Questions tagged [shorewall]
high-level tool for configuring the Linux Netfilter packet filter
40
questions with no upvoted or accepted answers
2
votes
0
answers
670
views
Kubernetes and iptables not mixing: connection content dropped?
I'm playing around with a bare-metal Kubernetes cluster (using the calico CNI plugin) and having troubles redirecting external traffic into the node. I've set up the nginx kubernetes ingress ...
1
vote
1
answer
452
views
OpenVPN client fails to re-connect after internet connection re-established
I'm running miniPC with Debian and shorewall on it + and OpenVPN client. All is running smoothly unless my isp modem loses connection. After the connection to the internet is re-established, the ...
1
vote
0
answers
242
views
Diagnosing / monitoring HTB or HFSC traffic shaping
I have set up a central Linux router with Shorewall script for a small company that have a HQ and several other offices. They're connected via OpenVPN.
All is well, except that I want to fine tune ...
1
vote
0
answers
96
views
Shorewall masquerade on dynamic interface
I have a list of interfaces to which I want to masquerade traffic to. The problem is only one of them is active at once. They all match the regex vlan14[0-9][0-9]. How can I get shorewall to ...
1
vote
0
answers
49
views
Shorewall multiple outgoing IPs allocation
I have perfectly working VPN server with Shorewall installed. I got more IPs for the main eth0 interface so the server accepts the VPN connection from any of x.x.x.x/25 public IPs. But, the issue is ...
1
vote
1
answer
811
views
Shorewall blocks openvpn traffic?
I have a debian installation with shorewall, openvpn and google authenticator. I can get an vpn connection - but i cannot get any traffic through to local Lan or to internet - what am I missing here:
...
1
vote
0
answers
679
views
Shorewall reporting martians
Running Shorewall v5.0.14.1 on Fedora Server 4.8.15-200.fc24.x86_64 configured with two interfaces (br0 and team0). Interface br0 connects to Internet while the team0 interface connects wireless ...
1
vote
0
answers
96
views
How to ensure via shorewall that the network is closed at boot time?
I use Shorewall (on Ubuntu 16.04) and would like to ensure that between the start of the boot process and the moment iptables rules are applied the network is in a closed state.
There provision for ...
1
vote
0
answers
209
views
Selinux: Shorewall will not respond to fail2ban
I am using fail2ban with shorewall and my Fedora 21 server & cloud. All flooded with the following error message:
SELinux is preventing shorewall from write access on the file /tmp/fai2ban*.[...
1
vote
0
answers
690
views
shorewall can'T start: UNTRACKED state requires Raw Table in your kernel and iptables
I'm trying setting up my firewall and installed and configured shorewall. Unfortunately I tried to directly configure iptables first, but this didn't work.
When I start shorewall, I get this messages ...
1
vote
0
answers
913
views
Shorewall: DNAT to IPSEC tunnel zone not routing correctly
I have a ipsec tunnel working that gives access to a 192.168.4.0/24 lan. It is working fine and I can access hosts on the other side without problem:
# from fw and lan hosts:
# ping 192.168.4.44
PING ...
1
vote
0
answers
1k
views
Firewall rejecting UDP "connections"?
I have a server that is aggregating logs from various other servers. It mostly works great, however from time-to-time (right after a reboot, but not all reboots) it will decide that various UDP "...
1
vote
0
answers
2k
views
Shorewall redirect rule only working for some hosts in the same network
I'm trying to use Shorewall's REDIRECT action to intercept traffic destined for the firewall's port 514 (TCP and UDP) to port 5000 (also TCP and UDP), while also allowing direct traffic to the latter ...
1
vote
0
answers
544
views
Send traffic over a specific port through a specific interface, using Shorewall
I have an application that does not support binding to a different interface. It currently sends outgoing connections over eth0, but I would like to send it over eth0:1 which is a virtual interface.
...
1
vote
0
answers
262
views
Shorewall SHOW DYNAMIC command doesn't work
Setting up shorewall dynamic zones, http://shorewall.net/Dynamic.html shows the command shorewall show dynamic zone where zone is one of your zones. I can get the add and delete commands to work, but ...
1
vote
1
answer
714
views
virtualbox port forwarding - firewall config
i have a ubuntu host system with virtualbox running a windows server. In Virtualbox i have configured the network with a NAT interface and port forwarding for the RDP deamon running inside the vm.
...
1
vote
1
answer
218
views
Linux Router - Share bandwidth per IPs with current active connections
We have a Linux machine running as a custom router, currently utilising Shorewall. This sits between our incoming internet connection and the internal LAN.
What we would like to achieve is 'fair use'...
1
vote
0
answers
110
views
shorewall prevents routing from protected zone entities to other protected zone entities
I'm using shorewall as the firewall and gateway for a production site. The site also has a couple of VPNs running into it that are hosted on a different server on the same site (in the protected zone)....
1
vote
0
answers
310
views
Multi-ISP firewall setup
We have been trying to move away from a SonicWall firewall for quite some time now.
Through much Googling and many hours of trial and error, we have met varying degrees of success through different ...
0
votes
1
answer
381
views
Configuring shorewall's masq file for a three-interface firewall connected to a router with a single static IP address
I am trying to follow the guide for setting up a "three-Interface Firewall" running Shorewall version 5.0.4. (https://shorewall.org/three-interface.htm). I also have a Procurve switch that ...
