similar to: Bridging Firewall with windows OpenVPN road warriors?

Perhaps someone can help me understand why this is happening. I''m trying to write a script using ''shorewall iprange'' to parse some ip ranges into subnets so that i can place them into the blocklist. I keep getting an error when i run the script though. Here is the script: #!/bin/csh foreach i (`cat ipranges`) shorewall iprange $i >>

Hello I''m hoping you guys can help me figure this out. When I use shorewall clear my windows openvpn client connects perfectly every time. But when I have the shorewall up 90% (not every time) it will connect for about a second and then the connection will reset and that will repeat over and over so i never don''t really get a steady connection at all. I can tell you that

I was wondering if i could stick a certain ip in the blocklist, but at the same time have an allow rule for http in the rules section. In other words i would like to block pretty much all access from a certain internet address except for http from the internal network. So does the rules file get parsed before the blacklist in the firewall to make this possible?

Dear Shorewall''ers I''ve been using Shorewall for 6 month, it''s work good as i expected, but i want to activate shorewall vpn futures , road warriors user with dynamic ip address on thir laptop, Can some one give me explaination, url link or sample configuration. ? regards reza

Hi all, I''ve been using Shorewall 1.42 for a month on two firewalls at work and my own personal colocated server and love it. While pretty familiar with iptables, I don''t like dealing with it on a daily basis, and Shorewall certainly makes life easier. I''ve deployed Shorewall on both our Toronto and Ottawa office firewalls, and have configured a FreeS/WAN IPSEC

Hi I have an issue with XP PRO laptop users that use their laptops to login locally on the LAN and also remotely via a VPN connection at night/weekends. After logging in remotely the next time they login locally on the LAN they experience extreme slowness with opening applications such as Word, printing and browsing print queues etc. The problem appears to be that the entry for their

Hi All, I know this isn't really a Samba question per se but I'm looking for some samba-related advice.. :) I have a very small AD DC setup (5 users) and some end-users (read: teenargers) are now using laptops, which means they don't always have access to the network shares configured by GPO and Logon scripts from the Samba servers when they take the laptop to school. (The Samba

Shorewall have OpenVPN itself or need install OpenVPN for Shorewall to run ? Thank _______________________________________ YM - 離線訊息 就算你沒有上網，你的朋友仍可以留下訊息給你，當你上網時就能立即看到，任何說話都冇走失。 http://messenger.yahoo.com.hk Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere

Hi, I have setup a Linux + FreeS/WAN VPN firewall/gateway to provide Out-of-Office access. I have used DHCP to provide a small subnet block of Internal IPs for use by the external VPN Road Warriors, (All running XP with SSH Sentinel), on their Virtual network interfaces, and the VPN gateway performs ARP proxy on the internal interface so packets go to the right place. No NAT is performed on this

How configure openvpn tunnel in shorewall with differents src and dst ports ? openvpn.conf ... lport 10101 rport 10102 ... Leandro.

I have a client who works from three locations, he has a Polycom 500 at each location connected to the same PBX. How would you configure the phones? Is it practical to have the extension follow him, I don't want to rely on him turning the phone off when he leaves each location, but he does want to maintain the same extension and voicemail. Chris Mason

A couple days ago with help from Guus I got my basic setup running. I played and switched around parameters, modes, subnets etc and always got things working in each config. Trying to move on, I only just now realised that for what I ultimately want to do, I would have to make every machine in my office LAN a tinc node, which I’m not allowed to. I’m allowed to build up a “tinc gateway” (can be

Hi: I'm having some trouble connecting to the tinc VPN I've setup for my client. Basically I would like to connect to the LAN of my client (as I'm currently thousands of miles away and won't be back for a month and a half) to continue with the development of an in-house ERP. I've setup the router (a Linksys router running the stock firmware) to forward both TCP and UDP

Hi Everyone, I have setup an OpenVPN tunnel between Server A (running Asterisk) and Server B suppling it's SIP Phones with DHCP pool of IPs. So, the tunnel is established nicely and everyone can ping others. "sip show peers" shows the local subnet of the SIP Phones registered (192.168.100.0/24 ). But there is the old bad one-way audio. Calls also drop after few seconds. In the SIP

Is there a "cookbook" for setting this up? There are examples for setting up a tunnel between two fixed-address networks (e.g. a remote LAN that needs to be "integrated" with a central LAN over IPSec but I can't find anything addressing the other situation -- remote user(s) where the connecting IPs are not known in advance, such as a person with a laptop or smartphone in a

> -----Original Message----- > From: Remco Barende [mailto:asterisk@barendse.to] > Why is it bad to put a vpn server on the * box? CPU load. IPSec can be quite CPU intensive. So can asterisk. Putting two CPU-intensive, time-sensitive applications on one machine is asking for trouble. It may work, though, if you don't have too many simultaneous users. > I was considering

Hi list! I'm sure the topic has been discussed but I could not find what I was looking for. What would be the best / easiest VPN software solution. I would like to install vpn software on the * server for roadwarriors to connect to with laptops running windows. Ideally the vpn solution will not require any additional software on the client side but will use IPSEC. (Ofcourse call quality

Tuomo Soini wrote: > You don''t happen to read shorewall-devel mailinglist ? I read it -- I just didn''t know what to make of your post and it arrived while I was on vacation. What exactly are you trying to accomplish that Shorewall isn''t doing for you now? e.g. /etc/shorewall/zones rw Roadwarriors Road Warriors /etc/shorewall/interfraces rw ipsec+

OK - I figured out what it is but maybe someone can give an explanation here. If I use he multiple zones configuration I have to do in addition Hosts v3005 vlan3005:0.0.0.0/0 And of course this seems to be very logic since this means all ip´s on the internet. But I am still confused a lot why this is the first time I have to do it after using Shorewall over years without to be forced to say

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I''m running Shorewall 4.4.0/Debian Lenny and I''m trying to setup OpenVPN with a mild degree of success so far. My ultimate end goal is to basically have an extension of my home lan to my laptop as well as my wife''s when we are away from home, and have all of my normal network resources available as if I were sitting at home