similar to: Three NIC problem

Hi! I want to redirect all http and https traffic from my LAN to squid in DMZ - transparent proxy. How do I do that? Regards, Sasa

Hi Tom,  I´m very glad using Shorewall I proud to say that use it in my whole network (215 Real IP´s over ProxyArp) I can filter everyone have mac-control of then etc etc. Well I´m like a child playing with it :) But now, have a question there is any way to filter or use an Anti-virus in this network ? To drop packets with virus ?? To scan HTTP request ?? Or maybe use Dansguardian ? Did you

Does anyone know what a good maximum number of machines I should place in the ProxyArp list? Thanks Jamie

Wes Stupar, user name Wes Proposed topic: "Your session only lasted 10 seconds" I don't understand what is required for "proposed location" I want to describe, for other CentOS users, the reason I got the error.

Dear Dovecot and Exim users, I have a VPS using these two applications. I am transitioning from a domain_old to a domain_new. I'd like to redirect all the emails from domain_old to the local mailboxes of users @ domain_new. In exim I've assumed that it is enough to add domain_old to the list of local domains: domainlist local_domains = @ : domain_new : domain_old ... begin routers

Hello, I''ve shorewall running a three interfaces firewall (net, loc, dmz) and I''ve got performances problems. My measured bandwidth from internet is up to 6.8 Mb/s, and I "only" get 3.5Mb/s on my LAN and 5Mb/s on my dmz. I checked with iperf, and all my interfaces (eth0, eth1, eth2) can actually work at 10 Mb/s. I tried disabling all the rules from loc to net

Hi, I have a problem with Cisco 7906G and SIP protocol use with Asterisk 1.2.26. I have uploaded in my tftp server the firmware 'cmterm-7911_7906-sip.8-0-4SR1' that use 'SIP11.8-0-4SR1S.loads' and in SEPmacaddress.cnf.xml I have: <loadInformation>SIP11.8-0-4SR1S</loadInformation> ..but in tftp log server I have: Oct 07 11:56:22 asterisk1.local

I am running centos6.4. Where do I find the updated gnutls packages? I see the updated source file here: http://vault.centos.org/6.5/updates/Source/SPackages/ But I don't see the correct version of the packages in the 6.4 tree here: http://vault.centos.org/6.4/updates/x86_64/Packages/ Where should I be looking for the updated package for 6.4? Thanks. -- -MichaelC

I''m getting 2 or three of these a day...Any ideas ? The 192.168.250.zz is a eth0:3 on a box that currently only has eth0:1 active Dec 1 15:47:40 machine-name kernel: Shorewall:all2all:REJECT:IN= OUT=eth0 SRC=my.real.ip.addr DST=66.228.216.22 LEN=68 TOS=0x00 PREC=0xC0 TTL=255 ID=12031 PROTO=ICMP TYPE=3 CODE=1 [SRC=66.228.216.22 DST=192.168.250.zz LEN=40 TOS=0x00 PREC=0x00 TTL=46

Hello Daniel, At the moment we are preparing the patch for disassembling microMIPS 16 bit instructions and it will be on Phabricator tomorrow or on Wednesday. Functionality is implemented in MipsDisassembler::getInstruction where first two bytes are read and decodeInstruction is called with DecoderTableMicroMips16 and only if it fails we read 4 bytes and call decodeInstruction with

Hi, I have a problem with Asterisk-1.4.22 (with TB 2.6.2) & Portech MV-370, my problem is that when arrived an external call I don't view (on my internal phone) the phone number but I have the number extension that is configured on MV-370. The MV-370 configuration is: Mobile to Lan Table : 0 * 192.168.1.1 Lan to Mobile Table: 0 * # SIP Setting: Display Name: Portech User Name: 1005

I know, I know, this again :) The company I work for would like to use squid for proxy authentication purposes using NTLM, using a Windows 2008 R2 server as a DC. I've managed to setup samba/winbind to use ads and successfully joined the domain. Configured nsswitch.conf to lookup winbind entities (however I didn't touch PAM configuration, as I don't actually want the users to be able

OK, strange request but I want to bridge three vlans under linux 2.4. Bridging works fine with two vlans, but is failing to route when I add the third vlan. Situation is clearly to have Lan, internet and DMZ vlans. The reason they are vlans is that I am using a Linksys WRT54GS and hence you effectively have a 5 port hub on the back which can be segregated into flexible vlan groups. I

Dear listers, I have two questions: (1) Is there a way in R to change the base-n of the calculations. I wnat to run some calculations either in binary (base-2) or base-4. Is there a way to specify that in R - to chnage from the decimal? (2) I also want to extract the digits from a larger number and store them as a vector. I could do it through converting top string, parsing the string and

In an effert move my Dmz from a snapqear roouter to Linux with shorewall. Question is I have network 64.42.53.200/29 which makes default gw 64.42.53.201 network 64.42.53.200 broadcast 64.42.53.207 mask 255.255.255.248 and I want to set up shorewall with eth0 64.42.53.202 eth1 local eth2 dmz where dmz will use say 64.42.53.203 for web and email server. Where I do not need or should I say use

I have the problem when my localnetwork do telnet to the net Shorewall:FORWARD:REJECT:IN=eth0 OUT=eth2 my files are the following: policy #SOURCE DEST POLICY LOG LEVEL LIMIT:BURST loc net CONTINUE info loc fw ACCEPT info loc loc ACCEPT loc dmz ACCEPT info fw

Hello all, I''ve read the shorewall guides and browsed through the mailing lists, but I haven''t been able to find out if the following is possible or not using shorewall. Our provider has given us 16 IPs + 4 in a separate range for our uplink. I would like to replace that router with a Linux box running shorewall with three interfaces. I want the DMZ to be a standard, routed

Hi, We have this line in micromips-16-bit-instructions.s # CHECK-EB: addu16 $6, $17, $4 # encoding: [0x07,0x42] However, when I check this with llvm-mc, like below, I dont get back the assembly. This is against the latest LLVM code. What is wrong here? Thanks, Jun $ echo "0x07,0x42"|./Release+Asserts/bin/llvm-mc -disassemble -triple=mips -show-encoding -mattr=micromips

Hello !! I ve just install shorewall-common and shorewall-shell I can''t defined a network using the CIDR format for my DMZ in /etc/shorewall/hosts fast eth2:172.17.0.0/16 epac eth2:172.18.0.0/16 fsa eth2:172.19.0.0/16 bu eth2:172.20.0.0/16 recto eth2:172.21.0.0/16 dmz eth1:81.91.225.224/27 I receive this error: ERROR: Invalid zone definition for

I have been trying to get DNAT to work and I actually have succeeded too, however, not how I thought it would work when reading through the documentation. 1. No matter what I do I cannot get DNAT to work unless I have an entry in eiter the nat or the proxyarp file. Is that really how it''s supposed to be? I can''t find anything about it in the documentation. 2. Also, in the