Displaying 20 results from an estimated 2000 matches similar to: "proxyarp problem"
2004 Oct 09
4
Does anyone have a working proxyARP setup?
If you have a working proxyARP setup, will you please post it?
I''ve tried to insert a Linux box between the DSL connection and the
switch, but I''m getting nowhere. Everything works correctly when all
the servers in this network use the switch to get to the DSL. Any box
directly connected to the DSL also works correctly.
http://www.sjdjweis.com/linux/proxyarp/
makes it sound
2005 Jul 08
1
gre tunnel between networks with same subnet
/-----------------------\
| |
|eth0 |eth0
|-------| |-------|
| |eth1 eth1 | |
-------- A |____ _______| B |-----
| | \ / | |
--------| | | --------|
| |
| |
2004 Sep 10
1
Is ProxyARP or NAT entries really neccesary for DNAT to work?
I have been trying to get DNAT to work and I actually have succeeded
too, however, not how I thought it would work when reading through the
documentation.
1. No matter what I do I cannot get DNAT to work unless I have an entry
in eiter the nat or the proxyarp file. Is that really how it''s supposed
to be? I can''t find anything about it in the documentation.
2. Also, in the
2002 Feb 01
1
Bug in the HOWTO: proxy-arp (?)
Hello alltogether,
I''m new to the list, so please excuse any violations of listiquette...
I didn''t have to much to do with linux based firewalling and routing for
quite a time and found that proxy-arp changed in between...
As I struggled with it I found that the Advanced routing... howto wasn''t to
helpfull. Especially the documentation seems to be rather vice versa to
2003 Jan 22
1
expect connect timeout, but don''t get one
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Greetings
I''m having a network problem that I don''t understand. It involves/hinges
upon an internal router running the latest Shorewall. We make weather
radar control and networking software. Our customers are experiencing a
connection timeout, but here in the office we are not. I have some
slight suspicions as to why they see a
2011 Aug 02
5
selinux issues
Please see https://bugzilla.redhat.com/show_bug.cgi?id=727648 for more info.
Shorewall executes some bash code like the following:
while read address interface external haveroute; do
qt $IP -4 neigh del proxy $address dev $external
[ -z "${haveroute}${g_noroutes}" ] && qt $IP -4 route del
$address/32 dev $interface
2011 Apr 15
1
Proxyarp vs DNAT
Hello list,
I am in the process of switching from IPCOP to Shorewall s the firewall
for our small office. I very much like the fact that Shorewall runs on
top of the same OS (openSuSE 11.4) that I run on the server and my desktop.
Our setup is fairly straightforward. We have 8 static ip addresses from
our ISP, which provides a cable modem and a Cisco 800 series router.
The ip addresses are
2005 Jan 12
2
Samba and ProxyArp
Hi
As per my follow up mail I implemented the ProxyArp configuration as per the
Documentation on the Web site and all seemed to be working correctly.
However, the one thing that doesn''t seem to be working properly is Samba.
I have Samba running on the FW machine and one of the servers 192.168.0.8 on
the Local Lan.
I can connect to a Share using Samba from Server to Server, however
2002 Jul 25
5
Shorewall 1.3.5
This will be the last Shorewall release for a while as I''m going to be
focusing on Documentation.
In this release:
1. Empty and invalid source and destination qualifiers are now detected
in the rules file. It is a good idea to use the ''shorewall check''
command before you issue a ''shorewall restart'' command be be sure
that you don''t
2005 Jan 22
3
DNAT, NAT or ProxyARP?
Hello Shorewall gurus, I have a dilemma with a public server. I want to migrate the current public server over to a new machine behind the current server''s firewall (shorewall 1.4). I have included a diagram below to help explain the target network I am working toward. I have read the shorewall online documentation and though I have used Shorewall the past 4 years in the current
2003 Oct 19
2
Reg. Proxyarp & DHCP
My ISP has DHCP-assigned IP-addresses.
I wonder if someone has tried using proxyarp
for a DMZ with DHCP-assigned public IP?
2004 Oct 09
2
odd problem with proxyarp and DNAT
I have some hosts in a DMZ zone with proxyarp. In my local zone I have a host to which I DNAT.
I have discovered that I can reach the host in the local zone by attempting to connect to the fw (As expected) or ANY proxyarped host in my dmz zone (as not expected). Is this normal ?
(I''ve just discovered that actually the dnated host answers to requests sent to any IP routed to my host!)
2005 Jan 18
1
proxyarp and masq ip
Would it be considered normal that a system behind a shorewall box that
was setup for proxyarp and able to be reached from the trusted side of
the net just fine on the proxyapr ip address would if it were to talk
out to the world show as traffic not from the proxyarp address but the
firewall''s own address or the masquerading ip used by other zones? We
had not really noticed this as an
2006 Jun 02
2
ProxyArp
Hi-
One last question for the week, I promise.
I''ve got one IP ProxyArp''d according to the instructions at
http://www.shorewall.net/ProxyARP.htm. I''ve setup the
shorewall/proxyarp file as follows:
#ADDRESS INTERFACE EXTERNAL HAVEROUTE
PERSISTENT
208.4.145.73 br0 eth1 no yes
#LAST LINE -- ADD YOUR ENTRIES
2004 Oct 28
5
Maximum ProxyArp
Does anyone know what a good maximum number of machines I should place
in the ProxyArp list?
Thanks
Jamie
2005 Apr 08
10
ProxyARP in a Routed environment
Hi,
In a routed network setup , is it possible to use ProxyARP given the condition that the shorewall
external interface and the DMZ interface are in a completely different network . That means the gateway of the External interface and the hosts in ProxyARPed DMZ zones are in different network.
eth0 ---in 220.227.X.Y/30 -- shorewall external interface
eth1 ---in 220.227.A.B/27 -- shorewall
2005 Feb 11
4
config question for proxyarp hosts?
I''ve got a serious mess of NAT on our firewall/router systems at the
corporate office which seems to do nothing other than confuse the heck
out of people. What I''d like to do is gradually migrate the hosts on
the various DMZ networks away from private IP addresses and NAT over to
public IP addresses and proxyarp.
What I''m wondering, before I start this, is how do I
2004 Dec 21
5
Is ''publish'' proxy arp still broken ?
Can''t get proxy arp with arp -s <IPaddr> <MACaddr> pub
to work with a 2.4 kernel. I see some evidence in the archive
that this was broken in the 2.0.x timeframe and never fixed.
Anyone know for sure if it''s broken or working ?
(I''m attempting to route a few addresses into a routed
network, from the ethernet side of a DSL router that
has a /29 public
2005 Jul 27
2
Accounting Proxyarp users !!?
Hi Folks,
Can i account proxyarped pc´s ??
Like know how much web traffic passthru a specific person ip using shorewall ?
So i can know how much bandwidth that specific IP EAT ?
Thanks alot
Carlos Arnt
-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward
2006 Feb 07
0
proxyarp <--> OpenSwan VPN/Internet
Our VPN runs for 3 months very well with a minimum of traffic <100 kbit/s.
Only DNS Zones and nagios passive checks were transferred. Everything seems
to work.
Left side is x.x.x.14 (host 1)
Subnet 10.0.0.0/24
openswan 2.4.4
shorewall 2.4.2 & iptables 1.3.4
gentoo 2.6.12-r9 with policy match
It´s reachable through a proxyarp entry on x.x.x.11 (host 2) which is
another gentoo 2.6.12-r9