similar to: how can i define routed zones

Via creative use of the instructions at http://shorewall.net/Multiple_Zones.html#id2497549. But can a zone (in shorewall/interfaces) reference multiple interfaces? I have two openvpn instances running on my server, one bridged (for upstream access to some client vpn''s so I don''t have to request the clients add new subnets to their routing tables) and one routed (for nailed

We switched over from a bordermanager firewall to a shorewall firewall. Some stuff is not working now. I realized that I had not created the route for the network that is not working however once I created it, it still didn''t work. Most of our network is fine however some pieces are not working. [Net] - [Shorewall] - [LAN] - [Cisco] - [Clients and servers not working] The firewall

hi, Please see the following text diagram: 10.0.15.0/24 --> 10.0.15.1 (f0/1) cisco router (f0/0) 192.168.0.5 <-- 192.168.0.0/24 --> 192.168.0.1 firewall --> internet I have some problem after added a static route in shorewall in /etc/sysconfig/network-scripts/route-eth0, the syntax is: 10.0.15.0/24 via 192.168.0.5 in 192.168.0.0/24 computers cannot ping or

Hi - I've recently bought a mediatrix 1204 and have had a complete nightmare getting it up and running with an asterisk@home setup. I know this isn't a mediatrix list but I'm at my wits end and the support with this product is atrocious. (mine was even shipped with firmware that was incompatible with the win32 software it came with so I wasted a day trying to work out why the SNMP

hello need a little help i have 2 NIC router with shorewall client PCs goes to internet fine with shorewall help. but i need to reroute traffic for one net via other gateway not ISPs. Gateway is on LAN NIC. 192.168.1.0/24 LAN x.x.x.x WAN router(shorewall) IP 192.168.1.15 i need to reroute traffic for 192.168.2.0/24 network to 192.168.1.1 gateway I know how to do it via route and iptables, bu just

Hi, I''ve been successfully using shorewall in our K12 school since the 2.x days initially on Mandrake and now on Debian. Because of that my config has got quite complicated. The firewall has a working MultiISP setup with four interfaces (I''ve renamed them with udev to easy their identification): lan-if, dmz-if, snt-if and dnt-if (one of the providers (the one on dnt-if) is a DSL

I''ve created a new document that discusses creating multiple zones accessed through a single firewall interface. See: http://shorewall.net/shorewall_quickstart_guide.htm Comments and corrections are welcome. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hi all, I'm running OCFS2 on two system with OpenSUSE 10.2 connected on fibre channel with a shared storage (HP MSA1500 + HP PROLIANT MSA20). The cluster has two node (web-ha1 and web-ha2), sometimes (1 or 2 times on a month) the OCFS2 stop to work on both system. On the first node I'm getting no error in log files and after a forced shoutdown of the first node on the second I can see

Following link is the question: http://tndo.no-ip.com/~wilson/separate.gif The cisco route already set static route from lan2 to shorewall, how can I set Shorewall route to lan2? Thank. _______________________________________ YM - 離線訊息 就算你沒有上網，你的朋友仍可以留下訊息給你，當你上網時就能立即看到，任何說話都冇走失。 http://messenger.yahoo.com.hk

And it looks like there''s a bug. I have a "firewall" with a single ethernet interface that splits into a network zone and a local zone and as a consequence I have a hosts file with the following in it: net eth0:!192.168.0.0/24 loc eth0:192.168.0.0/24 When I run shorewall start, I get an error, running in debug mode and capturing the output give me: + run_iptables -A

Hello I''m new to the list. I installed a vserver (http://www.linux-vserver.org/) on my gentoo server As network interface is used an alias (eth1:0) eth1 is the card of my "loc" zone. eth1:0 has an address from the same subnet from the vserver I can connect to eth0 but not to the internet. From my local net everything works fine. I have an entry in "mask" for eth1

Hi, I have reinstalled centos 6.2 x86_64 because it seems there is not xfs mod on i386. But i have found an orther problem. After the partitioning there is not any prompt to choice the type of server I want (minimal, web etc) So now I have a desktop installation... I want to remove xorg, gnome etc.. and an other bug.. i am unable to setup Eth interface ... with system-config-network-tui i cant see

I asked this question yesterday and got some really good answers that I will be able to use later. My problem was that I did not ask the question in an exact enough way. Here is what I am trying to do: I have a share on my Samba server called art. The directory is owned by the user root and the group tech doc. I have set the permissions like this on the directroy: drwxrwxr_x That is I want

Hi R users, I am working with the fda package but when I call the function pca.fd I obtain a message error, which I cann't identify. The error say That : error in assihn(mname,def,where), is not possible to add links to a blockade enviroment. The orther that I'm writting is: > cp1 <- pca.fd(ind.fd1,nharm=3) and before it I can to plot the functional data object ind.fd1. ?Have

I take the liberty of pasting the on-line documentation for package "wavelets", functions "dwt" and "wt.filter", pertinent to the wavelet/filter choice. While I apologize for my verbose messages with huge attachments, I encourage whoever loads packages to CRAN to take some minutes to reread the attached documentation. Usage dwt(X, filter="la8", n.levels,

Hello, i have had a terribe day today, why? because i have been so 4 or 5 hours trying to do work this and i have not finished it. I feel very pleased if anything can help me. I have two isp connections: eth0: dhcp ip1: 82.198.*.* gw1: 82.198.*.* and a router adsl in ip 192.168.0.253: eth1: static ip2: 192.168.0.254 gw1: 192.168.0.253 the same machine has 3 more networks cards but i am

Hi, I have a shorewall v4.0.7 installation on an older version of fedora. What is the proper way to add another network to the DMZ interface? Is it through virtual networks? If so, how is that done, given I''ve already designed the system around a single network on the DMZ? I have two physical interfaces on the firewall, with eth0 for external (192.168.1.0) and eth1 for the DMZ

Hello everyone... I'm trying to get up a testing pbx installation. Following instructions of what've read from the handbook and from asterisk's wiki, I wrote the dial plan as follows: [general] ; ; static = yes ;[globals] ; [default] ; exten => 0,1,Answer() exten => 0,2,Playback(fcopba1) exten => 0,3,Hangup() exten => *0,1,Answer() exten => *0,2,Record(fcopba1:gsm)

I have a DMZ (eth2: 10.0.100.0) and a LOC1 (eth0: 10.0.0.0) defined on my firewall. On one of the port on the switch serving LOC1 I have now a router and a switch feeding a bunch of computers with net=10.0.200.0. While I have defined a route to reach LOC2, I would like to define also a specific zone in order to assign different rules to it. Is it possible ? if yes, what is the syntax of the

i ask here after give up reading and following all the documentation.. i got 3 nic eth0:222.222.222.222 netmask:255.255.255.252 gateway:222.222.222.221 eth1:10.10.10.254 netmask:255.255.255.0 gateway:blank eth2:10.10.11.254 netmask:255.255.255.0 gateway: blank i''m running redhat9, and shorewall2.2.2 eth0 connected to dsl modem ( static ip ) eth1 connected to d-link router ( for