similar to: Unable to have pc #2 connect

Hello, I''m a very happy user of shorewall but I have found a problem or maybe a misconfiguration I made which I can not resolve. I use a fairly large blacklist based on probes, nimda & codered attacks, proxy & relay probes etc. The only problem is that I want to block incoming trafic on all ports FROM a block but it does also block a httpd, ping etc TO a ip in a block what I do

How does one interpret the mac addresses in the log which seem to have 14 segments... Example, this appears in the log... 00:40:c7:2e:09:c0:00:01:64:4a:70:00:08:00 Yet I can''t find that in the arp table norcomix:~ # arp -an ? (192.168.2.148) at 00:10:4B:6A:AE:E7 [ether] on eth1 ? (192.168.2.149) at 00:D0:B7:1D:F2:F2 [ether] on eth1 ? (24.237.19.16) at 00:10:DC:67:BA:80 [ether] on eth0 ?

Hola and thanks for any help in advance I installed mandrake 9 a few days ago and wanted to set up some additional rules to shorewall, bu i failed :) What i want to do is basicly route any incomming udp and tcp packets on port 4665 to a workstation behind the router. router with mandrake 9, eth0 (192.168.0.1) internal net, eth1(10.0.0.0) connected to dsl modem and gets a dynamic ip

Whilst configuring another shorewall firewall router for another site, I must have made some totally newbie error.... While directly on the cable modem, it works great. But when placed on the LAN side of my existing Shorewall box, the NEW shorwall box could not ping, or look up dns or anything else. If I shutdown shorewall (clear) in the NEW box then it could surf the net and ping etc. When

First of all, My apologies for this maybe slight OT post, but I have so much confidence and read so much good replies on this list, that I am still asking my question. I''m looking for a linux distribution to use on our school''s homemade routers. The routers are small miniITX based systems with 2 network interfaces. I added a 4 port D-Link network card in some cases, when I

Since you''ve started signing your email, Tom, my machine can''t verify your sig. Where are you publishing your key? -- John Andersen - NORCOM http://www.norcomsoftware.com/

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 DeveloperCube is a new project started by veterans of the web development industry. We are proud to announce that we are now the Official Shorewall Support Forum. We are an online community offering discussion geared towards web developers, designers, and administrators of all skill levels. There are topics ranging from how to market your website,

Happy New Year to everyone: I have followed the instructions at shorewall.net/samba.htm. I''ve restarted the samba server, shorewall, rebooted, everything. And from my network I cannot browse available shares on the firewall (192.168.1.1) telnet 192.168.1.1 138 fails with connection refused, which I don''t understand. All other open ports respond with a string. -- Philip

Thankyou the information provided was informative to say the most. Quote "Shorewall Masqurading made simple ?" I will not comment any futher about my simple question as I see nothing but backtracking information. Maybe all the usless information is somthing to do with the below, Linux how it works! First you must remember that 98% of linux programmers are kids or they have been

Hello all, I don''t want this to be a tome'' but felt a comment was in order. Many new users (Linux and Shorewall are no different) are more apt to not read the manual(RTFM) as they view it as "Taking to long" and don''t understand it''s relevance in their particular scenario. This is unfortunate in the case of Shorewall. As the documents are not only

Tom, or whomever reads this, when I say disconnect I mean close out IE6, sorry for so unclear on this point. My IP address never changes unless I unplug the modem. I have had the same IP address for ... well since I had to reset it to hook it up to my Linux box.which was 2 weeks ago. If I set DHCP on my eth1 interface that will contradict the static address I have assigned to it,

Since RedHat announced the discontinuence of RedHat Linux, I''ve been diversifying shorewall.net. The systems here now are as follows: a) Firewall -- Debian testing (Installed using the Sarge online installer). b) File Server -- SuSE 9.0 Professional c) Desktop -- Mandrake 9.0 d) Web/Mail -- RedHat 9.0 I think that I will wait until I can afford to build a new

I read several posts about SMTP being blocked at ISP. My ISP has the same limitation. My ADSL connection (1 fixed IP) only permits outbound connection to port 25 to their server. None of those posts answered my need. I tried FAQ also. I have several internal email clients/bots that needs to retrieve/send messages, some of then are notebooks. It''s not fair to change SMTP server to the

Begging indulgence of the list - asking here because due to the higher likelyhood of getting an answer... I have an application that often loses connection from one machine to another when one (or more) of the machines has particular brands of 1gig nics, but which runs rock solid when on 10meg nics and some 1 gig nics. The application senses (falsely) that the connection has been shut down

hi: Just a litle update: 41/8 allocated to AfriNIC (APR 2005). 73/8 allocated to ARIN (MAR 2005). hope it helps.

I attached a copy of my rules file and I was wonndiering if there is some commands that I don''t need. I am running a webserver,email server,samba server. Thanks --------------------------------- Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now-------------- next part -------------- ############################################################################## #ACTION

The basic functionality of Shorewall 2.2.2 works fine with the soon-to-be-released SuSE 9.3 (I have an early copy). I''ll be trying it over the weekend with more complex configurations involving IPSEC and OpenVPN. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \

Begging indulgence of the list - asking here because due to the higher likelyhood of getting an answer... I have an application that often loses connection from one machine to another when one (or more) of the machines has particular brands of 1gig nics, but which runs rock solid when on 10meg nics and some 1 gig nics. The application senses (falsely) that the connection has been shut

I just installed Shorewall for the first time and had no working knowledge of iptables other than a couple magazine articles prior to this time. The use of the QSG is fresh in my mind. It was the single most helpful guide of any on the site. Comments: 1) The /etc/shorewall/masq section shows the use of the third column but then says you don''t need it if you have a dynamic ip. Its

Hello, Which port Smb4K uses? I am not able to use Smb4K on my server for the local network. Thanks Varun