0
votes
0
answers
160
views
Shorewall - One external IP for two hosts with nginx and keepalived
I'm following this tutorial to setup keepalived: https://www.redhat.com/sysadmin/keepalived-basics
It requires two hosts to share one external IP, where the second host is the failover.
I'm unsure how ...
0
votes
1
answer
528
views
How to uninstall shorewall completely from Ubuntu
I noticed on my some servers shorewall service is installed but it's not running.I want to uninstall it.
I executed the command sudo systemctl status shorewall to check status of shorewall and got the ...
0
votes
0
answers
151
views
virtmanager: install via debian netinstall, reboot find not boot device, recovery mode can access
I used the virtmanager to create a virtual machine. The install medium is the debian netinstaller (Version 10, buster). Installation works without problems. Rebooting fails: no boot device found ...
0
votes
1
answer
243
views
in shorewall, how can I block requests from external hosts when using nested zones?
I have one Debian server with one network interface, I've configured a bridge for KVM and shorewall with two zones in the same interface
so I have the "net" zone and the "kvm" for kvm guests, here is ...
0
votes
0
answers
599
views
Shorewall blocking outbound traffic to one IP on a vpn tunnel
I'm trying to set up shorewall to block traffic to one particular IP address that is routed over an openvpn tunnel.
Naively I have the following shorewall rules in place
#Don't allow connection ...
0
votes
1
answer
1k
views
OpenVPN tunnel up but no traffic from LAN to VPN
The HeadOffice subnet is 192.168.2.0/24. OpenVPN server & shorewall on same box - acting as a gateway
AWS subnet is 10.9.1.0/24. Openvpn Client configured for VPN access
Tunnel is up and I can ...
0
votes
1
answer
40
views
Why is my ISP box talking to my DMZ host?
I have a setup where an internet connection is available via ISP box, which has a DMZ feature (one of the hosts can be exposed to Internet). The general setup is the following
Internet - PublicIP - ...
0
votes
0
answers
180
views
How do I get default LXC iptable rules into Shorewall?
I'm setting up a server which will be hosting multiple LXC containers. However, starting Shorewall results in loss network access from within the LXC containers.
If I reboot the LXC host and leaves ...
0
votes
1
answer
354
views
Shorewall: Block repeatedly failling ips on port 22
I am on Fedora 21, and port 22 is open for ssh connections.
I am using key-based authentication with password and root logins disabled.
My logs are flooded with messages like the ones appended at ...
0
votes
0
answers
1k
views
Routing Traffic to Subnet through OpenVPN Client Tunnel
I have a Shorewall powered masquerading router:
eth0: DHCP client, external interface (net zone)
eth1: static, internal interface (loc zone)
Now I want to add an OpenVPN client that creates a TUN ...
0
votes
1
answer
517
views
HAProxy fails to connect when Shorewall firewall is enabled on web servers
I have a fairly standard HAProxy / Web Cluster setup, which is running perfectly fine - as long as I don't enable the Shorewall firewall on the web cluster servers.
As soon as I do, error messages ...
0
votes
1
answer
542
views
Expressing iptables rule as shorewall rule
I have been working with a Centos server for a while now. I have set 3 subnetworks in my LAN through alias networks (etho:o, eth0:1, etc). I have a sharer printer in one of those networks, and I would ...
0
votes
1
answer
984
views
Sub-process /usr/bin/dpkg returned an error code (1)
Hey friends i am getting the following error when i am trying to purge shorewall
root@aptosid:/etc# apt-get purge shorewall
Reading package lists... Done
Building dependency tree
Reading ...
0
votes
1
answer
1k
views
Track torrent traffic in shorewall
I use shorewall to configure my firewall. Is there anyway to track torrent traffic using shorewall accounting?
0
votes
1
answer
934
views
Prevent Shorewall log entries for specific IP address and/or port
I have Shorewall firewall setup on a Debian server which is working fine. I get various log entries in /var/log/messages when packets are dropped, as expected, for example:
Aug 17 19:09:07 cheetah ...
0
votes
2
answers
519
views
Uploads fail with shorewall enabled
I have an Ubuntu 8.04 server with shorewall 4.0.6 installed. When I try to upload files using FTP, SCP, or cURL the file upload stalls almost immediatly and eventually times out. If I turn off ...
0
votes
1
answer
724
views
Shorewall Drops the IP
We are using shorewall on Linux server in our LAN environment. The Client machines using windows XP.
When I try to connect to a remote machine( The remote machine has static IP) from my windows ...
0
votes
1
answer
2k
views
Shorewall drop all incoming traffic from one internet IP except for all local host except two
How i can block all incoming traffic from one internet IP for the local network, except for two host?
DROP all inet:78.31.8.0/24 - -
The previous rule block all the ...
0
votes
1
answer
246
views
Shorewall Bridge
How do I create a rule Shorewall for bridging port 443 from eth0 to eth1?
-1
votes
1
answer
264
views
bind9 not resolving intranetlinks
As a follow up to a question I've asked earlier: Linux server migration to Windows workstation. A supplier got us a new network-card yesterday, but no harddrives so far. I've also bit the bullet on ...