similar to: UPnP & Shorewall

Hello Tom, I tried the new UPnP support of shorewall, olny to stumble upon a LinuxIGD bug. Specificaly, the UPnP chain is read as UPn from the upnpd.conf . I double checked it, there some bug in the upnpd, it doesn''t process 4 lettered names correctly. Could you change this chains'' name to something a little longer? -- Costas Cavouracis <cca@freemail.gr> My PGP keys:

I don''t know what is happening, but every 36 hours or so I''ll go to ssh into my server and find that I can''t connect on any of the outside services. I then can connect into the box using a serial connection and find that shorewall reports that it is not running and the iptables are in some kind of default state which looks nothing like what I set it up with shorewall

Lorenzo Martignoni at Univesita` degli Studi di Milano in Milan has established a mirror of the Shorewall web site. http://italy.shorewall.net http://cert-it.dico.unimi.it/shorewall Thanks Lorenzo! -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \

http://shorewall.net/pub/shorewall/Beta ftp://shorewall.net/pub/shorewall/Beta -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

I''m starting this on the users list because it''s not impossible I''m getting something wrong :-) However, the search functions on www.shorewall.net do not seem to return any hits any more. I am sure that they have done in the past. Over the last couple of days I''ve tried searching both the site, the lists, and both, and have had no hits - even for single word

Hi! I installed shorewall shorewall-2.1.7-1 on a newly installed box. When using 1.4 versions I could enable shorewall in ntsysv, now shorewall doesn''t show up in ntsysv? I am running shorewall on a RedHat Enterprise Linux rebuild (www.taolinux.org). Is this a bug or a feature?

This article describes how to implement "Port Knocking" in Shorewall. http://shorewall.net/PortKnocking.html -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key

Hello, Mike Noyes and myself have populated http://wiki.rettc.com with the shorewall FAQ. This wiki is running MediaWiki, http://www.mediawiki.org. Currently, a couple items are not complete. I have just begun a heavy semester of mathematics/physics studies, and do not have much time to give to this. But, it is online, and seems to be stable. I will keep an eye out for abuse, and limit

Hi all well im using two interfaces.. e.g: eth0:202.188.9.2 is WAN and eth1;192.168.1.1 is LAN.. when im in LAN let say from 192.168.1.9 i cant open WAN IP address e.g: 202.188.9.2 .. why? how to set this?... i only can open 192.168.1.1 .. if possible i want to have both accessable.. thanks rgds amir

Hi All, i am trying to install Shorewall 2.0 on debian 3.0. But when i try apt-get i am getting older version i.e. 1.2. Can someone send me a pointer on how to install shorewall latest version on Debian 3.0 please. i searched google and on this site but could find any. i am not in this list, pl include me in ur replies. Appreciate ur help, -Balaji

Ok -- I''m wearing the brown bag tonight (I''ve airmailed one to Tuomas as well :-) ). The IPTABLES patch had some problems when IPTABLES was not set in /etc/shorewall/shorewall.conf. Beta 6 fixes those (I hope) and also corrects a rather obscure problem with "shorewall add" when the "mss" option appears in /etc/shorewall/ipsec. -Tom -- Tom Eastep \

I installed Shorewall 2.2.2 on a vanilla install of Fedora FC3 I have not udated the kernel yet. After some fault finding I went back to the 2 interface example configuration files for 2.2.2. In shorewall.conf I have to specify the path for IPTABLES="/sbin". If I leave this commented out then shorewall reports that it cannot find iptables. When I have this line in shorewall will

http://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-Beta2 ftp://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-Beta2 Problems Corrected: 1. The "shorewall check" command results in the (harmless) error message: /usr/share/shorewall/firewall: line 2753: check_dupliate_zones: command not found 2. The

Hi, I need to running snmpd at shorewall gateway (1.4.10g). How to make the rules necessary to do it ? I have 3 interfaces, eth0 (public), eth1 (private) and eth2 (dmz). When I runnig mrtg, I have this message: --- cfgmaker gw-host@localhost > ~netbox-sp/eth0.cfg --base: Get Device Info on gw-host@localhost: SNMP Error: no response received SNMPv1_Session (remote host:

What speaks for it and which speaks against it that Firewall and squid run on the same machine? Regards Menki ------------------------------------------------------- All the advantages of Linux Managed Hosting--Without the Cost and Risk! Fully trained technicians. The highest number of Red Hat certifications in the hosting industry. Fanatical Support. Click to learn more

Hi! how can I mark ack packets with shorewall 2.x? (In 1.x I have done it with own rule in common file) TiA CU

Hi I have recently reconfigured my system to a Bridge based architecture on the basis that I have an ADSL Modem/Router with a Public address on the Wan side and a Private address on the Lan side. I am running a Debian based system kernel 2.6.7 and the Bridging software is installed and working correctly, including startup etc. The problem that I have is in "shorewall start" The

Hello, I would like to run other services like messaging services on my firewall machine too. Does it make sense to run shorewall, openvpn and the pppoe package in a chroot jail? And is it possible to run these programs as an other user? Ciao Hugo

Ok here are all the information the website said I should include first: [root@residents root]# shorewall version 1.4.8 [root@residents root]# ip addr show 1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 brd 127.255.255.255 scope host lo 2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100

My company has been living off of a relatively slow DSL connection for the last few months. We still need this connection for the static IP''s, but have recently added a cable subscription to bump up the speed (we''re too far from the CO to increase our DSL speed). I''ve been messing with shorewall for awhile, but can''t for the life of me figure out how to