Re: [Shorewall-users] ETH0_IP=`find_first_interface_address eth0`

2007-03-24 Thread mess-mate
Jerry Vonau <[EMAIL PROTECTED]> wrote: | mess-mate wrote: | > Jerry Vonau <[EMAIL PROTECTED]> wrote: | > | mess-mate wrote: | > | > I'm running version 3.2.6 on a debian system. | > | > | > | > And ETH0_IP=find_first_interface_address eth0 | > | > is not recognized. | > | > What did i wrong ? | >

Re: [Shorewall-users] ETH0_IP=`find_first_interface_address eth0`

2007-03-24 Thread Tom Eastep
mess-mate wrote: > There is nothing more than a 'command not find' when starting > shorewall. > That's clear i think. That command couldn't be found. > I've added 'functions' to /usr/local/bin, a general dir of my > system, but nothing help. > That command stays in 'functions' so what happen exac

Re: [Shorewall-users] ETH0_IP=`find_first_interface_address eth0`

2007-03-24 Thread Jerry Vonau
mess-mate wrote: > Jerry Vonau <[EMAIL PROTECTED]> wrote: > | mess-mate wrote: > | > Jerry Vonau <[EMAIL PROTECTED]> wrote: > | > | mess-mate wrote: > | > | > I'm running version 3.2.6 on a debian system. > | > | > > | > | > And ETH0_IP=find_first_interface_address eth0 > | > | > is not recognized

Re: [Shorewall-users] Adoption rate (Was: IPSEC NAT-T IKE fails when policy is $FW2net REJECT.)

2007-03-24 Thread ktneely
On Fri, Mar 23, 2007 at 10:07:39AM +, Andrew Suffield wrote: > On Fri, Mar 23, 2007 at 08:04:42AM +, Simon Hobson wrote: > > As for Debian, they have the popularity contest which I believe is > > supposed to gather stats on what people are running. > > Yes. It looks at the atime stamps f

Re: [Shorewall-users] Adoption rate (Was: IPSEC NAT-T IKE failswhen policy is $FW2net REJECT.)

2007-03-24 Thread ktneely
On Fri, Mar 23, 2007 at 04:13:20PM +0100, Peter Wagner wrote: > > Thank you shorewall developers your scripts are runable in embedded > linx devices saves me a lot of config time . This doesn't surprise me, since it's basically just some scripts manipulating the IPTables for you, w

Re: [Shorewall-users] Adoption rate (Was: IPSEC NAT-T IKE failswhen policy is $FW2net REJECT.)

2007-03-24 Thread Roberto C . Sánchez
On Sat, Mar 24, 2007 at 11:27:47AM -0400, [EMAIL PROTECTED] wrote: > > This doesn't surprise me, since it's basically just some scripts > manipulating the IPTables for you, which is what makes it so good. > This reminds me, however, is there anyone that provides "shrink-wrap" > solutions with Shor

[Shorewall-users] Shorewall4

2007-03-24 Thread Tom Eastep
Shortly after I release Shorewall 3.4.2, I will be issuing the first release of the new development thread which I'm calling Shorewall4. I'm announcing the new product ahead of time so that people will have a chance to comment on the approach (and the product name) in advance of the initial releas

[Shorewall-users] PPTPD Routing Problem on Fedora 6 64bit

2007-03-24 Thread Owel Paule
Hi, Guys! Good Day! I got the ppptd server running on my shorewall firewall (2 Interface) it can connect but I cannot connect to anything else on my network so I don't know what I'm doing wrong but I believed I have set the routing requirements for my firewall. Here's the specs of my firewall:

Re: [Shorewall-users] PPTPD Routing Problem on Fedora 6 64bit

2007-03-24 Thread Tom Eastep
Owel Paule wrote: > Hi, Guys! > > Good Day! > > I got the ppptd server running on my shorewall firewall (2 Interface) > it can connect but I cannot connect to anything else on my network so I > don't know what I'm doing wrong but I believed I have set the routing > requirements for my firewall.

