similar to: How to allow specific services for machines in LAN behind router?

Is this possible using shorewall ? here is the setup that I need: many client computers C1 to C30 connect to the internet using ONE gateway computer server running shorewall proxy S1 client C1 connects to local LAN /shorewall proxy S1 and authenticates using username U1 S1 connects to SSH server external server ES1 authenticates using username EU1. client C1 can transfer files, upload and

Hi Perhaps I've been going too far OT in my previous thread or perhaps I just didn't explain my problem clear enough so forgive me for trying again. I have configured fetchmail to fetch my mail from my ISP's POP3-server. I have set up procmail to filter messages and deliver all non-filtered messages to the folder ".IN-catchall/" in "$HOME/Maildir" After sending

Hi I would like to set up a local mailserver but I'm getting lost with all the available options. As I have already decided to use dovecot I hope someone here will be able to point me to the right docs/HOWTO's/... Here's my wish-list: 1) download mail from my ISP's POP3-server 2) scan with spamassassin 3) scan with ClamAV 4) filter messages (mailing lists/sender/...) 5) store

Hello, I'm testing Dovecot that is part of Debian/sarge (v0.99.14-1). So far so good. I have migrated some mailboxes for testing with success and seems that everything works fine. One thing I do not figure out is, what to do about shared mailboxes, which are the very reason of searching for an alternative IMAP server, The Wiki states that there is some sort of shared mailboxes, based upon

Hi http://vowe.net/archives/004104.html 1. Install the latest wine from www.winehq.com (or emerge wine, apt-get wine or whatever). 2. Install Notes 6.51 under Windows. 3. Copy the Lotus/Notes directory to ~/.wine/fake_windows/program files/lotus/notes. 4. Copy mfc42.dll and msvcp60.dll from Windows to ~/.wine/fake_windows/windows/system 5. type wine "c:\program

Hi I have purchased and installed a new PC and would like to transfer my mail (in Maildir format) to it. Are there any precautions I must take before copying the mail over? I will disable mail delivery temporarily so no new mail gets written to disk but I don't know if dovecot has to be stopped before copying/editing mail for backup or migrating purposes. Anything else I must pay

We are trying to configure shorewall as follows: 1. We have shorewall running at gateway (172.16.1.1) with NAT. 2. We have a number of web servers (172.16.1.x/24). These web servers are accessed through port forwarding at the gateway (172.16.1.1) and websites are visible through virtual hosting through a web re-director. 3. Presently the proxy server runs in a transparent mode, i.e., all web

Hí everybody, you have a nice day. I am configuring accounting in shorewall /etc/shorewall/accounting and the traffic between eth0 (local network)1, eth2(local network2) and eth3(local network3) <--> eth1(ip public network), works fine. I make the accounting because y want to control the remote vpn access(pptpd) throught shorewall. Which is the way to control vpn /ip/access in

Hi everybody I have a Problem with Masquerading from my local net (loc) to my VPN (loc2). I can reach every Service from loc2 in loc, but I can''t get reach any service from loc in loc2. Has somebody an Idea where my mistake is ? Without shorewall, it was working. Thanks for helping Lars Technical Information : Shorewall 2.0.13 Suse 9.0 *177.177.77.X The first 3 Counts are changed

So after reading the traffic control documentation at shorewall.net I am a little confused. I don''t understand how to use the tcrules file. What I would ideally like to do is setup htb on a per user basis (either by IP or MAC address). If anybody has any hints on the best way to do this or is willing to explain the use of tcrules file a little better (how I could mark it per IP or MAC)

Hi, I´m trying use conntrackd, shorewall and keepalived. Conntrackd (now know as conntrack-tools) is working ok, keepalived too, but i don´t know how to put some iptables rules in shorewall. eth0 is the local area (192.168.0.0/24) eth1 is the net area (192.168.1.0/24) [1] iptables -P FORWARD DROP [2] iptables -A FORWARD -i eth0 -m state --state ESTABLISHED,RELATED - j ACCEPT [3] iptables -A

Hi, I''ve installed Emule (p2p program) on my client box but I can''t access the servers due to the firewall. I''m getting this blocking errors: Jan 22 01:26:07 servidor kernel: Shorewall:net2all:DROP:IN=eth1 OUT=eth0 SRC=213.22.49.86 DST=192.168.0.3 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=50538 DF PROTO=TCP SPT=46408 DPT=4662 WINDOW=5840 RES=0x00 SYN URGP=0 My rules file

> On Slackware 10.2 (GCC 3.3.6), I got an error during a debug build with the > header files using uintptr_t (not recognised as a type). Putting "#include > <stdint.h>" in include/llvm/BasicBlock.h (llvm) and in > "include/llvm/ValueSymbolTable.h" (frontend) resolved this. Ok. This is now fixed on the release branch. Thanks! > Also, I got linking

I''m seeing what may be sort of strange behavior - My machine is behind a Shorewall firewall, which, in the rules section, includes: AllowBitTorrent, any source, any dest I''m wondering - how is my machine behind the firewall able to upload, since no port forwarding related to bittorrent is taking place? (Just to clarify - it IS uploading) I looked at the AllowBitTorrent

Hi, Today I managed to link ioquake3, but generating a binary does not work yet. 1) On OSX, I get: Error: Code generator does not support intrinsic function 'llvm.ppc.altivec.lvsl'! when I do: llc file.bc -march=c -o file.c 2) On Linux X86, llc does not give any problem, but I get this while compiling the generated .c file: error: unknown register name 'S' in

Hi, Op 15-mei-07, om 10:23 heeft Tanya M. Lattner het volgende geschreven: 1) Download llvm-gcc4 binary and llvm. Compile and run make check. I did a debug build on OSX 10.4.9 and everything went fine. Results of "make check" (see ppc.log): === Summary === # of expected passes 1630 # of unexpected failures 21 # of expected failures 2

Hi. I''m migrating to shorewall(6) mgmt of my various firewalls. Simple configs have been easy with the great docs. I''ve got a slightly more convoluted config, and have gotten ''lost'' in config''ing a SNAT/DNAT/NAT + DMZ + Xen Host/Guest set up with Static IP/29. Having some challenges wrapping my head around the ''best'' Shorewall

I have installed Shorewall OK and it seemed to be working OK however I am having a problem with rejecting local request to the net in my test environment. The problem is when I put in the policy file the line loc net REJECT info the PC on the local network can still ping the PC that I am using to simulate the internet. Also there is no log entry that the request has been rejected. I have also

Hi, I would like to request password protection in syslinux. I know that it has come up a few times on the mailing list (google for "site:www.zytor.com syslinux password"), and on http://www.zytor.com/pipermail/syslinux/2002-May/000421.html you say interesting things about COMBOOT images. So I was wondering if I could bring that feature request to your attention again :) grub has it,