similar to: redirection rule...

Hi all, Greetings ! I have shorewall 1.4.7 installed. Everything''s fine execpt irc access from local to net. in my rule file I have added a rule to allow loc net tcp 6667 6667 But i cannot connect to irc servers. The error is: Disconnected (). --- Looking up irc.freenode.net.. --- Connecting to irc.freenode.net (212.204.214.114) port 6667.. --- Connection failed. Error: Connection

Hi! REDIRECT lan 3328 tcp www - !192.168.0.0/29,10.0.0.0/16 This rules redirect all traffic web to proxy but howto exclude 1 ip from redirect ?? REDIRECT lan 53 tcp domain - REDIRECT lan 53 udp domain - And in this case howto exclude some ip ? Thx.

Hi, i have a huge problem ;] I have redirected port 69 from NET (internet) IP 212.122.68.129 to the local network (masq) 192.168.0.3, that all queries from internet goes to local network PC. ACCEPT net masq tcp 69 - DNAT net masq:192.168.0.3 tcp 69 - everything works fine from the internet, but now I cannot access this port from other local PC`s. i have to access it locally, when i

On 29/02/16 11:51, Reindl Harald wrote: > > > Am 29.02.2016 um 12:29 schrieb Rowland penny: >> On 29/02/16 10:45, Reindl Harald wrote: >>> >>> >>> Am 29.02.2016 um 11:28 schrieb Rowland penny: >>>> On 29/02/16 09:42, Reindl Harald wrote: >>>>> >>>>> >>>>> Am 29.02.2016 um 10:10 schrieb Rowland penny:

Hi, I have two selctdropdown boxes name like "resolution" and "codecname". Now i am able to get the single field value either from resolution or codecformat select box. ex: observe_field ''resolution'' or observe_field ''codecforamt'' is there any way to get the two fields in to the observe_field method ? Can anyone give me suggestionfs or

Hi gang, I''ve got a problem with shorewall, it keeps dropping packets when it should be DNATing them. I want all connections on a tcp port 4662 to be forwarded to a machine on my network (192.168.0.5) - the port is used for mldonkey (P2P app). It seems to be partially working - loads of packets are being DNAT''ed but some are not - I cant figure out why! The firewall

Hello, I have a situation where an ''employee'' belongs to a ''department'' and have setup the relationship as follows. class Employee < ActiveRecord::Base belongs_to :department, :foregin_key => "department_id" validates_associated :department_id end class Department < ActiveRecord::Base has_many :employees def validate_on_update

Javier Fernández-Sanguino Peña has discovered an exploitable vulnerability in the way that Shorewall handles temporary files and directories. The vulnerability can allow a non-root user to cause arbitrary files on the system to be overwritten. LEAF Bering and Bering uClibc users are generally not at risk due to the fact that LEAF boxes do not typically allow logins by non-root users. For 2.0

I recently setup shorewall on my freshly rebuilt router box. I setup transparent proxying using transproxy/dansguardian/privoxy/squid. My current rules for the redirect are: REDIRECT loc 81 tcp www - !192.168.100.0/24 ACCEPT fw net tcp www How do I set this so that all the request are redirected except for requests FROM a certain machine (192.168.100.11)? I

I''ve made some tests... eth2 is my internal interface, LAN is connected here. Before I had IMQ device in AB mode... PREROUTING [A]fter NAT, POSTROUTING [B]efore NAT. I want the same situation on ifb. I do this in this way: --- # incoming traffic here from LAN is before NAT tc qdisc add dev eth2 handle ffff: ingress # outcoming traffic here from WAN is after NAT tc qdisc add dev eth2

I have a debian woody machine acting as a firewall for a small network. I am trying to do a simple DNAT to port 80 on the protected webserver and masquerade all traffic from the protect subnet outbound. After having read the FAQ and various posts regarding problems with DNAT I''m afraid I''m no closer to a solution. Based on the output from "shorewall show nat" I

What changes would I need to make if there is a 4th interface that is going to a DMZ Thanks Gene

Hello All, I set a cookie with the following code - cookies[:test1] = "abc" ..and when I try to read it with @cookies[:test1] in one of my views, I get a nil string. The only thing that seems to work is @cookies["test1"].value Has anyone run into similar issue? Thanks - Sree -- Posted via http://www.ruby-forum.com/.

Hi !, I have this problem. On a Mandrake 10.0 server with all the updates (Kernel 2.6.3-15mdk, iptables-1.2.9-7mdk and shorewall-2.0.3a-1mdk), one of our internal users have to FTP some files to our external web server. I think we have the correct configuration and rules in shorewall, and have read the http://www.shorewall.net/FTP.html document. Still, our users can''t FTP to the

Hi Everyone! I''m having problems to redirect an UDP port to an external server. My firewall have 4 interfaces: NET, LOC (192.168.0.0/24), DMZ(192.168.1.0/24), CMTC(10.0.0.0/24). On CMTC interface I have a direct connection to another network using a VPN link. I need to redirect an UDP port to on server (10.1.0.2) on CMTC zone using my local IP (192.168.0.1) for gateway. I will use

Hello Everyone, We have noticed that one of our servers xen Dom0 is restarting idiopathically. Atleast, we are not able to analyze the cause. I have checked the logs but couldn''t find anything relating to it. Are there any tools such as kdump (which doesn''t seem to work on xenified kernels) for catching the kernel crash snapshot. Regards, Sree Harsha Totakura Member, Open

Dear all: Im using shorewall 2.0.3a (debian) w/ ULOG. shorewall starts ok, and the firewall is running, but nothing is printed on the logs. I try, for example, to do a connection to a port that is opened on the server but closed by the FW and I get a connection refused. If I stop the firewall, this port is accesible from the outside. I think I''ve followed all the steps on

Been having a problem with my two Sipura 2000's dropping calls from the SPA-2000 side. Seems the calls are dropped right before the "Next Registration" time. Calls drop about ever 60 minutes or so. I have dialed from one port to the other and let it sit. After about 60 minutes or so the calls get dropped. System details are below Asterisk ver. CVS-HEAD-11/27/04-23:42:45 RHEL 3

I've got a ShoreTel 210 MGCP phone drops calls. My packet capture indicates that the phone may be trying to renew its registration with *, but reports Restart Method of Disconnected (frame 2), then * seems to take that as a sign that it has lost the connection and closes things down. The phone, meanwhile, seems to think it can continue the conversation until a few ICMP "port

Hi all, I've a CentOS box which as two NIC; this box is also a router for LAN subnet: ------------------------------------ | eth0 (external) 172.0.0.1 | | eth1 (internal) 192.168.1.1 | ------------------------------------ | LAN clients (192.168.1.2+) I want to allow http acces only for two LAN boxes; an only http access, which means that others protocols as smtp, pop3,