[Shorewall-users] Shorewall and IPv6 -- 4.2.4-RC1

2008-12-18 Thread Shorewall Geek
As we announced earlier, although our original plan was to release IPv6 support late next year in Shorewall 4.4, by taking a different approach we have been able to produce the code much sooner and with less risk to existing IPv4 users. As a consequence, we are happy to announce Shorewall-4.2.4-RC

Re: [Shorewall-users] Bridging with one interface

2008-12-18 Thread The Peach
On Thu, 18 Dec 2008 11:29:56 -0800 Shorewall wrote: > all was well. thanks again ;) -- The Peach -- SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future of the web can't happen without

[Shorewall-users] [Fwd: [Shorewall-announce] New Shorewall Mirror]

2008-12-18 Thread Shorewall Geek
Original Message Subject: [Shorewall-announce] New Shorewall Mirror Date: Thu, 18 Dec 2008 08:56:39 -0800 From: Tom Eastep Reply-To: shorewall-users@lists.sourceforge.net To: Shorewall Announcements , Shorewall Users ,Shorewall Development CC: ? ?? Th

Re: [Shorewall-users] Remote user authentication before for full network access

2008-12-18 Thread Jeff Greer
Thanks for the heads up. I think the last version of worked with was prior to 4.x. I was using it back when the Mr. Eastep almost stop support/development Shorewall. On Thu, Dec 18, 2008 at 1:31 PM, Shorewall Geek wrote: > Colin Alston wrote: > >> What we do that works very nicely is to define a

Re: [Shorewall-users] Remote user authentication before for full network access

2008-12-18 Thread Shorewall Geek
Colin Alston wrote: > What we do that works very nicely is to define a subzone so we have loc > and cloc:loc in zones, loc policy is to drop all and cloc policy is to > allow all. Squid has a url_rewrite program that does 'shorewall add > eth0:whatever cloc' and then they can breakout. Beware

Re: [Shorewall-users] Bridging with one interface

2008-12-18 Thread Shorewall Geek
The Peach wrote: > On Thu, 18 Dec 2008 07:11:32 -0800 > Shorewall wrote: > >> In order to be of any help to you, we need to see the output of >> 'shorewall dump' collected as described at >> http://www.shorewall.net/support.htm#Guidelines. > > here it is: http://rafb.net/p/SptseQ56.html > It tu

Re: [Shorewall-users] Remote user authentication before for full network access

2008-12-18 Thread Colin Alston
On 2008/12/18 05:30 PM Jeff Greer wrote: > Hi, > > I am wondering if there is some built in mechanism for authenticating > users so that they can gain full access to the network behind the > firewall? > It has been several years since I used Shorewall but find myself in > need of it again. When I w

Re: [Shorewall-users] Bridging with one interface

2008-12-18 Thread The Peach
On Thu, 18 Dec 2008 07:11:32 -0800 Shorewall wrote: > In order to be of any help to you, we need to see the output of > 'shorewall dump' collected as described at > http://www.shorewall.net/support.htm#Guidelines. here it is: http://rafb.net/p/SptseQ56.html -- The Peach ---

Re: [Shorewall-users] Remote user authentication before for fullnetwork access

2008-12-18 Thread Robert K Coffman Jr. -Info From Data Corp.
> When I was using it before I hacked pop-before-smtp to open the full network to users and was wondering if there was a built in way to do this now. This question is not at all clear, but it sounds like you are describing a VPN. --

[Shorewall-users] Remote user authentication before for full network access

2008-12-18 Thread Jeff Greer
Hi, I am wondering if there is some built in mechanism for authenticating users so that they can gain full access to the network behind the firewall? It has been several years since I used Shorewall but find myself in need of it again. When I was using it before I hacked pop-before-smtp to open th

Re: [Shorewall-users] Bridging with one interface

2008-12-18 Thread Shorewall Geek
The Peach wrote: > Hello all, > first of all I must admit I'm a total newbie on firewall related things. > Anyway: I'm trying to setup a small NAS in my LAN (behind a router) as a > *services* provider (ftp, web, openvpn ... ). The box has only one interface: > eth0. > > For OpenVPN to work as

[Shorewall-users] Bridging with one interface

2008-12-18 Thread The Peach
Hello all, first of all I must admit I'm a total newbie on firewall related things. Anyway: I'm trying to setup a small NAS in my LAN (behind a router) as a *services* provider (ftp, web, openvpn ... ). The box has only one interface: eth0. For OpenVPN to work as expected with a tap interface