similar to: Traffic Shaper

Hy shorewall users :)) I have the following config in my shorewall: DNAT net:200.137.193.2 loc:192.168.0.55 udp 135,445 - 200.137.193.38 DNAT net:200.137.193.2 loc:192.168.0.55 udp 137:139 - 200.137.193.38 DNAT net:200.137.193.2 loc:192.168.0.55 tcp 135,139,445 - 200.137.193.38 The IP

Hi, i have shorewall installed in my firewall and i have one big problem: My network is: Link Ethernet 1 = eth0 = IP: 200.215.203.2 Link Ethernet 2 = eth1 = IP: 200.137.193.2 DMZ = eth2 = IP: 200.137.193.33 LAN = eth3 = IP: 192.168.0.3 GIGABIT = eth4 = IP: 192.168.1.0 My problem is: How i do to my dmz going to internet to eth1 and gigabit and lan zone

Hi, i''m a shorewall users and i have the following problem: I have one class C range of IP''s and i have three zones (net, dmz , loc) I need create one rule to dnat one valid ip address (but not in use in one computer) to one invalid host in my loc zone. How i do? I try this: DNAT net:200.200.200.200 dmz:200.193.137.38 tcp 137,138,139,445 -

Hi, here my system on shorewall: eth0 192.168.108.1 net eth1 192.168.109.1 dmz eth2 192.168.110.1 loc_110 eth3 192.168.111.1 loc I haven''t access from or to server in loc_110 through shorewall. I can use ssh or other types from loc to dmz or from loc to fw, but I can''t use connections to loc_110. I can also use ssh - connection from fw to loc_110 or redirectly. Where is the

I have a shorewall . My outgoing bandwidth is 10M connected to the Internet. On behind shorewall, there are number of servers which provide different services say http, ftp, smtp. I want to ensure some of service to grantuate that a certain amount of bandwidth to serve Internet people. Let''s say my configuration. 2M for ftp 3M for smtp 5M for http such that to prevent Internet people

Hello, Mike Noyes and myself have populated http://wiki.rettc.com with the shorewall FAQ. This wiki is running MediaWiki, http://www.mediawiki.org. Currently, a couple items are not complete. I have just begun a heavy semester of mathematics/physics studies, and do not have much time to give to this. But, it is online, and seems to be stable. I will keep an eye out for abuse, and limit

It has been asserted that the use of CVS for maintaining the Shorewall documentation has been a barrier to community participation. To test this theory, Alex Martin has created a Wiki (http://wiki.rettc.com/wiki.phtml?title=Wiki_Shorewall_FAQ) and with the help of Mike Noyes Alex has populated the Wiki with the Shorewall FAQ. Feedback is welcome. -Tom -- Tom Eastep \ Nothing is foolproof to a

Hello, I have a naked mediawiki running, from http://wikipedia.sourceforge.net/ The wiki is here: http://wiki.rettc.com Let me know what you think, and if it will be suitable for populating with FAQ stuffs. Alex http://www.rettc.com

Hello, In reference to http://wiki.rettc.com/wiki.phtml?title=Wiki_Shorewall_FAQ ; Well, after a lot of emails I setup a wiki for shorewall, etc. It has proved to be completely useless. I have noticed one slight distro specific example added, a couple typo additions and fixes, otherwise, all contributions have been in excess (Tom...), or in malign. For my uses it has proven of little use as

Greetings, I am trying to set up Wonder Shaper to work along with Shorewall 2.0.8. I have read through this document here: http://shorewall.net/traffic_shaping.htm and set the necessary options in shorewall.conf, and I coped the contents of the htb file to tcstart and changed things in accordance with the readme. Now from what im seeing, that''s all there is to it and it should work,

Hello, Is is possible to do "shorewall reject 1.1.1.1 tcp 25" ? So I can dynamically blacklist offensive smtp senders, but only have shorewall reject certain types (smtp) traffic from them? Thanks, Alex Martin http://www.rettc.com

Hi! I compiled the xen-4.0.1 in Linux (Ubuntu 10.04), but as usually, the xen-4.1.0 is not behaving in a manner similar to the previous version. Am I required from version xen-4.1.0, transfer the kernel via the command "git clone git://git.kernel.org/pub/scm/linux/kernel/git/jeremy/xen.gitlinux-2.6-xen" from now? I mean, the "make prep-kernels" command of the xen-4.1.0 no

hi all iam newbee, i ve install shorewall 1.3.11 on mandrake 8.2 , i ve eth0 with local ip 192.168.40.40/21 and eth1 203.128.65.22/255.255.255.248 the problem is when my client try connect to internet the page cannot be displayed and while client try ping to internet address reply from 192.168.40.40 destination net unreachable why it can happend ? anyone can give me a hand

Hello, I get the following error when I kill icecast. I am running icecast2 from source on a debian unstable box. I have looked around google and tried a couple of suggestions like moving and linking the libgcc library around, without any luck. "libgcc_s.so.1 must be installed for pthread_cancel to work?" Anyone have any suggestions? Thanks, Alex Martin shorewall@rettc.com

Hello all, I''ve read the shorewall guides and browsed through the mailing lists, but I haven''t been able to find out if the following is possible or not using shorewall. Our provider has given us 16 IPs + 4 in a separate range for our uplink. I would like to replace that router with a Linux box running shorewall with three interfaces. I want the DMZ to be a standard, routed

Hello, I have forwarded this to the shorewall-users list. You will find better support for this obscure problem there. Regards, Alex Martin http://www.rettc.com Cristian Valentin Barean wrote: > Hello ! > My name is Barean Cristian, and I have a network of 35 users, on a > Linux Mandrake 9.2 server. > As I was adding more users in my network, I found a problem with

Hello, I have been hosting the primary www.shorewall.net mirror for over three years now (if I estimate right) and I would like to continue to provide what I can. I also have a server with no limits on a DSL line that should be 1mbit uplink (for serving). The server on the DSL would be suitable for a primary rsync server. The primary mirror server is doing fine (staying neatly within the

My sincere apologies to all on this list. After looking for returning packets with tcpdump and not finding ANY I called our provider to confirm our IP assignment. The IP range that I was given by my boss was incorrect. After adjusting the ip assignments, everything is working perfectly. Thank you all for your time in troubleshooting this, and I hope to be able to return the favor at some

Hiya, > Ok with me -- if I get too frustrated with DocBook, I''ll just start > editing the HTML again. > > -Tom > Well the fact that VIM is supported by Docbook is a plus .. But I still think the Wiki idea is well .. Lets get the doc at a CVS and Docbook stage .. Walking before running .. plz plz .. Francesca PS: I have thrown Windoze out the Window here (Pardon The

I have a shorewall 2.0.14 running on a single interface machine (nwww in the log below) that is attempting to be well screwed down. The policy file reads:- #SOURCE DEST POLICY LOG LEVEL LIMIT:BURST fw net DROP info net all DROP info # The FOLLOWING POLICY MUST BE LAST all all