similar to: Linux choices ?

This is my situation : FTP/Webserver ------| Mailserver ---------|-------Cisco 827 RTR-----Internet DB App. server -----| I want to do the following : FTP/Webserver ------| Mailserver ---------|------BRIDGE------Cisco 827 RTR-----Internet DB App. server -----| The internet connection is 3mbit/384kbit ADSL connection, with 1 fixed address. The cisco router is acting as a router with NAT. Some

Hello, I''m a very happy user of shorewall but I have found a problem or maybe a misconfiguration I made which I can not resolve. I use a fairly large blacklist based on probes, nimda & codered attacks, proxy & relay probes etc. The only problem is that I want to block incoming trafic on all ports FROM a block but it does also block a httpd, ping etc TO a ip in a block what I do

I''ve set up shorewall with the two-interface mode. pc #1 eth1 ---> ppp0 ---> Internet eth1: 10.10.10.254 eth0: 10.10.10.1 > via a crossover cable pc #2 eth0: 10.10.10.2 (gateway=10.10.10.254) I am able to surf the net with pc #1, but pc #2 is completely cut off from pc #1 and the net. I am also unable to ping from and to pc #2.

Hi, I have a PC that acts as a VoIP gateway using an internet telephony provider to make phone calls.. Data between me and the provider will always be from one IP address on my internal network to the provider.. I have a 1Mbps/256Kbps ADSL line and the voice stream is highly compressed requireing only 30Kbps of bandwidth.. The problem is that when my Mozilla Mail client polls for mail or

How does one interpret the mac addresses in the log which seem to have 14 segments... Example, this appears in the log... 00:40:c7:2e:09:c0:00:01:64:4a:70:00:08:00 Yet I can''t find that in the arp table norcomix:~ # arp -an ? (192.168.2.148) at 00:10:4B:6A:AE:E7 [ether] on eth1 ? (192.168.2.149) at 00:D0:B7:1D:F2:F2 [ether] on eth1 ? (24.237.19.16) at 00:10:DC:67:BA:80 [ether] on eth0 ?

Whilst configuring another shorewall firewall router for another site, I must have made some totally newbie error.... While directly on the cable modem, it works great. But when placed on the LAN side of my existing Shorewall box, the NEW shorwall box could not ping, or look up dns or anything else. If I shutdown shorewall (clear) in the NEW box then it could surf the net and ping etc. When

Hola and thanks for any help in advance I installed mandrake 9 a few days ago and wanted to set up some additional rules to shorewall, bu i failed :) What i want to do is basicly route any incomming udp and tcp packets on port 4665 to a workstation behind the router. router with mandrake 9, eth0 (192.168.0.1) internal net, eth1(10.0.0.0) connected to dsl modem and gets a dynamic ip

Since you''ve started signing your email, Tom, my machine can''t verify your sig. Where are you publishing your key? -- John Andersen - NORCOM http://www.norcomsoftware.com/

Hello folks, Today I have picked up samba again after years of neglection :) I want to be able to integrate our linux boxes in out windows domain. There are 2 reasons for this. The first reason is backup purposes. I want to be able to access some directories on my unix boxes to copy/backup files to my windows boxes. Until now, the linux boxes gzipped and ftp'd the zip files to the windows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 DeveloperCube is a new project started by veterans of the web development industry. We are proud to announce that we are now the Official Shorewall Support Forum. We are an online community offering discussion geared towards web developers, designers, and administrators of all skill levels. There are topics ranging from how to market your website,

Happy New Year to everyone: I have followed the instructions at shorewall.net/samba.htm. I''ve restarted the samba server, shorewall, rebooted, everything. And from my network I cannot browse available shares on the firewall (192.168.1.1) telnet 192.168.1.1 138 fails with connection refused, which I don''t understand. All other open ports respond with a string. -- Philip

Begging indulgence of the list - asking here because due to the higher likelyhood of getting an answer... I have an application that often loses connection from one machine to another when one (or more) of the machines has particular brands of 1gig nics, but which runs rock solid when on 10meg nics and some 1 gig nics. The application senses (falsely) that the connection has been shut down

hi: Just a litle update: 41/8 allocated to AfriNIC (APR 2005). 73/8 allocated to ARIN (MAR 2005). hope it helps.

The basic functionality of Shorewall 2.2.2 works fine with the soon-to-be-released SuSE 9.3 (I have an early copy). I''ll be trying it over the weekend with more complex configurations involving IPSEC and OpenVPN. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \

Thankyou the information provided was informative to say the most. Quote "Shorewall Masqurading made simple ?" I will not comment any futher about my simple question as I see nothing but backtracking information. Maybe all the usless information is somthing to do with the below, Linux how it works! First you must remember that 98% of linux programmers are kids or they have been

Hello all, I don''t want this to be a tome'' but felt a comment was in order. Many new users (Linux and Shorewall are no different) are more apt to not read the manual(RTFM) as they view it as "Taking to long" and don''t understand it''s relevance in their particular scenario. This is unfortunate in the case of Shorewall. As the documents are not only

Begging indulgence of the list - asking here because due to the higher likelyhood of getting an answer... I have an application that often loses connection from one machine to another when one (or more) of the machines has particular brands of 1gig nics, but which runs rock solid when on 10meg nics and some 1 gig nics. The application senses (falsely) that the connection has been shut

Since RedHat announced the discontinuence of RedHat Linux, I''ve been diversifying shorewall.net. The systems here now are as follows: a) Firewall -- Debian testing (Installed using the Sarge online installer). b) File Server -- SuSE 9.0 Professional c) Desktop -- Mandrake 9.0 d) Web/Mail -- RedHat 9.0 I think that I will wait until I can afford to build a new

Tom, or whomever reads this, when I say disconnect I mean close out IE6, sorry for so unclear on this point. My IP address never changes unless I unplug the modem. I have had the same IP address for ... well since I had to reset it to hook it up to my Linux box.which was 2 weeks ago. If I set DHCP on my eth1 interface that will contradict the static address I have assigned to it,

I just installed Shorewall for the first time and had no working knowledge of iptables other than a couple magazine articles prior to this time. The use of the QSG is fresh in my mind. It was the single most helpful guide of any on the site. Comments: 1) The /etc/shorewall/masq section shows the use of the third column but then says you don''t need it if you have a dynamic ip. Its