similar to: 1.4 Samples

Thanks to Fabien Demassieux, French Language versions of the QuickStart Guides and the Setup Guide are now available: http://shorewall.net/shorewall_quickstart_guide.htm http://shorewall.sf.net/shorewall_quickstart_guide.htm These guides will be available shortly on the other Shorwall Mirrors -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \

Thanks to Patrice Vetsel, there are now French versions available. They are linked from http://www.shorewall.net/shorewall_quickstart_guide.htm. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net

Jens wrote: > It seems that the standard setup as per my debian system has > the following : IP_FORWARDING=keep > To make my system work I had to change this to IP_FORWARDING=on. > > I have a pretty basic/stock debian (unstable) box sitting here for shorewall. > As far as I remember, nothing on this box as relating to ip_forwarding was > changed. > > I

Thanks to Fabien Luciole, there is now a French version of the Shorewall Setup Guide (http://shorewall.net/shorewall_setup_guide_fr.htm). Thanks Fabien!!! -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

FYI... ---------- Forwarded Message ---------- Subject: RE: [Shorewall-users] 2.6 kernel ipsec and shorewall Date: Thursday 23 September 2004 07:44 From: "Jonathan Schneider" <jon@clearconcepts.ca> To: "''Tom Eastep''" <teastep@shorewall.net> I must have been up too late working on this, looking at it the next day I noticed I completely forgot

Hello Tom, Monday, February 10, 2003, 2:35:45 AM, you wrote: TE> In the future, PLEASE POST PROBLEM REPORTS TO THE MAILING TE> LIST!!!!!!!!!!!!!!!!!!!!!!!!!!! TE> --On Monday, February 10, 2003 1:51 AM +0530 Srinivasa R Kotu TE> <kotu@ocimumbio.com> wrote: >> masq file >> >># interface subnet address >> eth1:0.0.0.0/0 192.168.1.0

Hi I have 2nic firewall . I had to open some ranges of udp and tcp ports . I faced a problem that although all the ports are open Some functionality was not working . Any body used shorewall with H323 Voip traffic DNATed . Any help is appretiated . Thanks ----- Original Message ----- From: <shorewall-users-request@lists.shorewall.net> To: <shorewall-users@lists.shorewall.net> Sent:

http://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-Beta2 ftp://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-Beta2 Problems Corrected: 1. The "shorewall check" command results in the (harmless) error message: /usr/share/shorewall/firewall: line 2753: check_dupliate_zones: command not found 2. The

Ok -- I''ve calmed down to a slow boil now after discovering that once again, one or more of the sample configurations are broken and 100''s of newbies have downloaded them. Rather than removing all links to the Quickstart Guide, I''ve placed the following disclaimer on the top of the guide: NOTICE: This QuickStart Guide is currently unmaintained and I make no claims

FYI This bug will prevent ''shorewall restore'' from working if you have "!<single IP address>" in the ORIGINAL DEST column. -Tom ---------- Forwarded Message ---------- Subject: [PATCH] Another iptables-save buglet Date: Wednesday 14 September 2005 15:09 From: Tom Eastep <teastep@shorewall.net> To: netfilter-devel@lists.netfilter.org The conntrack

http://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-Beta2 ftp://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-Beta2 Problems Corrected: 1. The "shorewall check" command results in the (harmless) error message: /usr/share/shorewall/firewall: line 2753: check_dupliate_zones: command not found 2. The

And Andrew -- PLEASE don''t reply off-list. I''m not a private help desk... -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net ---------- Forwarded message ---------- Date: Mon, 25 Aug 2003 19:01:34 -0700 (Pacific Daylight Time) From: Tom Eastep <teastep@shorewall.net> To: andrew

Just a warning that support for Shorewall 1.4 will cease with the release of Shorewall 2.2.0 which is now scheduled for February 1. See http://lists.shorewall.net/pipermail/shorewall-announce/2004-December/000451.html for information about migrating from Shorewall 1.4 to Shorewall 2.2.0. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 As I pointed out to Wilson in a private message, this appears to show that no other connection requests (other than port 3000) are being sent from the client to the server (or at least no other connection requests are being received by the Shorewall box). Wilson: Are you sure that the client is supposed to open port 3001 on the server and not the

------- BEGIN FORWARDED MESSAGE ------- From: g.pardon@pi.be To: teastep@shorewall.net Cc: Subject: Re: [Shorewall-users] Open ports How am I testing this? I''m doing a portscan using a portscanner like GFI Languard, Superscanner and nmap to check. Those two TCP-ports always showed up. Although, I think there are other to test it. I read the FAQ and the phenomenon (where is that

Effective today, I will no longer offer support for Shorewall 1.4. Information on upgrading may be found at http://lists.shorewall.net/pipermail/shorewall-announce/2004-December/000451.html -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \

Hiya, My two cents here .. I use a locked down Linux Sendmail relay (use sendmail null-client feature on any spare old server or PC) in my DMZ to relay Mail to the exchange server in my local zone. Its sort of the moat you have to cross over to get at the castle walls and the hot oil dumped on your head approach. Francesca C. Smith Lady Linux Internet Services 1801 Bolton Street # 1 Baltimore,

When I announced 2.0.1 recently, I absentmindedly neglected to also publish the 2.0.1 samples. They are now available at: http://shorewall.net/pub/shorewall/Samples/samples-2.0.1/ ftp://shorewall.net/pub/shorewall/Samples/samples-2.0.1/ -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Yessssssssssssssssssss !! THANKSS it Works !!!! Thanks a lot, if you come to Lille,France I''ll Offer you a big Beer) Joffrey -----Message d''origine----- De : shorewall-users-bounces@lists.sourceforge.net [mailto:shorewall-users-bounces@lists.sourceforge.net] De la part de Tom Eastep Envoyé : jeudi 19 octobre 2006 21:46 À : Shorewall Users Objet : Re: [Shorewall-users] Tcrules

Hi Tom, Many thanks for that, that''s really helped. Netfilter is indeed dropping the packets as invalid. Thanks and regards, Frances -----Original Message----- From: Tom Eastep [mailto:teastep@shorewall.net] Sent: 23 March 2007 18:05 To: Shorewall Users Subject: Re: [Shorewall-users] Expected handling of [SYN] when expecting[SYN, ACK]? Frances Flood wrote: > Basically, if the