similar to: HNY Tom & Shoreline Firewall

On the firewall, what is the rationale for giving eth1 an IP address that is also assigned eto eth0? (Rather than a private one.) -- Taso Hatzi caesar 17 <<-salad cjbx jc vdwwjar jc xi jc jd salad

In my SuSE updates this morning, I found "Bug fixes for i810/Radeon graphics drivers"... -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key

On Wed, 2003-07-09 at 08:53, Jonas Anderson wrote: > Hi! > > I''ve been searching for information about using Shorewall as a > bridging firewall. I wonder if you have any documentation regarding > this subject. > Shorewall doesn''t work with bridging. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA

Tom, Thanks for your great contribution to the community. Not only should you be proud of your product (best iptables configuration I have seen so far) and of your in-depth networking/routing/firewalling knowledge but most of all of your helpful dedication and kindness to other people which you have shown repeatedly on this list. We are all here indebted to you. Good luck to you and your family

Been trying to track down an issue where when I issue a restart on shorewall it stalls for maybe 5 minutes. I have tracked it down to the removing of the rules portion but have not been able to get any closer yet. Some place after "strip_file rules" and echo "Deleting user chains..." It seems to fix itself after a reboot of the system for an unknown time then it resurfaces

Since you''ve started signing your email, Tom, my machine can''t verify your sig. Where are you publishing your key? -- John Andersen - NORCOM http://www.norcomsoftware.com/

I've got a couple Shoreline IP phones, their Shoreline model number is Shoreline IP 100. I believe this is actually a Polycom SoundPoint IP 300 phone. I believe the phone is using a MGCP stack. I want to use it for testing with Asterisk. 1. I suspect I need to re-image the phone to make it work with *. 2. How can I preserve the current image on the phone? 3. What is preferred image to use

Hi. I have a Linux box with two network interfaces. The local interface has an alias so it can listen to two (completely) different subnets. I need to configure a Firewall and a DHCP server in the same machine. I have: eth0 > net eth1 > loc1 eth1:1 > loc2 If my DHCP server will use eth1 IP address (main IP address for that interface), How do I specify the ''dhcp'' option

Hi, in my lan I have two firewall, fw1 is the first and manage inte-vlan routing. Fw2 manage internet and dmz. fw1 and fw2 have an interface (eth4 for both fw2 and fw1) on the same subnet that permit to the host behind fw1 to reach internet, my problem is on fw2: eth4 is the NIC that connect fw2 and fw1, I would''t like masquerading hosts behind fw1, so to eth4 of fw2 arrive all

Tom : Firewall up not letting traffic through It is probably a setting that I have wrong Private Network: Can ping the outside network card from inside the network, but can not ping "yahoo.com" or one of its ip address (209.191.122.70) Firewall computer: On the firewall computer can ping computer on inside network and "yahoo.com" -- Eric Teeter 504 Main St.

G'day I'm currently using NUT on Debian squeeze box in the same subnet with an IBM 3000 HV (branded Eaton 5125 with Web/SNMP card), now I wanted to get our storage appliance running NexentaStor 3.1 set up to be using NUT too. Nexenta- Stor is an OpenSolaris / illumos-based appliance OS currently using NUT packages from ubuntu hardy. My question here is whether I'm running into a -

Hi I would like to use shorewall for my bridge firewall. I just read the howto http://www.shorewall.net/bridge.html But in this howto there are only one net behind the bridge and have two nets behind my bridge. Can I use shorewall with two nets behind the bridge. Thanks in advance. roberto -- Ing. Roberto Pereyra ContenidosOnline Servidores BSD, Solaris y Linux Soporte técnico ISPs

I''ve rebuilt my old P-II/233 with Debian Sarge and it is now serving as my main firewall. It is running a home-built 2.6.9 kernel with the ipsec-netfilter and policy match patches. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \

I have previously set up an openvpn LAN to LAN bridging VPN so I know a little about what has to happen. The gateways on either ends were running older version of shorewall that did not support openvpn directly so I just basically opened ports for it and used bridging with tap interfaces. I am no longer using that vpn link to the other house but now that i''ve upgraded I would like

I have a senario I hope one can help me out with... I have a range of Public IP Address 203,xxx.59.106-114 I have 4 internet servers that need to communicate to internal servers/clients 172.16.x.x/24 using port 80. These are Windows2000 servers (no software firewall solution) I have a 2nic shorewall device at present and ,as you know, I can only NAT 80 to one internal server. My immiediate

>From a diff of my current shorewall firewall script with the new one from the CVS today : $ diff -w /usr/share/shorewall/firewall /usr/src/shorewall/s/firewall [...] 673c910 < for network in $networks; do --- > for networks in $networks; do I don''t think that "for networks in $networks" works well. -- -IAN! Ian! D. Allen Ottawa, Ontario,

Dear Friends, I have been using shorewall for some years. I want to set up "shorewall 2" router behind firewall, accordind to this picture: I have lost at setuping "zone"-s (wifi, lan1, net). Plese help me ! Thanks, psw net | | SHOREWALL 1 ------- lan 1 | | |wifi | | SHOREWALL 2 ------- lan 2 | ---------------- lan 3

Using Mandrake MNF which uses shorewall as it''s firewall. My firewall is simple with just two interfaces. One on the internet one on the local network. I can''t browse out to the internet with a browser. Or connect to my external mail server. If I set up the proxy server and set my browser to connect via the proxy I can browse the internet. But still can''t get mail to

Hello, I am using "shorewall add" and "shorewall delete" for dynamically adding and removing users to VPN chains when connecting to a VPN gateway. But ''shorewall delete'' has a little problem to delete the correct rules. When issuing "shorewall delete iface:host zone", shorewall tries to execute rules like: iptables -D source_chain -s host1 -o

Hello, I have a MS Exchange (small business server) that was just upgraded to 2003, behind a bering (shorewall) firewall. OWA is experiencing the issues described in the following technet article: http://support.microsoft.com/default.aspx?scid=kb;en-us;280823 OWA displays Loading, and does not display properly. I am already running over https. (ports 80 and 443 are DNATed to the server).