similar to: IPsec help

Hi everyone, Sorry for asking OT here, but I need your expertise :-) I am running a standard 3 I/F net, dmz, loc Shorewall 1.4.7 on a RH 9 server In the DMZ I have a web shop running with DNAT from the external address to the DMZ - this all works I want to add a develop server in the DMZ with external access so I set this up as per the live server and from internal network it works, but from

Hello shorewall-users, we have a strange problem where some of our customers cannot access our webshop, but most of the customers can. I have been slowly eliminating possibilities and am now left with either the firewall (Shorewall 1.4) or the webshop server. What appears a lot in the logfiles is: Jul 26 11:51:04 gw kernel: Shorewall:logdrop:DROP:IN=eth0 OUT=eth1 SRC=84.128.198.240

Hello all, Running the "ancient" 1.4.7-RC1 version I have a problem with port forwarding. I have for a number of external fixed IP addresses forwarding to an internal terminal server - this works :-) DNAT net:111.22.33.44 loc:192.168.1.11 tcp 3389 DNAT net:222.33.44.55 loc:192.168.1.11 tcp 3389 Now I need to forward port 80 from one external address to an

Hello shorewall-users, now that I''ve got v1.4 problems solved I''d just like to ask a general question. Are there any real benefits to upgrading if v1.4 does what I want ? I''m not a fan of bleeding-edge in production and I don''t go for "v2 must be better than v1 because it''s newer" Tom, if you have a few minutes, what''s new in 2.0

I am faced with a network that needs to autoswitch to isdn should T-1 go down. After a shorewall search it looks to be quite a deal with routing config with linux. Like scripts written to deal with knowing the T-1 is down. I looked into a cisco router that does this. around $3000 This network has used shorewall as the gateway for 4 years now. Currently Fedora as op. system. It appears to me

Hi I am looking at converting a Linux terminal server box to iptables using Shorewall 2.0. (At the moment it uses ipchains). The server currently has scripts which are called as each user logs in which run a series of "ipchains" commands to set the access rights for that user (and again to cancel them when the user logs out). My plan is to replace these scripts with ones that call

Dear list, I am looking for some help with the format of extracted residual values output from: residuals (model1) [1] 0.74140534 0.72464895 0.74873373 0.78313611 0.78836470 0.76934676 0.77448847 0.78465077 0.79278282 [10] 0.80852056 0.81442047 0.80890838 0.78335232 0.83127343 0.85895985 0.85743700 0.83578769 0.82265972 [19] 0.81611939 0.84459841 0.84346431 0.83469399 0.86057807

Hello @R-devel I needed some statistical functions for a project I was working on in Rust, and I've used the R math library as a standalone solution. I thought the R developers would be interested in the fact that their work is being used elsewhere, and I also wanted to say thanks for some code I do NOT want to have to write myself! The "crate" (Rust's name for a package) is at

> I ran testparm and got: name resolve order = lmhosts host wins bcast > > When I put the workstation netbios name in /etc/hosts smbmount works as > advertised, but it seems to ignore /etc/lmhosts > > How can I identify samba's root from an RPM installation? > > > Graham > > -----Original Message----- > From: Maurice Lefebvre

Hi! How are you executing dovecot-lda? I can get 'MAILER-DAEMON' if I omit -f sender-address-here parameter. Aki > On 14 September 2018 at 08:46 David Dodd <dave at ci.com.au> wrote: > > > To get out of the problem this bug was causing I have now downgraded the > affectect servers to using dovecot 2.2.36 & dovecot-pigeonhole 0.4.24 . > > These versions

Can you provide some instructions on how to reproduce this issue, because I wasn't able to. Aki > On 17 September 2018 at 01:28 David Dodd <dave at ci.com.au> wrote: > > > You are correct, omitting the -f option results in the From being set to > MAILER-DAEMON however dovecot-lda is being executed with the -d and the -f > option by my sendmail. > > In my

I have found that specifying different "sizes" in the sample command has a funny effect on the random sampling. The code below is a condensed version of a function I wrote to simulate a bootstrap method. For simplicity, I eliminated the internal bootstrap loop, but kept a statement to draw one bootstrap sample, because this is where the problem occurs. The output (mean(y)^2) should be

class wrote on 06/10/2004 11:18:48: > Hello, I have the following situation: > > 192.168.176.0/24 ------ A ========== B ------ 192.168.177.0/24 > 192.168.176.2 pop3 ipsec > racoon > > > policy: (Machine A and B) > ------- > loc vpn ACCEPT > vpn loc ACCEPT > all

class wrote on 06/10/2004 11:18:48: > Hello, I have the following situation: > > 192.168.176.0/24 ------ A ========== B ------ 192.168.177.0/24 > 192.168.176.2 pop3 ipsec > racoon > > > policy: (Machine A and B) > ------- > loc vpn ACCEPT > vpn loc ACCEPT > all

I am attempting to create an ipsec tunnel between two CentOS 5.1 systems, network-to-network with two different 192.168.xxx.0/24 LAN segments. I have gone through the documentation on the centos web site, and have the machines to the point where the /var/log/messages show ``IPsec-SA established'' on both machines after runnig ``ifup ipsec0'' (same ipsec0 on each machine). IP

Has anyone had any luck with lmhosts. I'm trying to avoid using the -I 192.168.1.10 to identify a Win95 machine when using smbmount Is there an option I need to set in Samba to tell it to use /etc/lmhosts? Graham ------------------------------------------------------- Graham K Dodd Network Systems Analyst DSN: 480-5670 / 5233 Fax : 480-2332 Email: Graham.Dodd@ramstein.af.mil

Shorewall 2.2.0 is expected to be released in the February/March timeframe so it is now time to begin thinking about preparing to upgrade. This is particularly important for those of you still running Shorewall 1.4 since support for that version will end with the release of 2.2. For those of you still running Shorewall 1.4, here are some things that you can do ahead of time to ease the upgrade to

On Friday 21 April 2017 08:36:47 Steffen Kaiser wrote: > On Tue, 18 Apr 2017, Dave Dodd wrote: > > I am trying to determine the correct LDAP schema I need to use to have > > either mailLocation or mailboxPath available ? > > > > Should I be just adding this to one of my own custom objectClasses ? > > Surprisingly, lots of installations seem to work with standard

https://bugzilla.mindrot.org/show_bug.cgi?id=1927 Matthew N. Dodd <matthew.nygard.dodd at gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #2076|0 |1 is obsolete| | --- Comment #1 from Matthew N. Dodd

Hi, I have an R script (transferred from SPLUS) and would like to compile a standalone EXE (or DLL) for WINNT. Would somebody know how this works or how it could be done ? Thanks so much for any hints and suggestions; best regards F. Falk Huettmann Geography Dept.-Earth Science- 2500 University Drive N.W. University of Calgary Calgary AB, T2N 1N4 CANADA Email: falk at ucalgary.ca Tel. 403