similar to: [*] shorewall requirements - which command

This is a rollup of fixes to two problems introduced in 1.4.10f and 2.0.3a: 1) Shorewall startup failed under Slackware 9.1. According to John Hill, this problem can also be corrected by upgrading to mktemp 1.5. 2) Shorewall startup failed if mktemp was not installed. If you are not experiencing either of these problems then there is no need to upgrade. The updates are currently available at:

The current Shorewall release model has the following characteristics: a) The last two major releases are supported. b) Only the latest major release is actively developed. c) Bug fixes are available for the prior major release but only against the last minor release. d) The last major release is advertised as the "Current Release". I''m thinking of switching to a model that

Javier Fernández-Sanguino Peña has discovered an exploitable vulnerability in the way that Shorewall handles temporary files and directories. The vulnerability can allow a non-root user to cause arbitrary files on the system to be overwritten. LEAF Bering and Bering uClibc users are generally not at risk due to the fact that LEAF boxes do not typically allow logins by non-root users. For 2.0

Fixes two problems: * Error messages regarding $RESTOREBASE occur during shorewall stop. * If CLEAR_TC=Yes in shorewall.conf, shorewall stop fails without removing the lock file. http://shorewall.net/pub/shorewall/shorewall-2.0.3c ftp://shorewall.net/pub/shorewall/shorewall-2.0.3c -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \

http://shorewall.net/pub/shorewall/2.0/shorewall-2.0.5 ftp://shorewall.net/pub/shorewall/2.0/shorewall-2.0.5 Problems Corrected: * If DISABLE_IPV6=Yes in shorewall.conf then harmless error messages referring to $RESTOREBASE are generated during shorewall stop. * An anachronistic comment about enabling mangling has been removed from shorewall.conf. -Tom -- Tom Eastep \ Nothing is

Hi !, I have this problem. On a Mandrake 10.0 server with all the updates (Kernel 2.6.3-15mdk, iptables-1.2.9-7mdk and shorewall-2.0.3a-1mdk), one of our internal users have to FTP some files to our external web server. I think we have the correct configuration and rules in shorewall, and have read the http://www.shorewall.net/FTP.html document. Still, our users can''t FTP to the

On 7/28/2016 3:41 PM, Fawzy Ibrahim wrote: > LSI SATA MEGARAID 95Q9 afaik, the megaraid cards are mostly all SAS, which support SATA drives, except very old ones were SCSI. Ok, I do see they had a series of MegaRAID SATA 150-xx and 300-xx cards, these were 64 bit PCI or PCI-X cards. 95Q9 does not appear to be a valid card number, 9240, 9260, 9280 are some pci-express SAS MegaRaid

Greetings, I'm trying to add a virtual nic to an existing and active vm and I'm getting this error: error: internal error: No more available PCI slots the cmd I'm trying to run is: virsh -c qemu:///system attach-interface --domain router --type bridge --source virbr0 --model virtio --config --live the lspci output within the vm is this: # lspci 00:00.0 Host bridge: Intel Corporation

Dear all: Im using shorewall 2.0.3a (debian) w/ ULOG. shorewall starts ok, and the firewall is running, but nothing is printed on the logs. I try, for example, to do a connection to a port that is opened on the server but closed by the FW and I get a connection refused. If I stop the firewall, this port is accesible from the outside. I think I''ve followed all the steps on

Hi I have 2nic firewall . I had to open some ranges of udp and tcp ports . I faced a problem that although all the ports are open Some functionality was not working . Any body used shorewall with H323 Voip traffic DNATed . Any help is appretiated . Thanks ----- Original Message ----- From: <shorewall-users-request@lists.shorewall.net> To: <shorewall-users@lists.shorewall.net> Sent:

Hello, I am looking into building a workstation using Xen to host several operating systems. Looking at the pci passthrough requirements of Xen4.1 on the VTdHowTo<http://wiki.xensource.com/xenwiki/VTdHowTo>page, I am a little puzzled with the fact that only Intel Core2Duo (with VT-x), Core2Quad, i7 and Core i5 (vPro Brand) CPU''s are supported while motherboards with the i55x0

Dear all, I am using shorewall 2.0.3a is this redirection rule forward all requests coming to IPADDRESS:80 to 192.168.0.5:80 Rule: DNAT net loc:192.168.0.5 tcp 80 - IPaddress Regards, - sree

Hello, I run Shorewall 2.0.3a backport on a debian woody box (with 2.4.18 homemade kernel). When I start shorewall I got the following errors. Oct 30 11:13:12 fwr modprobe: modprobe: Can''t locate module ipt_conntrack Oct 30 11:13:17 fwr modprobe: modprobe: Can''t locate module ipt_pkttype Oct 30 11:13:18 fwr modprobe: modprobe: Can''t locate module ipt_pkttype Oct 30

In order to do some custom stuff after starting shorewall, I found that I wanted a "started" hook, as well as the "start" one. This small patch adds it to the firewall script. I didn''t include a started script in the patch but it can be copied from /etc/shorewall/start. I hope this is useful to you, Nick

Greetings, I''m attempting to do gfx_passthru with the primary graphics adapter (03:00.0), passing it to a guest. I can unbind it from the host but when I fire up the guest OS my monitor loses signal from the graphics card and that''s that. The GFX card is dual DVI, I''ve tried both slots. Host is Linux 2.6.32.14-1.2.105.xendom0.fc12.x86_64, Guest is Windows 7. PC is an

http://www.intel.com/content/www/us/en/chipsets/5520-and-5500-chipset-ioh-specification-update.html Stepping B-3 has two errata (#47 and #53) related to Interrupt remapping, to which the workaround is for the BIOS to completely disable interrupt remapping. These errata are fixed in stepping C-2. Unfortunately this chipset is very common and many BIOSes are not disabling remapping. We can

Sorry for the lack of reproducible data, but this seems to be a problem inherent to my dataset and I can't figure out where the issue is. I have several data frames set up as a time series with identical POSIXct date formats. If I keep the original data in data frame format and merge them using base merge- everything is perfect and everyone is happy. If I transform the data frames to zoo

1: IOMMU: properly check whether interrupt remapping is enabled 2: AMD IOMMU: only disable when certain IVRS consistency checks fail 3: VT-d: deal with 5500/5520/X58 errata Patch 1 and 2 are version 2 of a previously submitted, then withdrawn patch following up after XSA-36. Patch 3 is version 3 of a patch previously sent by Malcolm and Andrew. Signed-off-by: Jan Beulich

https://bugzilla.samba.org/show_bug.cgi?id=5520 Summary: Rsync cannot copy to a vfat partition on kernel 2.6.25+ Product: rsync Version: 3.0.3 Platform: All URL: https://bugzilla.redhat.com/show_bug.cgi?id=449080 OS/Version: Linux Status: NEW Severity: major Priority: P3 Component: core

Hi everybody Im the IT Manager for a new call center and my bosses has assing to me a very dificult task i have to configure the call center using Hp 5520 thin clients, asterisk and some kind of dialer that allows outbound calls. I triyed using terminal services but it dind worked because the lack on the sound and the microphone do not work on the thin clients using terminal services, we tried