similar to: DNAT and ping

I have a setup with two Internet providers. One circuit (net0 == eth1) is used primarily for employees and tunnels to other sites. The other (net1 == eth2) is for the production machines that customers access. Everythung works in teh sense that packets get to where they are sent (mostly) but I recently I had a sniffer on the system and noticed a problem I cannot solve. traffic coming in

I''m having another little problem with my new firewall. I want outgoing port 25 from my mail server to appear on the address 65.223.121.227 so I created the file masq: eth2 192.168.124.18 65.223.121.227 tcp 25 eth1 eth5 eth1 eth3 eth1 eth4 eth1 == net0 == 209.189.103.196/27 eth2 == net1 == 65.223.121.237/28 eth3 == dmz0 eth4 == dmz1 eth5 == loc ==

I am considering replacing my old checkpoint and watchguard firewalls witha single Linux box using iptables and shorewall. I have two ISP''s (with separate routing tables), two DMZ''s, at least one VPN to a remote office, and a local trusted network. The configuration will look like: +----------------+ | | net0 ----------+ eth1

Hi, CONFIGURATION: the important part of my setup looks like that (smb.conf): [global] interfaces = net1 net2 net3 net4 net0 ; this is a router which acts as cross-subnet domain master + wins ; server local master = yes preferred master = yes domain master = yes wins support = yes dns proxy = no os level = 99 net1 - net4 are Win95, WinNT, Linux net0 are two samba-1.9.18p1 fileservers

I am migrating from my "old" 2.2.7 samba server to a newer server runnig 3.0.20a and everythig is working except the [homes] share. The server (FILE-CABINET) is a member of the domain, security is set to ADS and, as far as I can tell, kerberos is working. The program wbinfo returns a list of users and groups like it should. getent passwd returns first my local passwd file and then

Hello, In my C++ code, I generate my own domain XML file and I use virDomainCreateXML or virDomainDefineXML to launch my qemu VM. However, when I get to check which commands are sent to the qemu commandline, I find that libvirt has added so many extra parameters to the ones I have already set. How can I prevent libvirt from adding any extra parameters to the ones I originally defined in the

Hi, I am creating a guest with following description for interfaces in the xml using virsh create xml command. For some reason, the guest interface names in the VM dont match the names specified in the xml. Is there a way to make guest interface names predictable? Following is the qemu version on host dpkg --list | grep -i qemu ii qemu-kvm 1:2.11+dfsg-1ubuntu7.10

Hello Tom and all, Quick question: Is it possible to operate an OpenVPN server from behind a firewall? Is it as simple as setting it up and placing: DNAT net loc:192.168.10.20 udp 5000 - ipaddress -- Paul Slinski -o) Network Administrator /\ Global IQX, Inc. _\_v Global IQX is the leader in integrated e-business automation solutions for the group life and health insurance

Hi, I've got Samba 2.0.2 and a server NT4 SP3 with Seagate BackupExec 7.0. When I want to backup Samba with Seagate BackupExec, I get a message saying "Unable to connect to server, <F5> to retry", and then another one saying "A device specific error occured". I've read all the Samba archive about that subject, but I do not find any solution. I don't

On Mon, Oct 17, 2016 at 02:29:10PM +0200, Marina Danial wrote: >I have a predetermined set of commands that I want to launch qemu with: > >sudo `which qemu-system-x86_64` -m 4G $(IMAGE) -enable-kvm \ >-nographic \ >-net nic,model=virtio,netdev=net0,macaddr=$(MAC),vlan=0 \ >-netdev tap,id=net0,ifname=tap01,vhost=on,script=no,downscript=no \ >-net

I would like to add a rule allowing only the address 192.168.150.20 and the range of addresses from 192.169.150.100 to 192.168.150.150 in zone dmz0 to connect to two terminal servers in the local zone. Is there a syntax that can specify a range of addresses in the rules file? Do I have to enter each one separately? -- Stephen Carville Unix and Network Adminstrator DPSI 6033 W.Century Blvd.

Hi, I have a router that got its second link. I was trying to do load balancing, but i can not get it to work properly. Just one link works at time, and is always the second in the command ip route add default table 222 proto static. Am I missing something? My script is below. I am using Debian, tried with kernel 2.6.19 (my compilation) or debian''s one (2.6.18-3-486), same results

I have a pretty straightforward shorewall (v 2.0.12) setup in my Phoenix office. IP addresses on the firewall eth0 172.16.10.249 eth1 12.47.198.100 eth1:1 12.47.198.108 eth1:2 12.47.198.101 eth2 172.16.11.249 interfaces: loc eth0 detect net eth1 detect blacklist dmz eth2 detect vpn1 tun1 192.168.124.255 zones net Net

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Over the past weekend, I added SPF screening on the MTA at shorewall.net. SPF is a mechanism for a domain to use DNS to publish a list of those IP addresses that are used to send legitimate email from that domain. A receiving MTA can use that published information to determine if email from a domain is being sent through an MTA belonging to that

Hello Shorewall gurus, I have a dilemma with a public server. I want to migrate the current public server over to a new machine behind the current server''s firewall (shorewall 1.4). I have included a diagram below to help explain the target network I am working toward. I have read the shorewall online documentation and though I have used Shorewall the past 4 years in the current

Hello list, I am in the process of switching from IPCOP to Shorewall s the firewall for our small office. I very much like the fact that Shorewall runs on top of the same OS (openSuSE 11.4) that I run on the server and my desktop. Our setup is fairly straightforward. We have 8 static ip addresses from our ISP, which provides a cable modem and a Cisco 800 series router. The ip addresses are

I have been trying to get DNAT to work and I actually have succeeded too, however, not how I thought it would work when reading through the documentation. 1. No matter what I do I cannot get DNAT to work unless I have an entry in eiter the nat or the proxyarp file. Is that really how it''s supposed to be? I can''t find anything about it in the documentation. 2. Also, in the

I have some hosts in a DMZ zone with proxyarp. In my local zone I have a host to which I DNAT. I have discovered that I can reach the host in the local zone by attempting to connect to the fw (As expected) or ANY proxyarped host in my dmz zone (as not expected). Is this normal ? (I''ve just discovered that actually the dnated host answers to requests sent to any IP routed to my host!)

Is it possible to allow two Linux computers to browse each other in a manner similar to the way a winbox and browse a Linux box with Samba? Ya know, like the network neighborhood thing, not the smbclient get put thing? Thanks

Hi, We've run into a problem with libvirt 1.1.2 and are looking for some comments on whether this is a bug or design intent. We're trying to use migrateToURI() but we're using a few things (numatune, vcpu mask, etc.) that may need adjustment during the migration. We found that migrateToURI2() mostly works if we use XML created by copying the domain XML from the running instance