similar to: ADSL Network

Shorewall version 2.2.1 2 Interface setup. eth1: 10.10.1.3 eth0: 192.168.1.2 modem is 192.168.1.1 I need to be able to connect to my adsl modem, but when shorewall is up I get connection rejected. I have added "192.168.1.1 RETURN" above the line "192.168.0.0/16 logdrop # RFC 1918" in "/etc/shorewall/rfc1918" but still getting connection rejected Is there

Cheers, This is fairly OT, but if this list doesn''t know, I''m under cross fire for a reason, yet to be found... ;) One of my firewalls gets hit by *lots* of packets from random source IPs and varying source ports. Measured by thumb, it''s more frequent than 1 per second -- thus rendering the log file almost useless [1]. Does anyone know, which apps use UDP port 8497

Hiya. I am currently usiong Shorewall 1.4.8 on my Mandrake box. I want to look at upgrading it to the Latest build of shorewall. Is there anything I need to look out for before doing this ? Is there a FAQ as to the easiest way or doers it upgrade ok following the usual Upgrade via RPM instructions. cheers in advance. _________________________________________________________________

Hello....I have a specific Requirement on a One Interface Setup...Help me guys 1.Allow ssh,dns and web request to the firewall.....Input Chain ACCEPT net fw tcp 22 ACCEPT net fw udp 53 ACCEPT net fw tcp 80 Are the above rules correct. 2. Allow 6 Pool of Ip''s to be forwarded thru this firewall....This Machine Stands as a gateway for 6

Hello, is it possible to configure Shorewall for different network environments? I am using it on a single Linux computer. When I am at home, I am using an internal IP address (192.168.0.X), and when I am using my cable modem, I get an internet IP assigned. I now want to be able to use Samba/Windows Filesharing when at home and to disable it when I am using my computer directly on the net.

Hello, I would like to run other services like messaging services on my firewall machine too. Does it make sense to run shorewall, openvpn and the pppoe package in a chroot jail? And is it possible to run these programs as an other user? Ciao Hugo

Shoot! Sorry Tom. I thought I replaced your e-mail address with the shorewall list address. I got it working!!! I finally figured out what I was doing wrong. Pays to write down what I want to accomplish versus flying by the seat mof my pants. The ACCEPT+ is G R E A T! Took care of some of my issues along with removing the redirect rule (yeah, yeah...I should have thought it over more

I''m happy to see shorewall 3.0 is released. My server is running 2.4.6 and I want to upgrade to 3.0. What should I pay attention to upgrade to 3.0 ? ------------------------------------------------------- SF.Net email is sponsored by: Tame your development challenges with Apache''s Geronimo App Server. Download it for free - -and be entered to win a 42" plasma tv or your

Hello everybody: Here is my "network layout": ISP1 ISP2 | | | | +-----eth0---------eth1------+ | | | FC 3 box | | | +-----eth2---------eth3------+ |

Is it possible to define a file log such as for example /dev/tty2 in the configuration of shorewall. greetings.

Hi All, Our internal users need to connect to the bank to do internet banking. The bank requires that the client computers connect to ports 15000-15010. In Shorewall how do I do a masq for anyone trying to connect to these ports? Thanks Raymond

We're having a horrid problem with our asterisk setup. Sometimes calls just go dead - we can't hear what the other end is saying. (I think they can't hear us either). The call doesn't hang up until one of the callers gets bored. Internaly we use Thomson ST2030 SIP phones. Externaly we have 3 ISDN BRI lines (6 channels total), connected to an Eicon Diver server card (4BRI).

Hey all, I have followed a thread on golem.de, which was about an article regarding mozillas reasons, not to include h264 and to prefere theora instead. In the forum there was much talking about a lot of nonsens (as usual). But there is still a huge and loud number of people believing that theora has a significant worse quality compared to h264. Most test material I found does not focus real

Hello, I have the need to connect 2 remote site with vpn, the windows pc of the 2 site it can share the HD and printer. This is my configuration : LOCAL NETWORK A : ip from 192.168.10.2 to 192.168.10.99 | | | | eth0: 192.168.10.1 FIREWALL A : ( with debian ; openvpn ver. 2.0.beta15 ; shorewall ver 2.0.11 ) eth1 : xxx.xxx.xxx.xxx ( pubblic ip address ) | | | | INTERNET | | | eth1 :

I need to get this working. I have a single interface eth0 with a primary adress of x.x.214.162 on a /30 block network. This interface is properly set up and works fine, however, I also have five aliased adresses on the same interface: eth0:1 @ x.x.6.230, eth0:2 @ x.x.6.235, eth0:3 @ x.x.6.240, eth0:4 @ x.x.6.245, and eth0:5 @ x.x.6.250. All of these adresses are on a /27 block network. After

hey * folk, am trying to configure a WellGate 3504A FXS SIP ATA (http://www.welltech.com.tw/products_ea01.htm) with asterisk. i've set up two SIP clients in sip.conf as follows: [general] port = 5060 ; Port to bind to bindaddr = 0.0.0.0 ; Address to bind SIP channel to context = default ; Default context for incoming calls [1235] host = dynamic secret = somepass context = default type

Hello, According to http://tinc-vpn.org/documentation/tinc_4.html: ,---- | Name = <name> [required] | | This is a symbolic name for this connection. The name should consist | only of alfanumeric and underscore characters (a-z, A-Z, 0-9 and _). `---- However, if I set an arbitrary name, I get # tincd -D -n hbt -d tincd 1.0.11 (Nov 18 2009 03:31:26) starting, debug level 1 Cannot

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi list, 2 weks ago I asked questions about PJSIP and T.38 but got no replies. I upgraded Asterisk to git as of yesterday (309dd2a), and I'm still having the same issues. In the trace below, I'm sending a fax from Hylafax server through iaxmodem on Asterisk-13 (tiare) to a second Asterisk (11.18.0 t0gw) connected to the PSTN via ISDN; the

Mandrake 9.1 Samba 3.0, windows2000 pro sp4. I finally got Samba 3.0 working thanks to G?mes G?za. Now I am having another issue as outlined below: 1)There are 2 users on the Linux pc, markw (regular user) and root. Both have valid samba passwords. 2)I have a share called: [data] path = /test valid users = markw, root read only = No browseable = yes 3)I am able to map the share with the user

Will this do the intended thing? This is in sip_nat.conf which is included in sip.conf: externip=192.168.0.200 localnet=192.168.0.200/255.255.255.0 externip=64.168.237.110 localnet=192.168.1.2/255.255.255.0 I have Asterisk running on a box with two Ethernet interfaces and bound to both. One interface, 192.168.1.2 services clients outside the firewall who are led to believe that Asterisk is