similar to: Rules by Mac Address

Hi, At the moment I am controlling my LAN client access to the Inet by their MAC address. Currently I am putting their MAC address in the rules file - now the number of the PC that I want to manage is getting more and more and it is not practicle to do this way anymore. My question is, how can I have their MAC address in other separate file? Regards http://www.debian.org/consultants/#Malaysia

Hi, I had set rules so that my client can only visit few sites instead of the whole net. My question is, how can I allow my client to activate it''s product key and also to run windows update? One more thing is, can I use domain name in the rule config? if yes, can I put just microsoft.com to refer to aaa.microsoft.com bbb.microsoft.com? Please advice

Hi, I had saw a few patches to be applied in order to get the firewall to block based on the application. At the moment I am having problem to block ICQ and Yahoo Msgr. Even I only open a few ports like, the ICQ still able to connect through port 80. Any add-in module for shorewall or anyone able to do this? Regards __________________________________________________ Do You Yahoo!? Tired of

I am missing a tiny detail on understanding a simple port forward: I want to forward just like the FAQ listed, via #ACTION SOURCE DEST PROTO DEST PORT DNAT net loc:192.168.1.3:22 tcp 1022 Which works just fine. Now I also tried this following type of rule, which I thought would work, but it did not. #ACTION SOURCE DEST PROTO DEST-PORT

Hi, Currently I am looking for possibility to have a no-config network enviroment, where in this local area network, we don''t need to set any ip to a computer, it doesn''t matter the computer already have a fixed ip/sm/gw (even doesn''t belong to the enviroment). When ever a browser is ''clicked'', the computer will able to get connected to the internet.

Hi! Maybe I miss some info, in the previous threads, besides than webmin - shorewall, I was made to known that there is another web-gui to manage shorewall. Where can I find it? Thanks http://www.debian.org/consultants/#Malaysia --------------------------------- Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses.

Hi, I am having problem in getting my fw to connect to the net, I had set allow fw net in the policy. I suspect maybe shorewall having problem because I have 5 public IP alias to my fw, which is eth0, eth0:1-eth0:4. Because before I add more ip to this interface my fw able to connect to the net. How can I set one IP to be bind to this fw, or I had to change the rules from fw to fw:w.x.y.z? One

Hi folks Im currently doin firewall project.. the scenario is like this.. my application server open port number 3079 the server ip is 202.188.0.132. and now the port can be accessed from everywhere. Now i want to block all the everywhere accessed. But my problem is, the application will be accessed by few locations that doing transaction with the application server. and the said locations are

hi all, i recently subscribe for an isdn and terminate it on a 3825 router. i used it as a sip trunk for my asterisk. i'm a newbie when it comes to ISDN. and i've been experiencing some issues: 1. Call Hangup: When hangup is initiated from the outside the extension (softphone/ip phone) does not hangup, is this normal? shouldn't asterisk hangup the extension as well when it

http://shorewall.net/pub/shorewall/2.3/shorewall-2.3.0 ftp://shorewall.net/pub/shorewall/2.3/shorewall-2.3.0 WARNING: This is a development release and may be unstable New Features in version 2.3.0 1) Shorewall 2.3.0 supports the ''cmd-owner'' option of the owner match facility in Netfilter. Like all owner match options, ''cmd-owner'' may only be applied to

Dear all, I am getting the below errors when using asterisk. I am using sjphone for testing purpose. Below are the setting for sip.conf and extension.conf When i dial the number it rings on the remote telephone. but after ringing 1 time it will disconnect. Can anybody tell me what does this error means and the how to solve this issue. Thanking You, Joel sip.conf [general] context=default

I made an atempt to run snort_inline and shorewall on the same system but I could not get snort to see the packets. Maybe someone with a little more iptables knowledge could tell me what I''m doing wrong or if its possible to have the systems setup so that it places packets that the firewall would allow into QUEUE. After setting up and starting shorewall I then issue the following

It is with regret that I announce that Shorewall development and support is officially ended. Sean''s post has finally driven it home to me that in the long term, trying to support a project like Shorewall is impossible for a person of my personality and age. Sean -- please believe that this isn''t about you or your post -- your post was just the proverbial straw on this old