[Shorewall-users] Many Thnaks....Re: DNSSEC query-

2010-05-02 Thread Benedict simon
Dear Tom, A million Thanks for the wise reply and really do apprecite . and really soory for the bother Actually I was just a bit tensed and confused moreover there gonna be a review of our websites these days But i do feel a bit relaxed. By the way I have been using shorewall for the last 2 y

Re: [Shorewall-users] DNSSEC query

2010-05-02 Thread Tom Eastep
On 05/02/2010 12:00 PM, Benedict simon wrote: > > really apprecite your help > soory for my immature questions > I've told you everything I know about DNSSEC. You can read the RFCs and web sites about the subject as well as I can. I can assure you that DNSSEC has not been mentioned on either of

Re: [Shorewall-users] DNSSEC query

2010-05-02 Thread Benedict simon
> Benedict simon wrote: > >> >> Now I would really apprecte if someone could advise me and help me on >> the >> above issue. do I need to do any change in our firewall or no >> > > DNSSEC changes the DNS payload contents and length but not the header > contents; the latter is all that a packet fil

Re: [Shorewall-users] DNSSEC query

2010-05-02 Thread Tom Eastep
Benedict simon wrote: > > Now I would really apprecte if someone could advise me and help me on the > above issue. do I need to do any change in our firewall or no > DNSSEC changes the DNS payload contents and length but not the header contents; the latter is all that a packet filter like Netfi

[Shorewall-users] DNSSEC query

2010-05-02 Thread Benedict simon
Dear All, I just received the below mail from my ISP - On May 5th 2010 domain name system (DNS) will switch over to a new, more secure protocol “DNSSEC”. DNSSEC adds digital signatures to normal DNS queries, substantially reducing the risk of attacks such as the Kaminsky exploit

Re: [Shorewall-users] Kernel Panic on Masq Enable with Shorewall 4.4.8 & 2.6.27.45-0.1-default #1 SMP

2010-05-02 Thread Tom Eastep
On 05/02/2010 04:48 AM, Laurent CARON wrote: > On 02/05/2010 11:44, Mac Smith wrote: >> I agree there's no way IPTABLES could cause kernel panic > > It happened to me a while ago when I was playing with different iptables > versions and different kernels. > > The userland was simply not compatib

Re: [Shorewall-users] Kernel Panic on Masq Enable with Shorewall 4.4.8 & 2.6.27.45-0.1-default #1 SMP

2010-05-02 Thread Laurent CARON
On 02/05/2010 11:44, Mac Smith wrote: > I agree there's no way IPTABLES could cause kernel panic It happened to me a while ago when I was playing with different iptables versions and different kernels. The userland was simply not compatible with the kernel. I however doubt of such problems with

Re: [Shorewall-users] Kernel Panic on Masq Enable with Shorewall 4.4.8 & 2.6.27.45-0.1-default #1 SMP

2010-05-02 Thread Mac Smith
I agree there's no way IPTABLES could cause kernel panic What do u say tom Mac Sent from my iPhone On 02-May-2010, at 1:44 PM, Tuomo Soini wrote: > Ryan Blake wrote: > >> However, I'm not sure it will be >> saved as the machine crashes when I start it. Would you need the >> dump file? >> >

Re: [Shorewall-users] Kernel Panic on Masq Enable with Shorewall 4.4.8 & 2.6.27.45-0.1-default #1 SMP

2010-05-02 Thread Tuomo Soini
Ryan Blake wrote: > However, I'm not sure it will be > saved as the machine crashes when I start it. Would you need the > dump file? > > Please advise as I would really like to use Shorewall! Contact suse folks. Shorewall can't cause kernel panic by any means. Kernel panic means there is a seri

[Shorewall-users] Kernel Panic on Masq Enable with Shorewall 4.4.8 & 2.6.27.45-0.1-default #1 SMP

2010-05-02 Thread Ryan Blake
All, I have been using Shorewall successfully for years on many different machines and configurations. However, I just built a new box and wanted to setup shorewall on it. I'm running SuSE Linux Enterprise Server 11 and Shorewall 4.4.8 (latest version as of this e-mail) using the RPM download