high-level tool for configuring Netfilter
0
votes
0answers
31 views
ubuntu 12.04 server requires double boot to find eth1
Ubuntu 12.04, haproxy and shorewall. when running everything works as expected. Both eth0 and eth1 properly configured and working. Reboot, system comes up but eth1 is missing, not found, not ...
0
votes
1answer
30 views
Expressing iptables rule as shorewall rule
I have been working with a Centos server for a while now. I have set 3 subnetworks in my LAN through alias networks (etho:o, eth0:1, etc). I have a sharer printer in one of those networks, and I would ...
0
votes
0answers
99 views
Debian Xen domU in private subnet cannot ping outside (Shorewall on dom0 a factor)
I have Xen setup with domUs, some of which are public-facing, and some are private. I have shorewall setup on the dom0 as my firewall. I don't think I have my bridges/interfaces/zones setup correctly. ...
1
vote
2answers
65 views
multiple blacklist files shorewall
I have been blocking by ip with shorewall and the blacklist file. I have decided to block a few country entirely and the blacklist file is huge!
So my question is this:
Is it possible to have ...
0
votes
1answer
132 views
Routing to secondary LAN with Shorewall
I'm setting up Shorewall (4.4.26.1), and have been trying to figure out routing between two LAN segments for the good part of the afternoon. It's time to ask for help.
((INTERNET))
|
|
...
0
votes
1answer
144 views
Martian source in log of machine1 after ssh-DNAT to virtual machine located on machine2 (machine1 and machine2 xover connected)
My scenario
2 physical machines, each with 2 network interfaces (eth0, eth1).
they act as virtual machine host
for one machine alone, the networking works with no problems
first i had two ...
0
votes
0answers
36 views
Managing IPSETs with Shorewall
I have a working shorewall configuration setup; however I am having some 'code smell' in managing my IPSets.
The best solution I have come up with is:
Set SAVE_IPSETS=Yes in the shorewall.conf file
...
1
vote
0answers
32 views
Shorewall SHOW DYNAMIC command doesn't work
Setting up shorewall dynamic zones, http://shorewall.net/Dynamic.html shows the command shorewall show dynamic zone where zone is one of your zones. I can get the add and delete commands to work, but ...
0
votes
2answers
56 views
Service redirection on same network
I have a network on which I run multiple servers each dedicated to a given service.
Because most services run on distinct ports I'm currently looking for a way of unifying "all" services into a ...
3
votes
1answer
459 views
multiple IP addresses bound - which one is used for outgoing packets?
Using IP aliasing a linux box has bound multiple ip addresses from the same subnet on the same NIC. So ifconfig shows up device eth0 with , eth0:1 with and eth0:2 with .
How does Linux determine the ...
0
votes
1answer
746 views
How to configure interfaces + vlan + shorewall on debian gnu/linux [closed]
can you help me configure linux box with vlan support with shoeewall firewall. I tried many configurations but nothing works.
This is my network intefaces:
allow-hotplug eth0
auto eth0
iface eth0 ...
1
vote
1answer
181 views
virtualbox port forwarding - firewall config
i have a ubuntu host system with virtualbox running a windows server. In Virtualbox i have configured the network with a NAT interface and port forwarding for the RDP deamon running inside the vm.
...
1
vote
1answer
124 views
Linux Router - Share bandwidth per IPs with current active connections
We have a Linux machine running as a custom router, currently utilising Shorewall. This sits between our incoming internet connection and the internal LAN.
What we would like to achieve is 'fair ...
1
vote
1answer
175 views
How to DNAT to different local IP based on what public IP was accessed with Shorewall?
My server has several public IPs, and is running a bunch of virtual machines with private IP adresses.
As an example, I want to map ports 80, 443 and 8080 on 232.21.23.23 (public) to 192.168.122.12 ...
3
votes
1answer
571 views
Bridge and OpenVPN with shorewall
I have this scenario and everything it's working OK, but I want to configure my Shorewall and I can't do it.
My interfaces are:
br0 (bridge of eth0)
tun0 (OpenVPN)
vnet* (each one of bridged ...
0
votes
0answers
234 views
psad block IP with shorewall
I'll try to configure psad with shorewall.
