similar to: FW: DNAT and masq problem with kernel 2.4.23

I have a debian woody machine acting as a firewall for a small network. I am trying to do a simple DNAT to port 80 on the protected webserver and masquerade all traffic from the protect subnet outbound. After having read the FAQ and various posts regarding problems with DNAT I''m afraid I''m no closer to a solution. Based on the output from "shorewall show nat" I

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello all, im using shorewall 2.2.1 on a CentOS 4, im newbie with shorewall, just testing it i created a dnat rule like this #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ # PORT PORT(S) DEST LIMIT

Hi all, net : internet zone dmz : DMZ zone Lan : local network zone in 1.4.6c this rule : DNAT all lan:10.0.0.1 tcp http - 192.0.0.1 does generate the following iptables rules in nat table : Chain OUTPOUT DNAT tcp -- 0.0.0.0/0 192.0.0.1 tcp dpt:http to:10.0.0.1 Chain net_dnat DNAT tcp -- 0.0.0.0/0 192.0.0.1 tcp dpt:http to:10.0.0.1 Chain dmz_dnat

I''ve had some issues with my network, and I''ve had to reconfigure my Gibraltar CD. It runs shorewall 1.4.8, and I have a 2-interface setup, so I downloaded the relevant files from the install page. Masq and such works, but I''m having a problem with my port forwarding. It works for port 22, but it doesn''t seem to work for any other port. I''ve turned

Hi list, This is my first post there. CONTEXT : -------------- I have a little lan behind a shorewalled box (internet) -- NET_IP [gateway] LOC-IP -- (lan X.Y.0.0) internet -> net zone connected to the gateway via a ppp interface lan -> loc zone connected to the gateway via eth1 NET_IP and LOC_IP are defined in shorewall params file GOAL : --------- i want to forward http and

I removed my r-base package and installed it through the guide in Cran mirror but I am still getting the same error. Here is the output to the command above: r-base-core: Installed: 3.4.4-1xenial0 Candidate: 3.4.4-1xenial0 Version table: *** 3.4.4-1xenial0 500 500 https://ftp.ussg.iu.edu/CRAN/bin/linux/ubuntu xenial/ Packages 100 /var/lib/dpkg/status 3.4.3-1xenial0 500

Th output to which R : /home/bzamanlooy/anaconda3/bin/R The output to R --version: R version 3.4.3 (2017-11-30) -- "Kite-Eating Tree" Copyright (C) 2017 The R Foundation for Statistical Computing Platform: x86_64-pc-linux-gnu (64-bit) R is free software and comes with ABSOLUTELY NO WARRANTY. You are welcome to redistribute it under the terms of the GNU General Public License versions 2

I just installed R 3.4.4 and Rstudio on my computer with the OS Ubuntu 16.04. Rstudio detects the Installation of R and works normally. However, trying to run R in the terminal I get this error: *Fatal error: unable to open the base package* I have trying setting the R_HOME using: *export R_HOME=/usr/lib/R* However it did not work. Any idea how to resolve this? Ps. I have used r-bloggers

Hi, Sorry, not an experienced shorewall user, this is my first basic setup. This starts to drive me crazy. I wanted to use DNAT to forward port 33890 to an internal machine (windows) port 3389. To reach my workstation when I''m not home. In my rules : DNAT:debug net loc:192.168.0.11:3389 tcp 33890 - pub.lic.ip.add #SECTION BLACKLIST #well known port scans DROP net

Hi I have this configuration: eth0 Link encap:Ethernet HWaddr 00:C0:F0:54:DC:1E inet addr:10.10.10.166 Bcast:10.10.10.167 Mask:255.255.255.248 inet6 addr: fe80::2c0:f0ff:fe54:dc1e/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1738708 errors:0 dropped:0 overruns:0 frame:0 TX packets:1538724 errors:0 dropped:0

I have registered a project with Sourceforge to produced a Webmin module for Shorewall. http://sourceforge.net/projects/webmin-shorewal/ Anyone interested in participating please email me at enemyofthestate at users.sourceforge.net I am still learning the interface but I think I need your Sourceforge Nym to add you as a developer. -- Stephen Carville Unix and Network Adminstrator

I have a script for dual internet connections that does this: ------------------------- #!/bin/bash IF1=eth1 IP1=203.219.190.106 P1=203.219.190.105 P1_NET=203.219.190.104 IF2=eth2 IP2=220.245.224.46 P2=220.245.224.45 P2_NET=220.245.224.44 IF0=eth0 P0_net=192.168.0.0 TABLE1=inet1 TABLE2=inet2 ip route add $P1_NET dev $IF1 src $IP1 table $TABLE1 ip route add default via $P1 table $TABLE1 ip

I have a lan with shorewall running as firewall and two local machines, where 10.1.1.2 and 10.1.1.15 are two internal mail servers and where 124.124.124.124 and 123.123.123.123 are the external IPs for the mail servers. The two mail servers need to communicate with each other via smtp (for sending mail from domains hosted on one to the other) but its giving issues. Specificaly when one server

Thanks Tom Sorry, I was wrong, this is the correct question... I have this configuration: | Email Server 192.168.0.253 | ___|___ Port 25 SMTP ___|____ ____ | LAN |-------------------------------------Eth1

I''m getting subj trying to run linux-iscsi-4.0.2 on domain0. I tried xen-2.0.6, xen-2-test and xen-3-devel. The same results. I found similar complaints regarding this problem like below: http://www.ussg.iu.edu/hypermail/linux/kernel/0503.1/1622.html http://www.ussg.iu.edu/hypermail/linux/kernel/0503.1/1621.html Not sure if it is xen or linux-iscsi related bug. Any ideas how to cure it

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=107 ------- Additional Comments From laforge@netfilter.org 2003-06-30 17:10 ------- This is strange, we've never had a bug report regarding this issue. btw:I'm running 2.4.20 with prixm2 and hostap driver as a gateway in my home, too. regarding your router: can you configure it to use a serial console (if it has no

I tried to the new GATEWAY option in /etc/shorewal/interfaces file but it didnt work. My network setting consists of 2 ISPs line and i would like to have eth0 to connect to for example, 192.168.15.254 while eth1 connected to 192.168.33.254. I restarted shorewall and nothing is wrong. However, the traffic still goes to the default gateway as shown in "route -n" command. For example, i

I have been approached with a question that I am not sure about... A Shorewall system has only one interface, with a public IP-adress. The same system is the endpoint for a few OpenVPN-tunnels. Is it possible to add an aliased IP to the interface, and NAT traffic to a OpenVPN-endpoint? The endpoint is on 10.4.2.3 and the Shorewall-box has an interface of 10.4.2.1.

[root at host ~]# yum clean all Loaded plugins: fastestmirror, protectbase Cleaning up Everything Cleaning up list of fastest mirrors [root at ost ~]# yum search libcli Loaded plugins: fastestmirror, protectbase Determining fastest mirrors * base: centos-distro.cavecreek.net * elrepo: elrepo.imt-systems.com * extras: ftp.ussg.iu.edu * rpmforge: apt.sw.be * updates: mirror.nandomedia.com base

Hello, well, i have a weird problem: i mounted a share, shared on winxp, on my gentoo linux box via mount -t smbfs.. everything seems to work - seems. When i started to backup files with rdiff-backup, i noticed that it reported about new and deleted files, yet those were never deleted and are still present on the source share on the windows machine. I thought it might be a bug in