similar to: Re: dumb, dumb question ...

Hi all, Currently at work we use a commercial product called "Gnatbox", which, I believe, is a BSD derivative running on a floppy disk. They have a pretty UI and all, but I''d feel much safer/happier with a GNU/Linux box and Shorewall doing the same thing. In fact, I''m doing something very close to this at home using Openwrt and Shorewall on my WRT54G router, but I

I have a problem browsing in my subnets let me explain me situation: I have a m0n0wall (FreeBSD based router software) with 3 nics. nic1:My WAN connection Nic2:My LAN connection (192.168.0.0/24 m0n0 is DHCP) Nic3:My Wifi connenciot (192.168.1.0/24 m0n0 is DHCP) just using ip-adresses acrossed the network is no problem. now i want to use windows browsing works on LAN but can't see the

Hello all, I''m somewhat new to networking, and I''m having trouble masquerading connections that are coming over a bridge. The bridge only has a single port for now, but I''m going to add more ports later. I''m basing my configuration on the two-interface quick start guide. I''m using Shorewall 3.0.4 on Ubuntu Dapper. My network looks like this: * The

Hey *, as I sweat through another day of crap dealing with an all-in-one box (firewall, IDS, AVS, report generating, soon to be a VPN server) I'm wondering if someone has started a project to put some freeware together in some semblance of sanity on a FBSD box. There's basically nothing that this box does that a combo of IPFW (or another bsd filter), snort, ntop, and some other freeware

Hi, I am planning to use <firestarter> to manage the incoming and outgoing network connections. Please give me some valuable read abouts and tips about this package. - Will it be a good choice for network management? What are the other options? If i choose to install Firestarter : - Have you installed and used Firestarter in CentO 5.5? If yes,Please share the process of installation.

Hi folks, I''ve added a couple of ''help wanted'' ads to our SourceForge project. You can see them at http://sourceforge.net/people/?group_id=22587 I''ll add more as i have the opportunity. If you can think of other jobs we need to assign, please let me know. -- Paul <http://paulgear.webhop.net> -- Did you know? Using accepted quoting conventions makes

My router (1605R) currently does not support QoS. Is there any open source software available so that I can set one up before the router? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20050118/38b6e3f2/attachment.htm

Hello, I see manage of firewall in CentOS (called security), and seems difficult to manage, not enough powerful. I am searching a middle term between scripts of iptables to manage and Security manager of CentOS. I know FireStarter, another similar? -- Devel in Precio http://www.pas-world.com

I''m looking over this traffic shaping available in the tc* files. I went through this when I did my own traffic shaping outside of shorewall previously. For the average (i.e. home, perhaps) user, I''ve never understood why we use these more complicated shaping algorithms that define classes and guaranteed minimums and maximums and so forth. For most home, or other small use

Hi All, Until now I've only used IAX2 to connect to ITSPs. I've been toying with a SIP connection to Gizmo Project, but not yet successfully. It brings to mind a question. At what point does it make sense to consider a SIP-aware firewall such as those from Ingate? I'd hate to move away from my m0n0wall, which is open source, easy to manage and has served me brilliantly for two

http://shorewall.net/pub/shorewall/Beta ftp://shorewall.net/pub/shorewall/Beta This is Beta 1 plus fixes to the problems reported by Michael Van Damme and Jochen Schlick. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hey, The company I work for is in the market for a new firewall. Right now we're hosting all of our own stuff (on CentOS servers) behind an old checkpoint firewall. I think Checkpoint is overkill for our needs and very expensive, plus I don't like the "per-user" charges of some commercial solutions. What do you guys suggest that we upgrade to? Here are some of the

I think that the time has come for me to back off a bit from my involvement with Shorewall. I just don''t have enough cycles (or energy) to keep up the pace of the last several months. As a consequence, I''m going to do the following: 1. I''m going to stop personally supporting the entry level tools (samples and quick start guide). These tools are a source of constant

From: User Lists <clopmz at yahoo.com> > Thak you for your responses. > I will use CentOS-3 as a firewall.. Nothing against CentOS as a firewall, but you might consider a distro that is more focused as a plop'n drop "security applicance" distro: http://www.ipcop.org 4-zone segmentation (WAN, DMZ, LAN, WLAN) Integrated real-time and statistical logging, Snort IDS,

How do I configure my DHCP client to restart Shorewall when it obtains a new IP address? Blake

Hi, I'm just curious about setting up a new VPN here in the office part of our enterprise, as well as a second in our 75+ node data center co-location facility. Needing to stomp out the ****dows L2TP node here, just too many side-issues with config. I'd like it to run the same OS as all of our servers, e.g. Centos 4.3. Any recommedations on which software/server/client

Well I think this system is back on 3.5. How do I tell? Have not used it in a while... I need a NAT for some quick testing and this box was available. Only a 6gb drive, so I can't install Astaro (which I have licenses for). So is there a simple way to turn on NATing? Should I upgrade to 4.2? This box is behind a firewall, so security risks are not the issue. This time.

Not really a CentOS specific question, but I hope it's ok... I've decided to buy a server to use as a firewall/router instead of the usual Cisco box, simply because I've come to love Firewall Builder and would like to put all my subnets into one firewall. There will be four gigabit interfaces in the box, one of which will be the internet connection (so this one interface will use

Hi, I'm using the generic system-config-securitylevel-tui program on a remote server to configure my firewall. So far it's been fairly decent, allowing me to open up ports and whatnot. But I want to start blocking a couple of outgoing ports on my machine. I want to lock it down so the only traffic going in our out of my machine is stuff that I specify. Is there a way to do this

Hi, I'm looking for opinions on the "best value" router to use for home offices. It should work for a scenario in which there are 3 computers and 2 SIP phones, handling QoS so that the phones always have higher priority traffic than the PCs. (and not rely on the phones to do the QoS because some PCs may not be connected to the phones). QoS could be based on destination and source