similar to: Squid on remote Box

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I mean http://users.gurulink.com/drk/transproxy/TransparentProxy.html on "6. Transparent Proxy to a Remote Box." Thanks - -------- Original Message -------- Subject: Squid on remote Box Date: Wed, 16 Mar 2005 17:16:35 +0700 From: Royke K <royke4k@cbn.net.id> To: shorewall-users@lists.shorewall.net How do I configure port

Hello, everyone! I would like to solve the following problem. Btw, I''m terribly sorry about the pseudo-asciiart, but that''s all I can paint as a tropology. I''m hoping it''ll be enough. ----Internet---- | | | eth0 machine A routing+ipchains eth1 | ------------------ machine B So, given I''m running kernel 2.4.19 and using ipchains

I recently setup shorewall on my freshly rebuilt router box. I setup transparent proxying using transproxy/dansguardian/privoxy/squid. My current rules for the redirect are: REDIRECT loc 81 tcp www - !192.168.100.0/24 ACCEPT fw net tcp www How do I set this so that all the request are redirected except for requests FROM a certain machine (192.168.100.11)? I

It Lives! I dl'd the current contents of: pserver.samba.org/pub/unpacked/samba_3_0/source ftp.openbsd.org/pub/OpenBSD/snapshots/i386 Upgraded my obsd34 box; Samba compiled, loaded, joined the Domain, and testparm'd okay. I don't know if the problem was the samba source or OpenBSD's code. Don't really care, as long as it's up. Here's my configure mods...I put it in

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello I try to setup a bridge firewall base on http://shorewall.net/bridge.html I''m using shorewall-1.4.10g-1. I doublecheck on /etc/shorewall/routestopped file on my firewall, and there is no "OPTIONS" options. Should I use different shorewall version ? Thanks -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux)

Greetings from a newbie! (Well, to this list anyway) I''m having a problem and I hope someone here might be able to help... I am strongly expecting an answer along the lines of "upgrade to v2.4.x", but I would REALLY preffer to avoid that for now... The setup: "Home brewed" v2.2.24 (will patch to v2.2.25 later today) with the DS8 patch applied. Currently

Hi ALL, I want to setup Transpaent Proxy on the box running iptables Firewall. With iptables, I have given below rules. iptables -F INPUT iptables -F OUTPUT iptables -F FORWARD iptables -F -t nat iptables -F -t mangle #Enabling ip forwarding echo "1" > /proc/sys/net/ipv4/ip_forward #enable syn cookies (prevent against the common 'syn flood attack') echo "1"

Hi all, This is my first post to this list. I hope someone can help me, I have been getting grey hairs trying to make this work! I have a bridge setup on a debian sarge box. The bridge is called br0 and sits between my cable modem and a non-name brand router/switch: [cable modem]----[eth1]---[br0]----[eth2]-----[no-name brand router] I have squid setup on the linux box and it works, I have

Hi all, I''m trying to set up a transparent proxy with dansguardian, and running into some strange issues with the squid setup without dansguardian. I have used shorewall for quite some time, and I''m stumped as to why I can''t get this to work. Here is a brief synopsis of my network. loc --> gateway/firewall--> net I have the following policies: #firewall to

hi I recently spoke to mr McNamara on IRC, and he mentioned there was a "far better way to do realtime-stuff than the usual realtime in asterisk, and that this was GPL". He failed, however, to ever mention how this could be done, so I just wonder if someone else might know... ? roy -- Roy Sigurd Karlsbakk roy@karlsbakk.net --- In space, loud sounds, like explosions, are even

hi see below's conversation. it seems the e100p card doesn't work with BT. Any idea how this'll work against Telenor (norway)? roy <RoyK> does anyone know if I can trust the E100P to do full PRI stuff in .no? <cypromis> dunno about no <cypromis> I cannot use it in UK <cypromis> cause the framer has problems with system-x switches at bt

Hallo, I got a problem (I think it''s not a Problem, I am just to stupid to manage it) Iwant my Server (eth1: addr:10.0.123.1, Local Zone), eth0 is connectet to the Student-Network (addr:172.16.129.106 Mask:255.255.248.0 gateway: 172.16.128.1, Net Zone), to forward all packages from port 80 on local Zone to www-cache.uni-halle.de:3128 (172.16.128.1:3128) because I have to use this

I downloaded openssh-2.5.1p1 as soon as it was on the ftp servers just to get the setluid patch. After compiling and installing on 5.0.5 I saw that the luid still wasn't being set correctly whether sshd was run from inetd or as a daemon from /etc/rc2.d/. I fiddled around and moved the setluid() stuff up higher in session.c and now luid is now being set correctly. I provided a regular diff

A couple days ago I mailed in a patch to use _MIPS_SYMBOL_PRESENT to test at run-time whether jlimit_startjob() was present IRIX systems. I neglected to mention that the patch I sent in wasn't entirely complete: a _real_ fix would test '#include <optional_sym.h>' in configure, and also require either the MipsPRO 7.2.x or MipsPRO 7.3.1.3 or newer compiler. David -- David

http://bugzilla.mindrot.org/show_bug.cgi?id=378 drk at sgi.com changed: What |Removed |Added ---------------------------------------------------------------------------- Summary| sshd |sshd does not update |does not update utmp/utmpx |utmp/utmpx records correctly |records correctly when

http://bugzilla.mindrot.org/show_bug.cgi?id=546 Summary: test for basename() fails on IRIX Product: Portable OpenSSH Version: -current Platform: All OS/Version: IRIX Status: NEW Severity: normal Priority: P2 Component: Build system AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: drk

a) jerjers been doing a lot commendable work for * b) support is not mandatory, and i agree with royk it should not be withheld based on political viewpoints, that's pointlessly draconian c) choice is always good, so people should have the option of oh323 or h323, let them decide, and not limit them, unless astmaster chooses to limit them, and that too based on valid points d) jerjer gave a

hi all I've started to write an FAQ for asterisk, available here: http://asterisk.pronto.tv/faq.php Please help me fill it up with the good stuff :) RoyK

Hi *, Does anyone have a lead on a Nagios plugin that speaks IAX or a small app to do so? I'm trying to set up remote monitoring for my Asterisk server and only IAX2 traffic is allowed through the firewall. Simply using check_udp to port 4569 yields no usable answer and Asterisk complains about receiving a midget packet or something like that :) jens

Simon Cooper already mailed in a patch to get the effects of MAP_ANON on IRIX systems, but it was against openssh/3.3p1. I've reapplied his patach to openssh/3.4p1 and include it as an attachment. Here's his explanation: > I noticed that the recent release requires the existence of MAP_ANON to get > an anonymous memory region. In Irix the equivalent functionality can be >