My shorewall works
In psad.conf I had :
FW_MSG_SEARCH Shorewall:net2fw:DROP:;
And I receive alertes, but the IP wich scan is not blocked.
How ...
0
votes
1answer
156 views
Sub-process /usr/bin/dpkg returned an error code (1)
Hey friends i am getting the following error when i am trying to purge shorewall
root@aptosid:/etc# apt-get purge shorewall
Reading package lists... Done
Building dependency tree
Reading ...
4
votes
1answer
301 views
Using knockd with shorewall
I'd like to migrate my old pure iptables firewall configuration to a shorewall setup. I get the basics, but I haven't been able to replicate my existing knockd setup:
I have a 'tmpknock' chain that ...
1
vote
1answer
286 views
How to use address ranges in shorewall rules?
I want to add rule for a range of IP addresses from 64.240.160.0 to 64.240.191.255.
1
vote
0answers
62 views
shorewall prevents routing from protected zone entities to other protected zone entities
I'm using shorewall as the firewall and gateway for a production site. The site also has a couple of VPNs running into it that are hosted on a different server on the same site (in the protected ...
0
votes
2answers
576 views
Shorewall enabling MySQL port
I've recently set up an ubuntu server to host my site - I need to open up port 3306 for MySQL access on my server.
I'm currently using shorewall on my server - how can open incoming connections to ...
0
votes
1answer
273 views
Track torrent traffic in shorewall
I use shorewall to configure my firewall. Is there anyway to track torrent traffic using shorewall accounting?
2
votes
1answer
211 views
Route by port in multi-isp configuration
I'm using shorewall firewall and have successfuly configure multiple isp source.
Currently it balances all traffic to both ISP. What I want to achieve is to route ssh trafic to ISP1 and route www ...
0
votes
2answers
283 views
Possible hack attack in Ubuntu Server?
I am having a Ubuntu 10.04 Server with Shorewall 4.4.6.
For some days, i have been seeing that the logs shorewall.log, kernel.log and syslog getting to huge sizes above 20G per log.
It occupied all ...
0
votes
1answer
408 views
I would like to redirect port 8140 on my public IP address (ip1) to port 8140 on Internet host (ip2)
edit3:
i would like to get exactly what is descripted in http://shorewall.net/FAQ.htm#faq1g but it doesn't work for me.
edit3 end;
os: debian squeeze
shorwall: 4.4.11.6-3
3 computers a, b & c; ...
1
vote
1answer
314 views
Clarify the intent of ping rules in a Shorewall configuration
I'm configuring shorewall on a server, and things are going well so far. However, there is one thing I am wondering about. The 'rules' file has, among others, the following lines:
#
# Drop Ping from ...
1
vote
2answers
326 views
Forwarding a call from different subdomains to different internal machines
How do I route traffic from different sub domains to different internal IP addresses?
I have set up a Debian router that has one public IP and a domain name pointed to that IP, I would like to have ...
0
votes
2answers
50 views
Suggestions for Wi-Fi NICs, supported by Linux drivers, to use as an access point [closed]
We're looking to replace a wireless access point and DSL modem with a dedicated Linux box.
What wireless card can be suggested? PCI would be preferable, that is supported by Linux and is capable of ...
0
votes
0answers
370 views
KVM + Shorewall
I've successfully got a couple of VMs running on a single KVM master. Full interconnectivity over bridge VMBR0.
This is my setup:
Physical Host : base
VM1 : webserver
VM2 : mailserver
I've ...
0
votes
1answer
182 views
Prevent Shorewall log entries for specific IP address and/or port
I have Shorewall firewall setup on a Debian server which is working fine. I get various log entries in /var/log/messages when packets are dropped, as expected, for example:
Aug 17 19:09:07 cheetah ...
1
vote
1answer
158 views
What service uses UDP port 60059?
I received an email from logcheck that contained a number of attempted connections to UDP port 60059.
This email is sent by logcheck. If you no longer wish to receive
such mail, you can either ...
1
vote
0answers
177 views
Multi-ISP firewall setup
We have been trying to move away from a SonicWall firewall for quite some time now.
Through much Googling and many hours of trial and error, we have met varying degrees of success through different ...
