similar to: masquerading problem

Hi all, I'm observing an issue that as soon as libvirt starts, UPD broadcasts going through physical network (and unrelated to any virtualization) get broken. Specifically, windows neighbourhood browsing through samba's nmbd starts suffering badly (Samba is running on this same box). At the moment I'm running a quite outdated version 1.2.9 of libvirt, but other than this issue,

hi, I am using shorewall 2.0.14 on debian and it is working but for a small problem. I want to allow masquerading only for a few ips in the network to some certain site for ftp, ssh etc. Masquerading will be blocked for other users amd they will access internet thru proxy server. How can I do this ? thanks. wrodrigues. Today is the tomorrow you worried about yesterday.

Hello Everyone! I am using shorewall-3.0.5 on suse linux. Recently we have implemented dansguardian running on 8080 and squid on port 3128. Previously (before dans guardian) masquerading was working fine but after the implementation of dansguardian masquerading is not working. My rules file has entry Previous entry was ACCEPT loc:192.192.192.3 net REDIRECT loc 8080 tcp

Hi all. I have a NAT problem. I have read FAQs and a lot of masquerading docs, but this seems such a simple problem, that I guess noone else will consider this a problem... This is my setup: shorewall version 1.4.6.c uname -a Linux server 2.4.21-0.13mdksecure #1 SMP [root@server shorewall]# ip addr show 1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00

hi list, i got a small problem. here is my setup: WAN | | | bridged $FW-------DMZ | | masqueraded | LOCAL my shorewall machine ($FW) got three interfaces: eth0 eth1 eth2 * eth0 is connected to the WAN * eth1 is connected to my DMZ * eth2 is connected to LOCAL network i manage a whole C class (public adresses) in my DMZ, let''s say X.Y.Z.0/24 * my router

On 6/28/19 10:23 AM, Nikolai Zhubr wrote: > Hi all, > > I'm observing an issue that as soon as libvirt starts, UPD broadcasts > going through physical network (and unrelated to any virtualization) get > broken. Specifically, windows neighbourhood browsing through samba's > nmbd starts suffering badly (Samba is running on this same box). > > At the moment

Howdy, I tried tackling this on irc with Ivo, but I suspect that irc may really not be the best medium for technical discussions, so I'll reprise it here. I am trying to duplicate the "tinc from behind a masquerading firewall" example from the tinc web site: (home) <--> (masquerading firewall) <--> (office) 192.168.1.21 192.168.1.1/1.2.3.4

Hi, I am wondering if it is possible to do the following with shorewall. I operate a network with some additional IP''s that are SNAT''d to various server machines on my network. One of my machines is a Terminal server. I need to be able to RDP to various servers for clients, that are IP locked for RDP on my PtP address, not the SNAT address of my Terminal server. Can I

Hello, I''m not sure if this has been asked before but I would like to ask assistance for this problem I have. I installed gentoo for my firewall/gateway and installed dhcp and shorewall. Currently, I can ssh, ftp, remote desktop connect, ping, etc (anything I can think of) from an internal computer inside my network to an external IP, except I cannot surf the net. I can ssh/ftp to

CentOS 7.4 client mounting a CentOS 7.4 server filesystem over nfs4. nfs seems to be much slower since the upgrade to 7.4, so I thought it might be nice to mount the directory as v4.0 rather than the new default of v4.1 to see if it makes a difference. The release notes state, without an example: "You can retain the original behavior by specifying 0 as the minor version" nfs(5)

Following Situation: Having an intranet-application that needs to know the ip-Address of the clients before running. Clients anywere in the Internet with any ip-address. So I thought about using masquerading the opposite way than normal. But then anybody could use this application. Dos anybody know how to make it a little bit more secure, like proofing the mac-address of the client, or something

Hi Jerry/Samba Team I have Samba 3.0.10 installed on Solaris8 server and Samba-client-2.2.10 installed on Linux Red Hat2.1AS servers The Linux servers use Samba to mount filesystems from Solaris8 server. My question is how to find out on the Solaris8 server which Linux servers are using Samba to mount from. Because it is hideous to go to every Linux server and see which Solaris8 server they are

I sent the message below to this list over a week ago, and I haven''t seen any response. If this is not the correct forum for my question, can anyone suggest a better person or place to which I should direct it? Thank you, Jonathan Kamens ------- Start of forwarded message ------- From: Jonathan Kamens <jik@kamens.brookline.ma.us> To: lartc@mailman.ds9a.nl Subject: [LARTC] MSS

Dear all, Before I can get into serious Fourier analysis of Radon time-series I am practising with 24hour and 24.8hour sinusoids to assist with my interpretation of signals ittributed to tidal input to Radon time series. I am stuck. I have tried researching this to no avail. I am awating a book that should describe fourier transforms in detail and another one that should discuss the R

Hi, I have a linux box which balances load between two interfaces ( say WAN1 and WAN2). I have masquerading on for any request coming from LAN to the outside world. The setup is in such a way that WAN1 drops packets with source ip belonging to WAN2''s network and viceversa. For some strange reason, I find that packet coming out from the WAN interface has source address of WAN2 and

HPA, I believe that support to boot windows CD bootsectors was broken in 3.05. I have tested 2.13, 3.00, 3.02, 3.05, 3.06, 3.08, 3.11, and 3.20pre6. All versions >= 3.05 are broken. All versions <= 3.02 work fine with the same config. The error message I get is: ================================================================ IOSLINUX 3.20 3.20-pre6 Copyright (C) 1994-2005 H. Peter Anvin

Hello, I''ve successfully gotten Shorewall 2.0.7 configured and working. However, I am confused about how I can setup the interface "ppp1" in the file masq to allow the masquerading of my local LAN over a L2TP tunnel. It works without a hitch if the ppp interface is up, but if I reboot my machine without the interface being, shorewall refuses to load because the interface is

Dear list members, Masquerading does''not work for me. This is a Mandrake Linux 10 system, but I use another kernel, that included in the original distribution (original: 2.6.3, now used 2.6.8 because of a lot of suck with OpenSwan with kernels prior 2.6.4). The problem seems to be similar or identical mentioned here:

error viewed: Updating : openssl ####################### [ 1/48] /sbin/ldconfig: /lib/libstdc++-libc6.2-2.so.3 is not an ELF file - it has the wr ong magic bytes at the start. Updating : openssl ####################### [ 1/48] /sbin/ldconfig: /lib/libstdc++-libc6.2-2.so.3 is not an ELF file - it has the wr ong magic bytes at the start. Any one

Hi !, I have this problem. On a Mandrake 10.0 server with all the updates (Kernel 2.6.3-15mdk, iptables-1.2.9-7mdk and shorewall-2.0.3a-1mdk), one of our internal users have to FTP some files to our external web server. I think we have the correct configuration and rules in shorewall, and have read the http://www.shorewall.net/FTP.html document. Still, our users can''t FTP to the