similar to: masq problem

Dear all, Does Shorewall support for time limitation? for example I want to create rule for someone only has access internet between 7.00am - 11.00am? How to configure like that? please give me suggest Regards

I have a firewall with 2 connections to the internet (eth1 and eth2) and one LAN interface. on the LAN interface, the users can connect via PPTP. those authenticating via pptp shall be masqueraded over eth2, those not authenticating should be ordinary masqueraded over eth1. as from the archives I took the configuration like in FAQ32, but this doesn''t work with the ppp+ interfaces. I

Hello, I have the go ahead to fix documentation. For starters I will clean all extraneous crap from the markup. Then fix any errors and typos. If anyone sees any gramatical errors or typos or needed clarifications or expansions or whatever, please post them here. Or additional FAQ entries, etc, all will be considered. I hope to keep most of this conversation on the shorewall-devel list. Any

Good Morning Mike, I''m finding that when I load a document, XXE is blindly removing all "superfluous" white space from "programlisting" elements. This of course is leading to a real mess (check out the FAQ on the web site :-( ). What can I do to avoid this? -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \

Everyone, Progress was slow today. I started out well, but then I ran into Documentation.htm. Progress slowed considerably, as I analyzed the document structure. I''m up to /etc/shorewall/hosts Configuration. I hope to finish Documentation.xml by tomorrow evening. Converted documents: 6to4.xml CorpNetwork.xml FAQ.xml Please post feedback, if you see any problems with the converted

I''ll take this one next. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Of the remaining HTML files in the Shorewall-docs/ project, the only ones that I want to convert to HTML are: standalone.htm two-interface.htm three-interface.htm Paul -- while file(s) are you working on? -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hiya, > Ok with me -- if I get too frustrated with DocBook, I''ll just start > editing the HTML again. > > -Tom > Well the fact that VIM is supported by Docbook is a plus .. But I still think the Wiki idea is well .. Lets get the doc at a CVS and Docbook stage .. Walking before running .. plz plz .. Francesca PS: I have thrown Windoze out the Window here (Pardon The

Hi folks, Last night and this morning i''ve hacked up a quick web site for coordinating our development work based on Drupal (http://drupal.org). You can find it at: http://shorewall.dyndns.org I''ve put a few ideas in there - feel free to use the comments or sign up for an account and create your own pages (particularly in the two books about development and web site work).

Hello, In reference to http://wiki.rettc.com/wiki.phtml?title=Wiki_Shorewall_FAQ ; Well, after a lot of emails I setup a wiki for shorewall, etc. It has proved to be completely useless. I have noticed one slight distro specific example added, a couple typo additions and fixes, otherwise, all contributions have been in excess (Tom...), or in malign. For my uses it has proven of little use as

Hello, I have a naked mediawiki running, from http://wikipedia.sourceforge.net/ The wiki is here: http://wiki.rettc.com Let me know what you think, and if it will be suitable for populating with FAQ stuffs. Alex http://www.rettc.com

I''m working on shorewall_setup_guide.htm -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Hi, Problem: I want 2 vpn tunnels for 2 subnets over one interface ipsec0. Documentation only describes config for 1 vpn or road warriors. I defined 2 vpn zones ''fre'' and ''swe''. #ZONE DISPLAY COMMENTS net Net Internet zone loc Local Local fre VPN_Fre VPN Fre swe VPN_Swe VPN Swe Interface ipsec0 is tunnel over eth1. Local is eth0. ipsec0 serves 2 zones: fre

I read several posts about SMTP being blocked at ISP. My ISP has the same limitation. My ADSL connection (1 fixed IP) only permits outbound connection to port 25 to their server. None of those posts answered my need. I tried FAQ also. I have several internal email clients/bots that needs to retrieve/send messages, some of then are notebooks. It''s not fair to change SMTP server to the

Happy New Year to everyone: I have followed the instructions at shorewall.net/samba.htm. I''ve restarted the samba server, shorewall, rebooted, everything. And from my network I cannot browse available shares on the firewall (192.168.1.1) telnet 192.168.1.1 138 fails with connection refused, which I don''t understand. All other open ports respond with a string. -- Philip

Thankyou the information provided was informative to say the most. Quote "Shorewall Masqurading made simple ?" I will not comment any futher about my simple question as I see nothing but backtracking information. Maybe all the usless information is somthing to do with the below, Linux how it works! First you must remember that 98% of linux programmers are kids or they have been

I''m beginning to think again about what will be different in 2.0. Here are some thoughts. a) User-defined actions will be emphasized. - A library of actions will be available with names such as: AcceptSSH AcceptDNS DropWindows (drops all SMB noise) DropBroadcasts (Silently drop all Broadcast traffic) ... The possibilities are nearly endless but should

Tom, Can you/someone get a news feed setup for shorewall announcements? If not, I''ll have to make use of the shorewall rss feeds at SF. Project RSS Feeds: shorewall http://sourceforge.net/export/rss2_project.php?group_id=22587 BTW, planetplanet.org has links to some cool feeds. -- Mike Noyes <mhnoyes at users.sourceforge.net> http://sourceforge.net/users/mhnoyes/ SF.net

There was a tread that I googled for and could not find about Asterisk being open to SIP DOS Attacks. I have a customer whose machine was hammered last light by traffic on its SIP port causing the OS to use up its resources. Namely number of open files. The discussion was around the fact that the Sip protocol answers requests without regard to authentication. Can anyone comment on this????

Hi, I've already asked this question, but unfortunately I've combined it with another question. So it was ignored in almost all cases. Thanks to those who have already given some hints. Here again: I don't want to use R interactively (issue commands after the prompt > ..), but use some functionality of R from inside a Perl script. Can I use methods of R from a Perl script: Is