similar to: RE: (scan behind firewall)

Hi, I have shorewall 2.0.8 installed on a linux box. Recently I moved to a setup with a front/back firewall With shorewall acting as a front firewall and M$ ISA Server 2004 acting as a back firewall. I turned all ''intrusion alerts'' On at the ISA server expecting not to get any since shorewall should block everything. Now to the problem: I am getting quite a few alerts

I have some hosts in a DMZ zone with proxyarp. In my local zone I have a host to which I DNAT. I have discovered that I can reach the host in the local zone by attempting to connect to the fw (As expected) or ANY proxyarped host in my dmz zone (as not expected). Is this normal ? (I''ve just discovered that actually the dnated host answers to requests sent to any IP routed to my host!)

Hi, I wrote a mail a few days ago concerning my setup with a front/back firewall, shorewall being front and ISA server 2004 acting as back firewall. I said that ISA server is logging some "intrusion attempts" namely requests coming from external interface to the internal network. As this shouldn''t happen (all intrusion attempts should be stopped by shorewall) I begun to

Hi, I am trying to redirect my subnet thru squid and it seems to be working. However I decided tu exclude two hosts from the redirect (ie acces the net directly) and can''t manage to achieve that. I am using the following rule: REDIRECT loc:!192.168.13.48,!192.168.13.200 3128 tcp 80 - With this rule everything gets redirected thru squid. I also tried:

Hello all, Recently I migrated all telephony in my house to asterisk thanks to the Asterisk, QuadBRI which works wonderfully well. Some small tweaks to make but that's on the long list. On the short list is the ability to reliable send and receive SMS. For SMS I already built a script email2sms, but sometimes the SMS doesn't get send from some reason, the sms log then reports something

Hello all, Yesterday I noticed that my system was "leaking" traffic towards the 10/8 network, I have shorewall installed on multiple machines ranging from single interface devices to ones with 10+ interfaces. I tested all the boxes and they are showing the same behavior. All systems are CentOS 3.4, 2.4.21-27.0.2.ELsmp. Shorewall version: 2.2.1 For the host mentioned is a single

Hello all, Recently I purchased an QuadBRI card from junghanns.net after some playing around, reconfiguring dialplans etc with the exception of 1 thing everything seems to work: I seem to be unable to set the outbound callerid. The dutch telecom operator (KPN) provided me with 4 MSN's on 1 BRI interface. In the past years I'm more then used to setting the MSN without the leading 0, this

This version: a) Corrects a missing "#" in the rules file. b) Corrects problems in both "shorewall add" and "shorewall delete". Thanks to Stijn Jonker for finding these problems. c) Provides a way to install on Slackware. Thanks to David Fletcher for his help. http://shorewall.net/pub/shorewall/Beta ftp://shorewall.net/pub/shorewall/Beta -Tom -- Tom Eastep \

Ok this is admittedly OT, but when you want network advice you go to where network gurus hang... When popping mail from my primary mail server (Linux) from my linux laptop a simple mail check takes 15 seconds to connect when using a wireless nic (802.11g) and 1 second using the hardwired nic. Popping my backup mailserver (also linux) which is sitting RIGHT BESIDE the primary takes one second

hi all, in case someone else runs into it, it is the opfed-scripts rpm that has a postinstall and postuninstall script that changes the yum.conf (bad, mellanox, bad) for a pure/regular uninstall it works fine, but to swap ibutils from mlnxofed to ib stack from os, yum obviously doesn't know that the exclude will be removed. i've seen worse in vendor-provided rpms, but i guess it caught

hi akemi, i also forgot about this thread. we already tested the latest kmod last week and it indeed fixes the issue. still no clue how to report issues to centos team to doublecheck packaging mishaps... stijn On 02/06/2018 12:49 AM, Akemi Yagi wrote: > On Tue, Jan 2, 2018 at 10:10 AM, Akemi Yagi <toracat at elrepo.org> wrote: >> >> On Thu, Dec 7, 2017 at 6:23 AM, Stijn De

Dear Rexperts, First of all let me say that R is a wonderful and useful piece of software. The only thing is that sometimes it takes me a long time to find out how something can be done, especially when aiming to write compact (and efficient) code. For instance, I have the following function (very rudimentary) which takes a (very specific) data frame as input and for certain subsets

Shorewall version 2.2.1 2 Interface setup. eth1: 10.10.1.3 eth0: 192.168.1.2 modem is 192.168.1.1 I need to be able to connect to my adsl modem, but when shorewall is up I get connection rejected. I have added "192.168.1.1 RETURN" above the line "192.168.0.0/16 logdrop # RFC 1918" in "/etc/shorewall/rfc1918" but still getting connection rejected Is there

On Tue, Jan 2, 2018 at 10:10 AM, Akemi Yagi <toracat at elrepo.org> wrote: > > On Thu, Dec 7, 2017 at 6:23 AM, Stijn De Weirdt <stijn.deweirdt at ugent.be> wrote: >> latest kmod update 20-15.el7_4.6 is broken on our systems, while >> previous 20-15.el7_4.4 was working fine (and downgrading fixes the issue). >> >> the issue is with modules from mellanox

Hello Tom, I am not sure if you can help with this but I am at my wits end. If you hit this site and do a force refresh (ctrl + F5) the site will time out and lose connections. Do the same on port 443 and it does not time out??? The web site I am reffering to is www.tituswill.com I think the only problem is port 80. Do you have any idea how to diagnose this I have sent a dump of just

hi johnny, apologies, yes this is centos7 on x86_64. i had to set PKGCONFIG_DIR, but that looked like the only thing. i'll give mock a try and see what comes out. thanks a lot stijn On 02/15/2017 10:44 AM, Johnny Hughes wrote: > On 02/15/2017 03:41 AM, Johnny Hughes wrote: >> On 02/15/2017 02:39 AM, Stijn De Weirdt wrote: >>> hi all, >>> >>> i'm

On Thu, Dec 7, 2017 at 6:23 AM, Stijn De Weirdt <stijn.deweirdt at ugent.be> wrote: > hi all, > > latest kmod update 20-15.el7_4.6 is broken on our systems, while > previous 20-15.el7_4.4 was working fine (and downgrading fixes the issue). > > the issue is with modules from mellanox kmod rpms that are symlinked in > the weak-updates dir. the config files in

On 05/04/18 01:56, Stijn De Weirdt wrote: > hi all, > > can someone help explaining what we are seeing? it makes no sense to us. > this is a host running centos 7.4 with 3.10.0-693.17.1 kernel, and it > has 192GB of ram > >> [] free -b >> total used free shared buff/cache available >> Mem: 201402642432 14413479936

Bit of a shorewall newbie so if the answer is obvious please be gentle. We have been using version 1.4.2 for a while now and are very happy with how it performs, however we are looking to increase the resilience of our internet connection by providing a second internet feed. The idea being that should the primary connection fail shorewall will transparently (as far as users are concerned) switch

On 07/30/2015 03:37 AM, Stijn De Weirdt wrote: > hi all, > > i have a general question (a bit surprised ti's not on the centos faq): > > we found a bug in a package in a centos install, and we are wondering > what the best approach is to get TUV to fix it (and release an update), > so it gets fixed in centos rebuild and thus on our nodes. or at the very > least to get