similar to: I think I did something wrong

Does anyone know what a good maximum number of machines I should place in the ProxyArp list? Thanks Jamie

You are awesome!!!! -----Original Message----- From: shorewall-users-bounces@lists.shorewall.net [mailto:shorewall-users-bounces@lists.shorewall.net] On Behalf Of Tom Eastep Sent: Wednesday, March 30, 2005 9:11 AM To: Mailing List for Shorewall Users Subject: Re: [Shorewall-users] Shorewall and an inline IDS (snort-inlineorhogwash) Tom Eastep wrote: > Thibodeau, Jamie L. wrote: >

I have a quick question regarding accounting rules. This is the contents of my accounting file. *for reference eth1 is my net interface eth0 is my loc interface ezp:COUNT - eth1 129.15.70.46 tcp 80 ezp:COUNT - 129.15.70.46 eth1 tcp - 80 smag:COUNT - eth1 129.15.70.24 tcp 80 smag:COUNT - 129.15.70.24 eth1 tcp - 80

Has anyone successfully setup a shorewall Ucarp solution?

I am not a member of the mailing list. Shorewall version 2.0.9 ip addr show 1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 brd 127.255.255.255 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 4: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000

Clients: Some sites just show the top area not the full page. Some sites cant be reached at all. I think it 90% may be the MTU/MSS problem. But I already have set the shorewall.conf CLAMPMSS=1400 or CLAMPMSS=Yes, but it doest make things good. I would be mad. Anybody helps me would so appreciated! If you want know more info. to diag my problem, I would be please to.

Plus I would like to let you know that it works like a charm. Snort can now see those packets. -----Original Message----- From: shorewall-users-bounces@lists.shorewall.net [mailto:shorewall-users-bounces@lists.shorewall.net] On Behalf Of Thibodeau, Jamie L. Sent: Wednesday, March 30, 2005 9:25 AM To: Mailing List for Shorewall Users Subject: RE: [Shorewall-users] Shorewall and an inline

Hello, I realize that using: x[x > 3 & x < 5] I can fetch all elements between 3 and 5. However I read in from a CSV file, and I would like to fetch all columns from within a range ( 842-2411). In teh past, I have done this to fetch just select few columns: data <- read.csv(filein, header=TRUE, nrows=320, skip=nskip) data_filter <- data[c(2,12,17)]

Hello, Is there a simple way to take an input, and convert the decimal integers to binary? In this case, I have a CSV file, and I need to convert the first column of every line to binary. Thanks. -- Jason Thibodeau [[alternative HTML version deleted]]

I have started looking at implementing shorewall as a bridge and had a few minor questions. First off if I want to define hosts in the hosts file would it be #ZONE HOST(S) OPTIONS Trust br0:eth0:xxx.xxx.xxx.xx net br0:eth0 loc br0:eth1 #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS LINE -- DO NOT REMOVE Or like #ZONE HOST(S)

I made an atempt to run snort_inline and shorewall on the same system but I could not get snort to see the packets. Maybe someone with a little more iptables knowledge could tell me what I''m doing wrong or if its possible to have the systems setup so that it places packets that the firewall would allow into QUEUE. After setting up and starting shorewall I then issue the following

Hello all, I have a very large file (280k lines) containing three comma separated variables. The first variable is a 0 or 1 depicting a pass or fail. The other two are X and Y coordinates. Is there a good way I can represent this data in a chart/plot form other than using a 3d histogram? If I need to use the histogram, should I base my chart off the example contained in the RGL package? Thanks a

Hello all, I have a CSV file, that is 2411 columns wide. There are certain instances in teh file, where null values are located. That is: two commas together, without anything in the middle. In a certain section, the only possible values are NULL, 0,1,and 2. I need to be able to detect these NULL's and be able to have them counted. For example, in a frequency table. How can I accomplish this?

I''m expermienting with Shorewall for use protecting my servers(about 25 all currently using pub addresses). My pointy-haired-boss is somewhat sceptical about adding a firewall that would be a single point of failier for our services. Does anyone have a good set of documentation that I could use in setting up either an Active/Active or Active/passive setup with two identical shorewall

http://shorewall.net/pub/shorewall/Alpha/shorewall-2.0.0 ftp://shorewall.net/pub/shorewall/Alpha/shorewall-2.0.0 -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hello Shorewall gurus, I have a dilemma with a public server. I want to migrate the current public server over to a new machine behind the current server''s firewall (shorewall 1.4). I have included a diagram below to help explain the target network I am working toward. I have read the shorewall online documentation and though I have used Shorewall the past 4 years in the current

Hi everybody. I''m trying to configure shorewall folowing this manual: http://www.montanalinux.org/proxmox-ve-with-shorewall.html But with shorewall check it tells me thah: Checking /etc/shorewall/interfaces... ERROR: Unknown zone (dmz) : /etc/shorewall/interfaces (line 16) How can I define it in the zone file? thanks for the help. best regards, Santiago.

Hi all, How do I put a rule in to allow all ports on a single IP.. I''m not masq my network as the firewall is on the router. I have another firewall internally that I will be removing sometime soon, but just wish to forward all ports to this firewall (until I can decommission it). 3: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000 link/ether

My ISP has DHCP-assigned IP-addresses. I wonder if someone has tried using proxyarp for a DMZ with DHCP-assigned public IP?

Hi all! I posted earlier about the proxy arp configuration = http://shorewall.sourceforge.net/shorewall_setup_guide.htm#NonRouted, = and was probably not sufficiently knowledgeable on the subject. I''ve = gone through a bunch of documents on proxy arp, subnetting with proxy = arp and the documentation at shorewall, and have come up with a setup = that would be perfect for the job at hand