similar to: Shell Requirements for Shorewall 1.4.6

Greetings, What programming languages besides shell scripting are used in shorewall? What knowledge is needed to help in shorewall development? I figure iptables is a goood bet but is there anything else as well? Thank you for your time. Regards, Jason

Hello, I have the following situation : Server with 2 nics 1 nics connected to the internet, 1 connected to the LAN I have OpenVPN running on the system and the following setting in the tunnels file : =================================== openvpn:2000 net 62.58.0.226 openvpn:2001 net 62.58.0.226 openvpn:2002 net 62.58.0.226 =================================== All tunnels ran for weeks

https://bugzilla.mindrot.org/show_bug.cgi?id=2902 Bug ID: 2902 Summary: Shellcheck reports on ssh-copy-id Product: Portable OpenSSH Version: 7.7p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: ssh-copy-id Assignee: unassigned-bugs at

Season Greetings to all Tom, in your faq, u have this noted: While I am currently using the HTB version of The Wonder Shaper (I just copied wshaper.htb to /etc/shorewall/tcstart and modified it as shown in the Wondershaper README), I treid this with wondershaper, using Bearing Leaf 1.0 stable i even changed the tc command to run_tc, and tried it in both angles, and i receive the following..

Hello, I was helping a friend to extend his Shorewall firewall and noticed something strange in the syslog Shorewall:all2all:REJECT:IN= OUT=eth1 SRC=192.168.0.1 DST=192.168.0.2 LEN=39 TOS=0x00 PREC=0x00 TTL=64 ID=3021 DF PROTO=UDP SPT=44337 DPT=1503 LEN=19 Anybody got an idea what this can be? -- Groeten, Peter Device response received when none expected. - - Heb je een Dreambox 7000S ?

Hello, My workstation should synchronize its clock on my server but from some reason this is not allowed This is what I get in the log when the client tries to sync with NTP Oct 25 08:25:47 server kernel: Shorewall:all2all:REJECT:IN= OUT=eth1 SRC=192.168.0.5 DST=192.168.0.4 LEN=76 TOS=0x10 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=123 DPT=1031 LEN=56 My internal network is eth1 , external is

On Fri, Aug 11, 2023, at 2:58 PM, Rowland Penny via samba wrote: > On Fri, 11 Aug 2023 14:03:01 +0200 > Kasper Brandt via samba <samba at lists.samba.org> wrote: > > > Hello > > I was directed to discuss this issue here. As I understand the issue > > with using the unquoted variable is that it expand globs unless > > noglob is set. E.g. > > > >

Hello, My server is on Mandrake 10.1 off. eth0 is WAN with static IP connected 512 DSL eth1 is LAN. I am using shorewall. I have NAT on eth0. I have squid running. I am not able to connect to MSN. What are the rules to allow MSN ? Thanks Varun

I have shorewall running on a seperate linux box i would like to be able to export my display to my windoze pc, but have not been able to do so unless I stop shorewall. Any input would be appreciated, looked throughout website and others. Could not find anything. Thanks in advance. Toronto, CANADA Philippe

Hello, I recently setup Shorewall 2.0.9 on a RedHat 9 machine using the two interface quick start guide. ip addr show: 1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 brd 127.255.255.255 scope host lo 2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100 link/ether 00:20:ed:76:dc:82 brd

On Fri, 11 Aug 2023 14:03:01 +0200 Kasper Brandt via samba <samba at lists.samba.org> wrote: > Hello > I was directed to discuss this issue here. As I understand the issue > with using the unquoted variable is that it expand globs unless > noglob is set. E.g. > > root at dy3:/# test="b*" > root at dy3:/# a=($test) > root at dy3:/# echo ${a[0]} > bin

For some reason, ip_conntrack_ftp & ip_nat_ftp aren''t loading automatically. If I load them manually with modprobe FTP works. Both ip_conntrack_ftp & ip_nat_ftp are listed in the modules file - I haven''t mucked with the order at all, so I assume it''s right. I''m using Mandrake 9.2 but, as recommended, I uninstalled the Mandrake version of shorewall and

http://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-RC1 ftp://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-RC1 Problems Corrected: 1. The syntax of the add and delete command has been clarified in the help summary produced by /sbin/shorewall. New Features: 1. TCP OpenVPN tunnels are now supported using the ''openvpn'' tunnel type. OpenVPN

Hello I was directed to discuss this issue here. As I understand the issue with using the unquoted variable is that it expand globs unless noglob is set. E.g. root at dy3:/# test="b*" root at dy3:/# a=($test) root at dy3:/# echo ${a[0]} bin It does seem a bit hypothetical that the output of sambatool dns query ... for an A record should contain a glob, but for the sake of robustness it

Hello Tom and all, Quick question: Is it possible to operate an OpenVPN server from behind a firewall? Is it as simple as setting it up and placing: DNAT net loc:192.168.10.20 udp 5000 - ipaddress -- Paul Slinski -o) Network Administrator /\ Global IQX, Inc. _\_v Global IQX is the leader in integrated e-business automation solutions for the group life and health insurance

hi, we use openvpn as for our vpn endpoints and we''ve got about 70-80 vpn connections which means we have tun0 - tun80 interface. i''d like to define one zone for all of our vpn connections how can I do that? actualy our local zone is 192.168.0.0/17 (not 16) and all of the vpn''s are in 192.168.128.0/17. our should i define somehow the local zone as 192.168.0.0/16? but in

So others have commented about the particulars of bash and shell quotes, etc. I wanted to suggest you take a look at ShellCheck [1,2] and BATS [3]. I have been doing syntax, lint, and acceptance testing for Puppet code for about a year...and love it... but I recently came across these and have been working to apply the same principles to my shell script projects. The sheer number of fringe bugs

Hi all, Currently at work we use a commercial product called "Gnatbox", which, I believe, is a BSD derivative running on a floppy disk. They have a pretty UI and all, but I''d feel much safer/happier with a GNU/Linux box and Shorewall doing the same thing. In fact, I''m doing something very close to this at home using Openwrt and Shorewall on my WRT54G router, but I

I''ve installed a bering box acting as a firewall for a lan; the lan is 192.168.1.0/24 the bering box is 192.168.1.254 I''ve installed a squid server 192.168.1.1 It is possible to configure shorewall for a transparent proxy to the squid server? I''ve tryed with REDIRECT loc loc:192.168.1.1:3128 tcp www - !192.168.1.1 in the rules file I get this error: Error:

Okay, no one had any idea concerning my Radmin question, which I still haven''t figured out. However, I am now trying to figure out an FXP problem. All of the needed details are listed below the description problem. Problem: I have a local windows XP pro computer running FlashFXP behind shorewall 2.0.9 (unpatched) with only two interfaces (ppp0 and eth1) as loc:192.168.1.5. The server