similar to: Route first or NAT?

hi, is there any reason why there is no such thing as ADD_DNAT_ALIASES in shorewall.conf or in rules (or am i just missed it)? i think about it like in masq file if the masquaraded outgoing interface is different from the default firewall intyerface than i can use ip:<digit> where the digit is the alias number. since dnat is in the rules it can be used from there. eg: if would like to dnat

Hello Shorewall users, I have some questions I am hoping someone can answer. I have searched around the archives but so far I have been unable to find answers. I am trying to configure traffic shaping on my router/firewall box running Shorewall 3.0.5/kernel 2.4.31 and have run into some problems/questions. My basic set up is: 1500/256kbit ADSL (PPPoE/ppp0) -> Shorewall box

We have a customer with a large public folder hierarchy. They occasionally make requests to have the public folder ACLs changed; for example: "please give user X access to all public folders" (that's nearly 1700 folders). Worse: "please give user Y access to all sales folders" (there are 1450 sales folders). The problem is that there are (naturally) spaces in the folder

I recently setup shorewall on my freshly rebuilt router box. I setup transparent proxying using transproxy/dansguardian/privoxy/squid. My current rules for the redirect are: REDIRECT loc 81 tcp www - !192.168.100.0/24 ACCEPT fw net tcp www How do I set this so that all the request are redirected except for requests FROM a certain machine (192.168.100.11)? I

If you are interested in helping with testing new features, please look at http://shorewall.net/netmap.html. If you have a need for this type of network-level address mapping and/or are in a position to test it please let me know. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

I''m wondering if the following is possible under recent versions of shorewall: 1. We have several class-C networks from both UUNet and Internap, both of which are actually routed over a single inbound ethernet line from UUNet at our colocation facility: 204.176.148.0/23 and 216.52.83.0/24. This gives us a total of 3 class-C subnets. All packets for these three subnets would land on

Last week there was a thread on outlier detection. I came across an article which has a very interesting paragraph. The article is Missing Values, Outliers, Robust Statistics, & Non-parametric Methods by Shaun Burke, RHM Techology Ltd, High Wycombe, Buckinghamshire, UK. It was the fourth article in a series which appeared in Scientific Data Management in 1998 and 1998. The very

For some time, I have been working half-heartedly on a document that details how Shorewall uses Netfilter. I have finally come to terms with the fact that I am changing Shorewall at a much faster rate than I am writing the paper with the result that the paper will never be finished. To try to help people understand the structure of a Shorewall-generated ruleset, I have therefore written a brief

Hello, I''m on Debian Sarge, and try actually to setup iproute this way : - local network 1: 192.168.12.0/24 - local network 2: 172.20.0.0/16 - one router on both network : 192.168.12.50 & 172.20.201.50 - one router to internet (SLIS) : 172.20.1.1 I want from my 1st local network to access internet... here are my lines... (taken from The LARTC Howto) ip route add 172.20.0.0/16 dev

Hi, Is there a way in Linux to do NAT with a pool of outside addresses such that each connection to the outside resource gets a different IP address?? I don''t want 1:1 NAT as I have some thousands of IP addresses on one side of the LARTC router that _may_ need to access a resource on the other side... The resource needs to see a different IP address for each active call, but these

Hi, I read the howto of iproute, I have the same case with HOWTO, the difference is that the whole incoming traffic goes through interface 0, the other difference is that I do not want to balance the out going traffic, because I have specific networks to take it throughout another interface. Mi Case IF1 --> Input and Output IF2 --> Only aoutput for three Network I need Help, How can I

Hi all, I have had shorewall running successfully for over two years, its a great firewall! I have a NAT question that I cannot seem to find the answer to, and I was hoping someone could give me a hand. I have recently learned of a type of NAT called "Twice NAT", it which when a specific DNS address is requested, the information is forwarded on. I have outlined what I would

Hi everyone,   I have got the following problem:   x1 <- rnorm(10,5,1) x2 <- runif(10,0,1) nam1 <- paste("A",1:4,sep=".") nam2 <- paste("A",6:9,sep=".") nam <- c(nam1,"A.4",nam2,"A.9") mydata <- data.frame(x1,x2) rownames(mydata) <- nam Error in `row.names<-.data.frame`(`*tmp*`, value = c("A.1",

Hi team, I have Samba (4.9.5) AD DC, and when trying to add second DC, join fail: # samba-tool domain join zamecek.home DC -U"SSUPS-ZAMECEK\administrator" --option='idmap_ldb:use rfc2307 = yes' --dns-backend=BIND9_DLZ Finding a writeable DC for domain 'zamecek.home' Found DC dc1.zamecek.home Password for [SSUPS-ZAMECEK\administrator]: workgroup is SSUPS-ZAMECEK realm is

I'm looking for a histogram variant in which data points are plotted as labelled rectangles 'piled up' to form a histogram. I've posted an example at https://www.dropbox.com/s/ozi8bhdn5kqaufm/labelled_histogram.png?dl=0 It seems to have a long pedigree, as I see it (as in this example) in documents going back beyond the '80s. But I've not seen it in recent textbooks. So it

Hi, With reference to my previous mail: 1. I use openssh-2.9p2 on a LynxOS i386 system. The ssh and scp clients work fine. Even sftp from other Linux systems works. But, if I run the sftp client in LynxOS to localhost (LynxOS) or remote sshd in Linux, the authentication succeeds, prints sftp> prompt and then exits. I don't know why this happens. The problem is with the sftp client

Folks I find the Lynx browser does not appear in any of the repositories used during default installation of Centos 8 (x86_64). Is this program no longer supported? I didn't see a reference to it in the notsupported list. David

Dne 2019-03-25 16:02, Rowland Penny via samba napsal: > On Mon, 25 Mar 2019 15:12:16 +0100 > franta via samba <samba at lists.samba.org> wrote: > >> Hi team, >> I have Samba (4.9.5) AD DC, and when trying to add second DC, join >> fail: >> >> # samba-tool domain join zamecek.home DC >> -U"SSUPS-ZAMECEK\administrator"

> On 10 Jan 2013, at 15:56 , S Ellison <S.Ellison at lgcgroup.com> wrote: > > > >> I am working with large numbers and identified that R looses >> precision for such high numbers. > Yes. R uses standard 32-bit double precision. Well, for large values of 32... such as 64. -- Peter Dalgaard, Professor, Center for Statistics, Copenhagen Business School

Hello, sorry to provide only very little testing, but with the release date nearing, I thought it better to report this quickly than to wait for an uncertain period until I find more time. I'm observing strange problems connecting to the httpd help server with konqueror (KDE 4.3.1): options (help_type="html") options (browser="konqueror") help ("print")