similar to: Suggestion on Specificity of REDIRECT

Hi! I want to redirect all http and https traffic from my LAN to squid in DMZ - transparent proxy. How do I do that? Regards, Sasa

Hello! We''re using Shorewall 1.4.2 and running into an interesting problem when we try to enable logging of traffic that netfilter classifies as "related" to an existing connection: there doesn''t seem to be a way to do it. Places where we''ve run into this problem are: (1) Attempting to log individual active or passive FTP data connections separately from

Hello all, It''s my first letter on this list, and, my English is not very well. Please take me indulgence for grammar/syntax and over erorrs :)) I have trouble for acl''s of ip range. But, acl for one host (with ip adress) work fine. Please help me for make work acl/find erorr in acl. Becouse I''m new shorewall user, I maked test configuration on Virtual Mashine

At Tom Eastep''s request, an informal Shorewall Documentation Support = Group (DSG) is hoping to relieve some of the writing and editing burdens = that come with maintaining and improving the Shorewall documentation. = The DSG welcomes and needs your suggestions and contributions about all = aspects of the documentation, including structure, content, references, = style, grammar --

Hello! We''re seeing a problem that I think is more of a Netfilter or kernel issue than anything to do with Shorewall, but I thought I would ask about it here, too, to see if anyone has suggestions. What we''re seeing is that, when we do a very fast port scan of a system on the other side of a firewall with Shorewall installed and various common rules, a majority of the denied

Hello I have a PC with 2 IPs publics IP1 in eth0 and IP2 in eth0:0 I want to do a redirection of IP2 to an other public IP IP3 in an other laptop (other network) - for all ports : IP2 ---> IP3 - for juste www : IP2:www --> IP3:www i tried many combination with shorewall-3.0.7-4, but no sucess no help from google, Thanks in advance Laurent

Hello Is it possible to add exceptions to a web redirection rule such as iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 0.0.0.0/24 -p tcp --dport 80 -j DNAT --to 10.10.10.1 the idea is to redirect all traffic to a web login page, and once authenticated (by an external program). add an exception rule to avoid the web redirection what would be the way to set up the default redirect rule on

Reed, Are you working on a grammar of the LLVM syntax or also on a full semantics? Steve Zdancewic's group at U. Penn. is working on a formal operational semantics for LLVM. It is partially complete and Greg Morrisett at Harvard is planning to build further on it. Regards, --Vikram Professor, Computer Science University of Illinois at Urbana-Champaign http://llvm.org/~vadve On Oct 20,

I''m beginning to believe that the use of the last column in the rules file to designate redirection/forwarding is too subtle for many users. For 1.3, I think I''ll do something like the following: Current rule: ACCEPT net loc:192.168.1.3 tcp 80 - all New rule: FORWARD net loc:192.168.1.3 tcp 80 Current rule: ACCEPT net fw::3128 tcp 80 - all New rule: REDIRECT net

I have router/server that I would like to ssh to from the net. In order to discourage brute force attacks I would like to redirect all connections on a non-standard port to port 22 on the router/server. If notice that setting up a rule REDIRECT net 22 tcp 4104 causes the firewall to open both ports 4104 and 22 to connections from the net. Is it possible to only redirect 4104 to the

Hi all, I have a group of public IPs 80.x.x.209-80.x.x.215. My satellite broadband router has .209 and my Fedora Core 2 running Shorewall firewall has one network card with IP .210 and the other with 172.16.0.1/255.255.0.0. All network PCs have a 172.16.x.x private address. I am new to shorewall and fedora/linux. I would like requests to public IP 80.x.x.211 to be redirected to internal IP

Hi list, I have the following problem: my boss and some other people on my lan want to use their ISP smtp to send mail when they connect from work lan, but, of course, their ISP smtp don''t allow relay when they aren''t at home. You can image my networks so: eth0 internet public ip eth1 local1 10.88.11.0/24 eth2 local2

Let''s move this to the Shorewall Development list.... On Tuesday 10 February 2004 03:14 pm, xavier wrote: > here is a patch to allow this : > |ACCEPT<10/sec:20>:debug fw lan:$ntp_servers udp 123 - - - - ntp > > a problem with the patch is that now the logprefix is mandatory. > i''m trying to debug it, but i can''t find the flaw. Also, with

Hi! REDIRECT lan 3328 tcp www - !192.168.0.0/29,10.0.0.0/16 This rules redirect all traffic web to proxy but howto exclude 1 ip from redirect ?? REDIRECT lan 53 tcp domain - REDIRECT lan 53 udp domain - And in this case howto exclude some ip ? Thx.

There's been a lot of discussion on this list about creating a formal grammar for markdown. I had a go at writing a [parsing expression grammar] for markdown. I used Haskell and John Meacham's Frisby PEG parsing library, but it should not be too hard to port the grammar to PEG libraries in other languages. [parsing expression grammar]:

We have the following setup. 192.168.0.1 NAT router 192.168.0.3 eth0 192.168.0.50 eth0:0 Two postfix instances. The first bound to 192.168.0.3 and the second to 192.168.0.50. The problem is that the NAT router can''t port forward the same port to two IPs. Is there any way to redirect outgoing port 25 from 192.168.0.50 to 192.168.0.3? -- Robin Lynn Frank - Director of

I''m a bit confused about the zones vs. rules regulatives. Scenario: I''m setting up an firewall for a friend with loc, net and dmz zones (and ofcourse the firewall itself fw). I need to be able to remotely administrate it, either through ssh or webinterface, because of the physical distance. lets asume my public IP at home is 80.80.80.80 Would it (if we focus on ssh connection

Hi There, Due to shortage computer, I need to install Apache to my Shorewall box (192.168.1.1) But the real web server is on another box (192.168.1.2) I tried to put rule: DNAT net loc:192.168.168.1 tcp 80 But everytime www connection coming in, it will hit my shorewall Any solution? Cheer Access Yahoo!7 Mail on your mobile. Anytime. Anywhere. Show me how:

Hi Everyone! I''m having problems to redirect an UDP port to an external server. My firewall have 4 interfaces: NET, LOC (192.168.0.0/24), DMZ(192.168.1.0/24), CMTC(10.0.0.0/24). On CMTC interface I have a direct connection to another network using a VPN link. I need to redirect an UDP port to on server (10.1.0.2) on CMTC zone using my local IP (192.168.0.1) for gateway. I will use

Has anyone written a grammar for LLVM for ANTLR. I mean an ANTLR grammar that parses LLVM instructions. Is an LLVM grammar available for any other parsing tool? Surinder