similar to: Problem : 5 Public IP Address

Hello Tom, I seem to be missing the big picture here.. can you shed some light? I have a three interface setup loc,dmz, net I have 4 global addresses that I want to attach to eth0 (net) address 1 - fw address address 2- I want to forward to a (loc)router that uses dynamic dns vpn (gre) (Yamaha router) address 3 - web server/Bind9 (dmz)forward port 80,443,53 address 4 - mail server (dmz)pop3,

i''ll need to have a virtal server, but why i can do this?

Hi, I had set rules so that my client can only visit few sites instead of the whole net. My question is, how can I allow my client to activate it''s product key and also to run windows update? One more thing is, can I use domain name in the rule config? if yes, can I put just microsoft.com to refer to aaa.microsoft.com bbb.microsoft.com? Please advice

Hi, im running shorewall 2.0.16 with centos 3 (iptables v1.2.8), everything is working fine for several days, i have configured a masq lan and all the outgoing traffic is ok, but now i want to redirect (port forward) the external web traffic to an internal machine, somethig like this INTERNET ---------> SHOREWALL -------------------> INTERNAL_MACHINE [public

Hi all! I posted earlier about the proxy arp configuration = http://shorewall.sourceforge.net/shorewall_setup_guide.htm#NonRouted, = and was probably not sufficiently knowledgeable on the subject. I''ve = gone through a bunch of documents on proxy arp, subnetting with proxy = arp and the documentation at shorewall, and have come up with a setup = that would be perfect for the job at hand

Hi everyone, I have a question regarding the default gateway for hosts on DMZ zone. I moved servers from parallel to the DMZ (outside the firewall, directly connected to I-net) to inside DMZ. The default gw for these servers was the DSL router(bridge) of my ISP. What should be the default gw (for the hosts inside the DMZ), when hosts are inside the DMZ now - still the DSL router (external

Hi, I am using Shorewall in Adamantix. At the moment everything flow fine, my question is that how can I filter the access by computer mac address, I had read the documentation maybe I am ''stupid enough to spot the guide, if so please show me''. What is the rules line if I want to 1. limit ~01-01-01-01-01-01,~02-02-02-02-02-02,~03-03-03-03-03-03-03 to access 202.202.202.202

Hi, At the moment I am controlling my LAN client access to the Inet by their MAC address. Currently I am putting their MAC address in the rules file - now the number of the PC that I want to manage is getting more and more and it is not practicle to do this way anymore. My question is, how can I have their MAC address in other separate file? Regards http://www.debian.org/consultants/#Malaysia

Hi there, I''ve read Routing on One Interface, and Shorewall and Aliased Interfaces docs but I''m a little confused, and all my test attempts have mostly failed. Here is my setup: CentOS 4.2 ShoreWall 3.0.2 My server has a subnet 192.168.50.0/29 routed to it via 192.168.1.2. Currently 192.168.1.2 is setup on eth0. With no ShoreWall involved routing seems to work if I just setup

Hi! I''ve been searching the net for information about this topic, but I can''t find anything relevant to my problem or I don''t understand the answer completely. Please enlighten me... :-) I''m trying to replace a Cisco PIX firewall with a Linux Shorewall box. Today the users behind the Cisco FW is on a NAT-network and in the same network there are a couple of

Hi all, I need some help, advice or whatever you can explain to me because I haven''t got a clear idea about how to do the following assembly, and I''d be very grateful if I got some help from an expert like you. I''m trying to build a system which represents the following: I''ve got a hosts unit (host1, host 2, ...) which have IP in the network 192

Dear, All I have 4 ip public in my router 1. For Connection to gateway 2. For gateway Wireless Lan (with ip public) 3. For DMZ 4. For Downtream ISP ------------------History I have two way for connection Internet 1 by Leased Line 128 Up/Down and 256 Down With DVB and i have client with wireless Network. I need Client wireless network can use DVB Network for connection with port 80. What can i

List, I have a server Co-Located, it has multiple ip''s "6" and I was wondering if there was something I should look for before emplementing Shorewall. I have been using Shorewall on my lan/wan for some time now, just never with Virtual ip''s to the Intrernet! System is: WhiteBox 3.0 As I said in body 6 ips eth0,eth0:0 and so on . Any help is appreciated! Brian

Hi, I had saw a few patches to be applied in order to get the firewall to block based on the application. At the moment I am having problem to block ICQ and Yahoo Msgr. Even I only open a few ports like, the ICQ still able to connect through port 80. Any add-in module for shorewall or anyone able to do this? Regards __________________________________________________ Do You Yahoo!? Tired of

Hi, I have been running Shorewall (v 2.0.15 nowadays) for some time to act as a firewall between my LAN and my ISP where I have a fixed IP WAN address. Recently, I got an allocation of a /28 range of public IPs to do a DMZ. The ISP tells me that they are routing the /28 range via the existing WAN address. The WAN address is not part of the /28 range. This setup should be fairly simple, from

Hi List, This is my first posting, hopefully you guys dont mind for my newbie questions that I''m gonna post. And please excuse my English :) First of all let me explain my current situation. My servers are hosted in a datacenter with currently 6IP''s address assigned to me by my ISP. Each of the servers has its own internet IP address which the servers are running on Web server

I''m working on shorewall_setup_guide.htm -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hi, I have this case: My Shorewall is a internet gateway: (fw) eth0 -> 200.209.100.0/30 (loc) eth1 -> 192.168.0.0/24 (dmz) eth2 -> 200.209.100.8/30 In the DMZ, I have another linux, with a web server too. eth0 -> 200.209.100.10/30 - running Apache at port 1700 eth1 -> 192.168.0.0/24 My problem is: I need to make a NAT, from my local

I have a senario I hope one can help me out with... I have a range of Public IP Address 203,xxx.59.106-114 I have 4 internet servers that need to communicate to internal servers/clients 172.16.x.x/24 using port 80. These are Windows2000 servers (no software firewall solution) I have a 2nic shorewall device at present and ,as you know, I can only NAT 80 to one internal server. My immiediate

Hi. I have a Linux box with two network interfaces. The local interface has an alias so it can listen to two (completely) different subnets. I need to configure a Firewall and a DHCP server in the same machine. I have: eth0 > net eth1 > loc1 eth1:1 > loc2 If my DHCP server will use eth1 IP address (main IP address for that interface), How do I specify the ''dhcp'' option