for zone <z1> to zone <z2>
has been changed to one that is more self-explanatory:
Error: No policy defined for zone <z1> to zone <z2>
2. When only an