0
votes
2answers
194 views
Uploads fail with shorewall enabled
I have an Ubuntu 8.04 server with shorewall 4.0.6 installed. When I try to upload files using FTP, SCP, or cURL the file upload stalls almost immediatly and eventually times out. If I turn off ...
0
votes
1answer
362 views
Shorewall - port forwarding
I have a bit of a problem with my shorewall setup. Here is a copy of my rules file:
DNAT fw wan:172.16.1.224:6999 tcp 80
DNAT net wan:172.16.1.218 tcp 7000
And here ...
3
votes
2answers
336 views
Prevent a single host from consuming entire bandwidth?
We have a linux router providing internet connectivity to several PCs. It's currently using shorewall to help make the iptables setup easier. Is there a way I can set it such that any individual host ...
0
votes
1answer
141 views
Shorewall Drops the IP
We are using shorewall on Linux server in our LAN environment. The Client machines using windows XP.
When I try to connect to a remote machine( The remote machine has static IP) from my windows ...
0
votes
1answer
394 views
Shorewall drop all incoming traffic from one internet IP except for all local host except two
How i can block all incoming traffic from one internet IP for the local network, except for two host?
DROP all inet:78.31.8.0/24 - -
The previous rule block all the ...
0
votes
1answer
166 views
1
vote
3answers
669 views
reverse ssh tunnel from server to laptop
Question I would like to know how to tunnel requests made on a server (debian) to port 80 on my laptop using ssh tunneling.
Problem I can open up a tunnel with the following command that does not ...
1
vote
3answers
478 views
shorewall on debian proxy server troubleshooting
The setup is: debian proxy-server -> linsys router -> internal ubuntu server
Problem is: I can access the ubuntu web server (apache2) by entering 192.168.1.128 in a browser on my debian proxy. ...
2
votes
1answer
327 views
Some HTTPS connections via NAT fail, but work on firewall itself
I am having trouble establishing some HTTPS connections from internal machines, even though these same connections work if initiated on the firewall itself.
The firewall machine is running Ubuntu ...
0
votes
1answer
862 views
How can I redirect HTTP(S) traffic to another gateway?
I have a network like 192.168.0.0/15 with the default gateway set to 192.168.0.1. All the workstations of the network use this gateway for all kind of accesses to the Internet. Now I am testing a new ...
0
votes
1answer
365 views
shorewall masquerading from tun0 to ppp0
First interface is ppp0 (pptp vpn)
Second inteface is tun0 (openvpn)
Third interface eth0 (default gw
interface)
Openvpn is set to change default route on client for all packets to go through tun0 ...
0
votes
1answer
395 views
Debian firewall: Shorewall - VPN2VPN policy doesn't work
I have a problem with my shorewall policy.
There are 4 zones configured in shorewall but the policy vpn2vpn:accept doesn't work. I want to establish connections between PPTP clients. They are dropped ...
1
vote
1answer
786 views
Can't ping through PPTP when Shorewall is active
I have a pptpd server and Shorewall running on the same server. The server has two ethernet connections (eth0 -> WAN, eth1 -> LAN) and its IP on the LAN is 10.11.100.201
I can establish a VPN-tunnel ...
0
votes
2answers
527 views
I've been asked to replace the firewall with DD-WRT. Is this feasible?
Currently we have shorewall running as our firewall, but we're switching over our network to something lighter. We were thinking of using a Linksys E2000 and installing DD-WRT. We have a cable ...
0
votes
3answers
468 views
Shorewall: temporarily drop incoming traffic except port 22?
When I work on configuration files, especially of the mail server, I would like to temporarily drop all the incoming traffic except the port 22.
So, I don't risk to lose incoming mails if I need to ...
3
votes
3answers
654 views
What is better for an IP ban? At firewall (shorewall) level, or at IIS level?
I have a spambot that likes to spam my websites.
I mailed to abuse@isp, but he ignored me.
Attacks always come from the same ip, and i used IISIP to add the spammer IP to all of my websites.
I am ...
1
vote
1answer
358 views
Shorewall / iptables accounting between specific nets?
I have two servers on two different IPs, lets say they are: 1.2.3.4 and 5.6.7.8. In addition, they both run some virtual machines, who all have private IPs 10.0.0.*. Now, these two servers only have a ...
