similar to: transparent proxy

Hi, on a system RedHat 8.0, only on this, not on other various RedHat8.0, I have see the follow strange error in /var/log/{messages,boot.log} ..... After the boot all it seems to work, the modules is loads.... I have already tried to install other versions of kernel but the problem is always the same one :-(( Someone has some idea of what is happening? Thanks... Dario Lesca

While I''m in temporary retirement, I''ve decided spend a little time experimenting with new things and making some updates to the web site. The biggest result of this effort to date has been: http://shorewall.sf.net/Shorewall_Squid_Usage.html This outlines how to use Squid as a transparent proxy running on the firewall, in the DMZ or in the local network. In the latter two

The rule: ACCEPT loc $FW::3128 tcp www doesn''t work propertly, the http access does not redirect to squid but directly exit. what''s wrong? Thanks ------- Dario Lesca (d.lesca@ivrea.osra.it) -------------------------------------- @@@@@@@ this is my shorewall-1.2.13 config: #[/etc/shorewall/common.def]-----------------------------------------------

Hello, on my old system I''m using ipchains. Can anyone help me with converting rule /sbin/ipchains -A forward -j MASQ -s source_addr -d destination_addr 443 -p tcp to shorewall. I know that I can write eth0 source_addr to /etc/shorewall/masq file but I can''t found where I can specify the destination address. The reason for this is to allow one user (computer) access only to

Warning .... The two interface samples contain samples of the three interface... [root@multilinux temp]# tar xvfz samples-1.4.4/two-interfaces.tgz three-interfaces/ three-interfaces/interfaces three-interfaces/routestopped three-interfaces/masq three-interfaces/policy three-interfaces/rules three-interfaces/zones ------- Dario Lesca (d.lesca@ivrea.osra.it)

I am attempting to utilize the exclude from option in my rsync configuration file (rather than maintain lists on users machines) but it does not appear to be working. One example, I placed *.mp3 in the file to keep them from syncing mp3 files to the server and jamming up space. But rsync just seems to ignore this and syncs the files anyway without any errors to the syslog. All of my

Hi! I have this rule to allow incoming VNC connections to a host on my private LAN: DNAT net:$SITE1 loc:$JOHN tcp 5900:5910 This works perfectly the host can connect without problems. Would it be possible to link the internal host to an external ip? For example if Site1 would connect on the VNC port, all traffic gets forwarded to loc:$JOHN. But if net:$SITE2 connects

Version 1.0 of the Quick Start Guide and accompanying sample configurations is available at: http://www.shorewall.net/shorewall_quickstart_guide.htm. Comments and suggestions are most welcome. Thanks, -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ teastep@shorewall.net

Hola and thanks for any help in advance I installed mandrake 9 a few days ago and wanted to set up some additional rules to shorewall, bu i failed :) What i want to do is basicly route any incomming udp and tcp packets on port 4665 to a workstation behind the router. router with mandrake 9, eth0 (192.168.0.1) internal net, eth1(10.0.0.0) connected to dsl modem and gets a dynamic ip

Hey all; I am experiencing an issue with music on Hold. I am running asterisk version 1.4.22, and have a default script set up in two places for MoH playback. For internal devices to my network that are SIP peering with asterisk, they simply dial 123 and hear the MoH music immediately. I'm using the default setup, where it just plays the wave files in the /var/lib/asterisk/moh directory. I

I had our production systems running on rc23, however we ran into problems when the server was under heavy load. Eventually, the server would begin to freeze all imap connection after authentication (according to the logs). A user would connect, authentication would succeed, and then the connection would sit until timing out. No error logs were produced. Upgrading to rc24 did not

Hi everybody! I''m trying to implement the load balancing for a LAN with two ISPs. I''ve installed a Suse Linux Enterpise Server 9 with iproute2 for that porpouse. The server have two NICs, one of them is for both the LAN and ISP 1. I''ve setup both NICs with YAST (if I use ip for this, then the whole thing doesn''t work!) and execute the following commands to

Hello Tom and all, Quick question: Is it possible to operate an OpenVPN server from behind a firewall? Is it as simple as setting it up and placing: DNAT net loc:192.168.10.20 udp 5000 - ipaddress -- Paul Slinski -o) Network Administrator /\ Global IQX, Inc. _\_v Global IQX is the leader in integrated e-business automation solutions for the group life and health insurance

I am using pxeboot (syslinux) 1.75 and I'm attempting to boot diskless with the pxeboot.0 system. The system boots, downloads the pxeboot.0, the kernel and then the screen turns to garbage. Does anyone know what this is/how to fix this? Thanks. -- Paul Slinski System Administrator Global IQX http://www.globaliqx.com/ pauls at globaliqx.com

Hi list, I have tried google but just cant get this to work or figure it out. My setup ======== vanilla 2.6.13 kernel with CONFIG_IP_ROUTE_MULTIPATH=y CONFIG_IP_ROUTE_MULTIPATH_CACHED=y CONFIG_IP_ROUTE_MULTIPATH_RR=y CONFIG_IP_ROUTE_MULTIPATH_RANDOM=y CONFIG_IP_ROUTE_MULTIPATH_WRANDOM=y CONFIG_IP_ROUTE_MULTIPATH_DRR=y My configuration: A host with two ppp links. Ontop of these two ppp dialup

Hiya, I have an S4 domain running that I added another S4 machine to as an extra domain controller. That machine, unfotunately died (quite spectacularly I must say, think magic blue smoke). I would like to remove the dead domain controller from the domain. In ADUC I can see the DC under 'Domain Controllers' but when I try to delete it (having ticked the 'permanently offline'

I''m beginning to believe that the use of the last column in the rules file to designate redirection/forwarding is too subtle for many users. For 1.3, I think I''ll do something like the following: Current rule: ACCEPT net loc:192.168.1.3 tcp 80 - all New rule: FORWARD net loc:192.168.1.3 tcp 80 Current rule: ACCEPT net fw::3128 tcp 80 - all New rule: REDIRECT net

On Tue Feb 17 11:14:15 GMT 2004, Andrew Bartlett wrote: >> Any suggestions for things to try (or even a guaranteed solution ;-) ) would >> be very much appreciated. >> server signing = no >Try this as yes. How did you get it work? I've tried the "server signing = yes or auto", but it didn't work. Could you kindly tell us how to set the XP to get it

keskinv@alpha.sci.ege.edu.tr wrote: > > Our server running samba 1.9.18p8 has name ASTRONOMY and the workgroup name > 's also ASTRONOMY. All Win95 clients has also ASTRONOMY workgroup name. > After the installation of samba 1.9.18p8 on our linux server, all clients > show an error message which indicates that "workgroup name can not be the > same name as server

This is ifconfig on openbsd box: fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 I think this output shows that the fxp0 interface is on simplex mode. The voice degradation I referred was by using xlite soft phone. I open 2 line similtaneously and dial to FWD and back to my incoming extension. Xlite is runnning on a w2k box with realtek 100M nic in auto mode. I can