Re: [Shorewall-users] ETH0_IP=`find_first_interface_address eth0`

2007-03-23 Thread mess-mate
Jerry Vonau [EMAIL PROTECTED] wrote: | mess-mate wrote: | I'm running version 3.2.6 on a debian system. | | And ETH0_IP=find_first_interface_address eth0 | is not recognized. | What did i wrong ? | best regards | mess-mate | | That should be

Re: [Shorewall-users] Adoption rate (Was: IPSEC NAT-T IKE fails when policy is $FW2net REJECT.)

2007-03-23 Thread Simon Hobson
Bruce S. Skinner wrote: I've read your ruminations in the shorewall-devel list about the adoption rate of Shorewall. I wouldn't be so sure that shorewall isn't getting lots of use. It's part of lot's of distros and it just works. I use it on about a dozen machines (and I wouldn't care to say

Re: [Shorewall-users] Adoption rate (Was: IPSEC NAT-T IKE fails when policy is $FW2net REJECT.)

2007-03-23 Thread Roberto C . Sánchez
On Fri, Mar 23, 2007 at 08:04:42AM +, Simon Hobson wrote: It's installed on every Linux box I set up now irrespective of its role. Now I've done a few in different configs, it's almost trivial to set up to control access to a server or whatever - and an important factor, I know it

Re: [Shorewall-users] Adoption rate (Was: IPSEC NAT-T IKE fails when policy is $FW2net REJECT.)

2007-03-23 Thread Roberto C . Sánchez
On Fri, Mar 23, 2007 at 10:07:39AM +, Andrew Suffield wrote: Yes. It looks at the atime stamps for stuff that's been run in the past 30 days; frequency doesn't matter. Also it reports on stuff that's installed, regardless of usage. Current results: of approximately 3 installations

Re: [Shorewall-users] Adoption rate (Was: IPSEC NAT-T IKE failswhen policy is $FW2net REJECT.)

2007-03-23 Thread Peter Wagner
Hi, Thank you shorewall developers your scripts are runable in embedded linx devices saves me a lot of config time . Realy nice . Have a nice day greets - Take Surveys. Earn Cash. Influence the Future

[Shorewall-users] syslog-ng

2007-03-23 Thread mess-mate
Hi list, i've installed syslog-ng in replacement of the old syslog but can't get the log logged to /var/log/shorewall/warn.log, etc... here are my settings in the syslog-ng.conf : destination d_shorewall_warn { file (/var/log/shorewall/warn.log owner(root) group(root) ); };

Re: [Shorewall-users] syslog-ng

2007-03-23 Thread David Mohr
On 3/23/07, mess-mate [EMAIL PROTECTED] wrote: Hi list, i've installed syslog-ng in replacement of the old syslog but can't get the log logged to /var/log/shorewall/warn.log, etc... here are my settings in the syslog-ng.conf : destination d_shorewall_warn { file

Re: [Shorewall-users] syslog-ng

2007-03-23 Thread Tom Eastep
mess-mate wrote: At now everything is logged in /var/log/messages. Are you complaining that Shorewall messages are logged in one of your Shorewall logs *and* in /var/log/messages or are you complaining that they are logged in /var/log/messages but *not* in the Shorewall logs? In either

Re: [Shorewall-users] Expected handling of [SYN] when expecting [SYN, ACK]?

2007-03-23 Thread Tom Eastep
Frances Flood wrote: Basically, if the machine behind Shorewall sends out a [SYN] message but Shorewall then receives a [SYN] from the target rather than a [SYN, ACK], would you expect Shorewall to block the [SYN] message or allow it through? First of all, you should understand that

Re: [Shorewall-users] ETH0_IP=`find_first_interface_address eth0`

2007-03-23 Thread Jerry Vonau
mess-mate wrote: Jerry Vonau [EMAIL PROTECTED] wrote: | mess-mate wrote: | I'm running version 3.2.6 on a debian system. | | And ETH0_IP=find_first_interface_address eth0 | is not recognized. | What did i wrong ? | best regards | mess-mate | |

[Shorewall-users] 3.4.1 patches

2007-03-23 Thread Vieri Di Paola
Hi, I would like to use errata/patches to update both shorewall and shorewall-lite. Are files such as lib.cli always going to be the same in shorewall and shorewall-lite? In this case applying current patch #2 to both shorewall and shorewall-lite makes sense. However, automating patching would