Re: [Shorewall-users] Shorewall4

2007-03-24 Thread Vieri Di Paola
--- Tom Eastep <[EMAIL PROTECTED]> wrote: > I'm announcing the new product ahead of time so that > people will have a > chance to comment on the approach (and the product > name) in advance of the > initial release. Just a thought but considering the shorewall-lite package title format one may a

Re: [Shorewall-users] Shorewall4

2007-03-24 Thread Tom Eastep
Vieri Di Paola wrote: > --- Tom Eastep <[EMAIL PROTECTED]> wrote: > >> I'm announcing the new product ahead of time so that >> people will have a >> chance to comment on the approach (and the product >> name) in advance of the >> initial release. > > Just a thought but considering the shorewall-l

Re: [Shorewall-users] Shorewall4

2007-03-24 Thread Henrique Cesar Ulbrich
Historiadores acreditam que, em Sáb 24 Mar 2007, Vieri Di Paola disse: > Just a thought but considering the shorewall-lite > package title format one may also call it shorewall-ng > or shorewall-pl. > I prefer package names without numbers but that's just > my opinion. I agree. The current stabl

Re: [Shorewall-users] Shorewall4

2007-03-24 Thread Tom Eastep
Henrique Cesar Ulbrich wrote: > Historiadores acreditam que, > em Sáb 24 Mar 2007, Vieri Di Paola disse: >> Just a thought but considering the shorewall-lite >> package title format one may also call it shorewall-ng >> or shorewall-pl. >> I prefer package names without numbers but that's just >> m

Re: [Shorewall-users] syslog-ng [SOLVED]

2007-03-24 Thread mess-mate
Tom Eastep <[EMAIL PROTECTED]> wrote: | mess-mate wrote: | | > | > At now everything is logged in /var/log/messages. | | Are you complaining that Shorewall messages are logged in one of your | Shorewall logs *and* in /var/log/messages or are you complaining that they | are logged in /var/log/mes

Re: [Shorewall-users] Shorewall4

2007-03-24 Thread Andrew Suffield
On Sat, Mar 24, 2007 at 11:37:39AM -0700, Tom Eastep wrote: > Products that end in '-ng' typically replace the product with the same > name but without the '-ng'. That isn't going to happen here. So I prefer > 'shorewall-pl'. Language-specific names are usually a bad idea in the long run. There's

Re: [Shorewall-users] Shorewall4

2007-03-24 Thread Tom Eastep
Andrew Suffield wrote: > > Perhaps 'shorewall-compiler' or something like that? That's the > essential difference of this code, as far as I can see. > I disagree. Shorewall has included a compiler since Shorewall 3.2 so the fact that this product includes a compiler does not distinguish it from

Re: [Shorewall-users] Shorewall4

2007-03-24 Thread Andrew Suffield
On Sat, Mar 24, 2007 at 10:50:54AM -0700, Tom Eastep wrote: > The good news: > > a) The compiler has a small disk footprint (although Perl is large). > b) The compiler is very fast. > c) The compiler generates a firewall script that uses iptables-restore; > so the script is very fast. Now that's

Re: [Shorewall-users] Shorewall4

2007-03-24 Thread Roberto C . Sánchez
On Sat, Mar 24, 2007 at 08:58:54PM +, Andrew Suffield wrote: > > Perhaps 'shorewall-compiler' or something like that? That's the > essential difference of this code, as far as I can see. > I don't like it. How about northwall, ridgewall, seawall or richwall? :-) Regards, -Roberto -- Rob

Re: [Shorewall-users] Shorewall4

2007-03-24 Thread Tom Eastep
Andrew Suffield wrote: > On Sat, Mar 24, 2007 at 10:50:54AM -0700, Tom Eastep wrote: > > - The code should be hugely simpler to understand (any non-trivial > program written in shell spends half the code working around the > limitations of shell), which makes it much more practical for random