similar to: Virus Detector ?

Does anyone know what a good maximum number of machines I should place in the ProxyArp list? Thanks Jamie

Hi Folks, Can i transform my firewall into a bridge (Mean Nic to Nic), in the ethernet level (Not protocal, Ip''s etc) and also use shorewall ? Than make a Layer 2 Switch with netfilter rules to all Ip''s in my network ? I have 4 whole real classes and want to protect the people inside. With proxyarp works but sometimes fail (People loose connection etc) Just with switchs and my

[This email is either empty or too large to be displayed at this time]

I want to build a robust firewall for a resort installation. The resort''s telephony is entirely VOIP, asterisk based. We have the following internet feeds: 1) 512/512 kb fixed bandwidth leased line with static IP from Telco- primary connection, expensive, to use for VOIP, VPN traffic, mail server, SSH access for remote work. Reliable. 2) 256/512 kb ADSL from Telco, not fixed IP -

Hi folks, Has anyone out there done port forwarding or DNAT for UDP packets that are normally sent to the broadcast address (255.255.255.255)? I have to support a nasty database application called FileMaker Pro (those of you who know it are probably groaning about now), which uses broadcasts to locate the database server. Theoretically, i can get around this requirement by using LDAP lookups

Hi all, I need some help, advice or whatever you can explain to me because I haven''t got a clear idea about how to do the following assembly, and I''d be very grateful if I got some help from an expert like you. I''m trying to build a system which represents the following: I''ve got a hosts unit (host1, host 2, ...) which have IP in the network 192

Hi Folks, Can i account proxyarped pc´s ?? Like know how much web traffic passthru a specific person ip using shorewall ? So i can know how much bandwidth that specific IP EAT ? Thanks alot Carlos Arnt ------------------------------------------------------- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward

Hi all, How do I put a rule in to allow all ports on a single IP.. I''m not masq my network as the firewall is on the router. I have another firewall internally that I will be removing sometime soon, but just wish to forward all ports to this firewall (until I can decommission it). 3: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000 link/ether

Which CPU is best for Shorewall, a PIII-450 Celeron or a PII-266??? ================================== Joakim Hellström Chief System Engineer United Computer Systems Scandinavia AB Klostergatan 56 S-582 23 Linköping, SWEDEN Phone 1: +46 (0)13 13 97 92 Phone 2: +46 (0)13 13 96 00 (recep.) Fax: +46 (0)13 13 97 35 GSM: +46 (0)708 13 97 35 URL: http://www.ucs.se

Hi Tom and All, I have been quietly watching the list for the last year (no new issues for me that weren''t covered in the docs or promptly "bug-fixed" by Tom. Boy, has this grown exponentially! Anyway, back to the point (the proverbial rearranging the furniture)... I have been evaluating Mandrake''s MNF as an upgrade for my Firewall box. If I do this( and even if I

Hello Everyone! I am using shorewall-3.0.5 on suse linux. Recently we have implemented dansguardian running on 8080 and squid on port 3128. Previously (before dans guardian) masquerading was working fine but after the implementation of dansguardian masquerading is not working. My rules file has entry Previous entry was ACCEPT loc:192.192.192.3 net REDIRECT loc 8080 tcp

Hi, I installed a network of five desktops in a small town hall, all running CentOS 5.4. The machines are publicly, and the mayor asked me to find some solution to effectively filter web content, as the kids' first reflex is to visit the interesting bits of the Internet first, from satanism to porn. One of the machines will be set up as a router anyway, since the public computer room

Hi all, Currently at work we use a commercial product called "Gnatbox", which, I believe, is a BSD derivative running on a floppy disk. They have a pretty UI and all, but I''d feel much safer/happier with a GNU/Linux box and Shorewall doing the same thing. In fact, I''m doing something very close to this at home using Openwrt and Shorewall on my WRT54G router, but I

Hi list, Has anyone here use SquidGuard for their Squid proxy running in CentOS4.4 to block list of bad sites? Is the RPM available using yum? Any feedback using this software appreciated. Thank you very much. junji linux registered user #253162 Send instant messages to your online friends http://uk.messenger.yahoo.com

Having moved from a "cascading LANs" configuration to two independent LANs on eth0 and eth1, I still get some "state INVALID" for which I am not sure what the cause is. Can somebody help me understand its probable origin? Thanks, Costantino [see attachment]

Hi all, I am running squid proxy server integrated with Content filter Dansguardian, squidguard and clamav for Http level scanning on centos 5 .Configured webmin management tool to create and manage access control using squidguard plug in. Now it is serving request for 100 machines and Below is my hardware details. Hardware Details SUN BLADE 6000 2.67 GHz * 1 4 Gb RAM 2*146Gb HDD we

I''ve installed a bering box acting as a firewall for a lan; the lan is 192.168.1.0/24 the bering box is 192.168.1.254 I''ve installed a squid server 192.168.1.1 It is possible to configure shorewall for a transparent proxy to the squid server? I''ve tryed with REDIRECT loc loc:192.168.1.1:3128 tcp www - !192.168.1.1 in the rules file I get this error: Error:

Hi! I have setup a router with 3 NIC: inet->eth0->eth1-local_users ->eth2-DMZ_server I have also setup dhcp and DNS on the router. DHCP is server only for eth1 while on eth2 I have static IP address. So everything works except connecting local_users on eth1 to Samba shares on the server in DMZ by server name. Yes, I have it in my DNS records to point to it and with nslookup

Javier Fernández-Sanguino Peña has discovered an exploitable vulnerability in the way that Shorewall handles temporary files and directories. The vulnerability can allow a non-root user to cause arbitrary files on the system to be overwritten. LEAF Bering and Bering uClibc users are generally not at risk due to the fact that LEAF boxes do not typically allow logins by non-root users. For 2.0

(I''m not a member of the list at the moment so please answer this e-mail CC to my personal address. Thank you all) I am part of a community network in Buenos Aires and I''m now trying to set up a bridge between my local net and the community net. The problem is that appart from the bridge between these I need to share an internet connection and the cable modem assigns me a