similar to: 2 external Interfaces and dozens of tunnels to MASQ

Hi! I guess I just overread the part I need, I checked the FAQ and online-documentation, but could not find the solution for my problem: I have a server with 1 external IP and a LAN behind, where I need ports to be forwarded like this: external 1.2.3.4:81 forwarded to internal 192.168.1.1:80 external 1.2.3.4:82 forwarded to internal 192.168.1.2:80 and so on .. (for configuring/accessing the

Dear all, I get a problem with masq, why it doesn''t work for connect to internet? my masq configuration /etc/shorewall/masq eth0 10.2.0.0/16 202.158.1.99 but if my masq file without 202.158.1.99 it work! /etc/shorewall/masq eth0 10.2.0.0/16 and the ip nat will be same with ip address eth0. FYI: IP number (202.158.1.99) just valid IP but doesn''t have interface

(sorry this is so long) I could really use a helping hand. I have a 1.6.2.6 installation using LDAP as the realtime engine for voicemail users, SIP users, queues, and some custom hotdesking families. I'm also using ODBC voicemail storage. The issue that I am having is that the UA's (Polycom 501's, 301's and 430's) are receiving multiple SIP NOTIFY messages when the user

On 05/24/2012 03:37 AM, Michael Spencer wrote: > LLVM already supports Windows quite well. The issue is clang and the > MS C++ ABI. If you are writing your own language that does not need to > interact with the C++ ABI then everything will be fine. I can confirm this. Even if you do need to interface to C/C++, clang works fine for that as long as you stick to the mingw libraries instead

On Wed, May 23, 2012 at 4:38 PM, Mikael Lyngvig <mikael at lyngvig.org> wrote: > Hi again again, > > I'm trying to build my compiler frontend in C++ on Windows 7 x64 using > clang++.exe.  I want to use clang++ for my project so that I get a feel for > how mature and usable the Windows support is as I gradually get up to speed > with LLVM for Windows.  I could develop on

On Wed, May 23, 2012 at 6:12 PM, Mikael Lyngvig <mikael at lyngvig.org> wrote: > Thanks for the quick reply.  I had a feeling that it was due to missing > Windows support in clang++ and LLVM. > > """ > This is due to clang not understanding force_inline. These functions > are defined in a header included from Windows.h, so it ends up getting > a definition

Hi again again, I'm trying to build my compiler frontend in C++ on Windows 7 x64 using clang++.exe. I want to use clang++ for my project so that I get a feel for how mature and usable the Windows support is as I gradually get up to speed with LLVM for Windows. I could develop on Linux, but I need the Windows support so I figure I might as well do it the hard way. My code is fairly simple

hi, we use openvpn as for our vpn endpoints and we''ve got about 70-80 vpn connections which means we have tun0 - tun80 interface. i''d like to define one zone for all of our vpn connections how can I do that? actualy our local zone is 192.168.0.0/17 (not 16) and all of the vpn''s are in 192.168.128.0/17. our should i define somehow the local zone as 192.168.0.0/16? but in

Thanks for the quick reply. I had a feeling that it was due to missing Windows support in clang++ and LLVM. """ This is due to clang not understanding force_inline. These functions are defined in a header included from Windows.h, so it ends up getting a definition everywhere it is included. """ How much work would it take to add support for force_inline? Are there

There was a lengthy power failure here in Shoreline this morning and my firewall did not come back up when power was restored. The firewall is now up and service to the server has been restored. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \

Hello All, I took a break from trying to get Tinc working and have come back to it now with the release of 1.0.11. I have 2 Windows computers connected behind firewalls and everything seems to be correct, except I cannot seem to get any data past the server TAP interface. I can ping the Server TAP interface from the client, but no data will move through the TAP interface to the Internet. I have

-----BEGIN PGP SIGNED MESSAGE----- On Fri, 07 Aug 1998 11:17:31 -0400, Mailing Lists wrote: >for a hacker to directly connect to one of my protected computers from the >outside. Can a java or activeX applet do the thrick? Or if a computer >from the inside initiate a connexion to some.evil.org, can this host piggy >backs the link and access the computer from which the connection was

Hi all. I''m using Jamal''s ifb virtual interface from new kernel. Redirecting incoming traffic from external interface like that: # tc [blahbla] match u32 0 0 flowid 1:0 action mirred egress redirect dev ifb0 to ifb to shape it. The problem is that I''m using MASQUERADE by netfilter also. That redirected traffic coming from internet gets to ifb _before_ DNAT is done.

Hi All, Our internal users need to connect to the bank to do internet banking. The bank requires that the client computers connect to ports 15000-15010. In Shorewall how do I do a masq for anyone trying to connect to these ports? Thanks Raymond

Would it be considered normal that a system behind a shorewall box that was setup for proxyarp and able to be reached from the trusted side of the net just fine on the proxyapr ip address would if it were to talk out to the world show as traffic not from the proxyarp address but the firewall''s own address or the masquerading ip used by other zones? We had not really noticed this as an

Is it possible to somehow build this rule, where net could be any IP on the net? /etc/shorewall/masq #INTERFACE SUBNET ADDRESS PROTO PORT(S) eth3:10.10.10.7 net 10.10.10.1 Thanks, David

hello, my setup is rh8 2.4.20-8, shorewall 2.0.7, freeswan-2.04. ------- policy------- vpn loc accept loc vpn accept vpn fw accept fw vpn accept --------------------- --------zone ------- net net loc local dmz dmz vpn vpn ------------------------ ----- tunnels --------- ipsec net 0.0.0.0/0 vpn ipsecnat net 0.0.0.0/0 vpn -------------------------------------- ------ interfaces

Wondering about being able to see MASQ activities with IPTABLES. With IPCHAINS I used -M -L to make this possible. Nothing like that with iptables, at least as far as I can see. Any thoughts on that fellows.. --- Ted Gervais Coldbrook Nova Scotia Canada B4R1A7

Hello! Is there any way conrol dnsmasq which is started by libvirt? For example, i want to enlarge max lease time. Thanks. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://listman.redhat.com/archives/libvirt-users/attachments/20101121/d3e597e0/attachment.htm>

Hi, I need some special masq rules to allow internal servers to resolve public IP''s which are loadbalanced by LVS - the rule are: iptables -t nat -A POSTROUTING -m ipvs --vaddr <LVS PUBLIC IP>/32 --vport 80 -j SNAT --to-source <LVS INTERNAL IP> Also I need to enable: echo 1 > /proc/sys/net/ipv4/vs/conntrack Currently I do all this from /etc/shorewall/started - but is