similar to: Re: Shorewall-users Digest, Vol 25, Issue 9

I’ve got a problem that I have ignored for a month or 3 J I’m almost certain this is not a Shorewall problem, but I’ll share it anyway ;) I have 2 ISP connection, with load balancing. here’s some routing stuff: rama-kandra root # ip route show 202.37.230.64/26 dev eth2 proto kernel scope link src 202.37.230.93 192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.1

Hi Tom (and others) encase you don''t know my network already ;) here''s a quick run down eth0 lan 192.168.1.1/255.255.255.0 eth1 wan1 172.30.7.4/255.255.240.0 eth2 wan2 202.37.230.93/255.255.255.192 eth3 wan3 203.96.213.73/255.255.254.0 I''ve got routes and rules for all the above interfaces :) I want to add another one, however I fear this might cause some issues I have

I''ve got a problem that I have ignored for a month or 3 :-) I''m almost certain this is not a Shorewall problem, but I''ll share it anyway ;) I have 2 ISP connection, with load balancing. here''s some routing stuff: rama-kandra root # ip route show 202.37.230.64/26 dev eth2 proto kernel scope link src 202.37.230.93 192.168.1.0/24 dev eth0 proto kernel

Firstly I don''t think this is a shorewall problem, but I suspect shorewall might be able to solve it for me. I''ve posted this so far at http://mandrakeusers.org/index.php?showtopic=18942 I''ve stumble upon a problem that has me stumped I have a multipath router using 2.6.8.1 with patches from here http://www.ssi.bg/~ja/#routes basic setup: ___ ISP1

how can I check whether packets are being marked as per my tcrules file? 4 0.0.0.0/0 202.37.230.93 udp 500 4 fw 0.0.0.0/0 udp 500 also can someone confirm what ports are needed to be opened for ipsec? 1701,1723,47,500 ??? P.

Hola, Can someone please point me to the right direction on how-to set up proper routing on PPPoE connection and multiple external IP''s. Thank you kindly. ~Andrew Nady.

Hello, I''m trying to setup an 8 port wan configuration (pptp+pppoe) with one vlan trunk. My internal networks are : LAN(eth9): 10.0.0.0/16 VLAN10(eth9) 10.10.0.0/24 VLAN20(eth9) 10.20.0.0/24 VLAN30(eth9) 10.30.0.0/24 VLAN100(eth9) 10.100.0.0/24 I would like to post my configuration here since i don''t success to do the following: 1. Communicate between VLANxx to LAN

Hello, I am thinking of connecting a Shorewall Firewall to three different ISPs and load balancing some but not all connections. Just asking for some advice for now. Here''s the network layout: ISP1 ISP2 ISP3 ADSL Router 1 ADSL Router 2 ADSL Router 3 | | | FW:eth0 FW:eth1 FW:eth2

interfaces: local eth0 192.168.1.255 dhcp golive eth1 172.30.15.255 wiredc eth2 202.37.230.127 dhcp wave eth3 203.96.213.255 hosts: ipsec eth2:192.168.192.0/24 rules: DNAT wiredc local:192.168.1.3 tcp 80 - DNAT wave local:192.168.1.3 tcp 80 - 203.96.213.73 The rules here

Hi, I have a big "name problem" with my internal mail server (10.0.0.152). It is "seen" on the internet through DNAT (213.58.230.27). Also there is a MX record pointing to the machine. Everything works fine from the outside. However i can''t set the mail clients on the lan pointing to the mx record, because this one points to 213.58.230.27 and the firewall

Having moved from a "cascading LANs" configuration to two independent LANs on eth0 and eth1, I still get some "state INVALID" for which I am not sure what the cause is. Can somebody help me understand its probable origin? Thanks, Costantino [see attachment]

I have some data that looks like this: > dataP input output corpusFreq pvolOT pvolRatioOT 1 give(my sister, the old book) P 47.0 56016 0.1543651 5 donate(her, the book) P 48.7 68928 0.1899471 9 give(my sister, the book) P 73.4 80136 0.2208333 13 donate(my sister, the old book) P

Hi, After running rm -rf on a directory, the files under it got deleted, but the directory was not deleted and was showing stale file handle error. After 18 minutes, I'm able to delete the directory. So could anyone help me in knowing what could have happened or when in general I get such errors. The following is NFS log: [2017-12-21 13:56:01.592256] I [MSGID: 108019]

Hi all, I haven't found any root cause or workaround for this yet. Can any one help me in underatanding the issue? Regards, Jeevan. On Dec 21, 2017 8:20 PM, "Jeevan Patnaik" <g1patnaik at gmail.com> wrote: > Hi, > > > After running rm -rf on a directory, the files under it got deleted, but > the directory was not deleted and was showing stale file handle

An ESTALE error usually means the gfid could not be found. Does repeating the "rm -rf" delete the directory? Regards, Nithya On 3 January 2018 at 12:16, Jeevan Patnaik <g1patnaik at gmail.com> wrote: > Hi all, > > I haven't found any root cause or workaround for this yet. Can any one > help me in underatanding the issue? > > Regards, > Jeevan. > >

Hi folks, Last night and this morning i''ve hacked up a quick web site for coordinating our development work based on Drupal (http://drupal.org). You can find it at: http://shorewall.dyndns.org I''ve put a few ideas in there - feel free to use the comments or sign up for an account and create your own pages (particularly in the two books about development and web site work).

Dear Shorewall Users, having noticed that the request for a WebGUI is growing, after a very short conversation I''ve had with Tom, I''d like to let you all evaluate the Web interface to Shorewall I''ve written, integrating the original weblet package made available for the LRP project. ---------------------------------------------------------------------------- Preamble

I know this isn''t a shorewall question, but I hope somebody might be able to point me the right direction. here''s the error: Apr 10 18:19:07 trinity kernel: BUG: using smp_processor_id() in preemptible [00000001] code: modprobe/11068 Apr 10 18:19:07 trinity kernel: caller is ip_conntrack_init+0x255/0x369 [ip_conntrack] Apr 10 18:19:07 trinity kernel: [<c02ec398>]

Hi guys/gals .. as mentioned earlier I''m rebuilding my fw. I have shorewall/iptables/kernel blah blah all ready to go. I''ve written some udev rules so that I can have lan0, wave0, wave0:1, golive0, iconz0 as my interface names (might make for easy maintenance .. named after each ISP) The ongoing struggle is VPN. pptp with mppe is being a pig. ipsec/racoon didn''t work

hi, here is my question: let''s say i have some users logged on the messenger right now, what can i do to reset their sessions? supposing that i reloaded a rule denying messenger access?? thanks Alberto Sierra