[Shorewall-users] temporary "Trust connections" mode?

2010-12-12 Thread Christ Schlacta
is there a way to configure shorewall to allow all traffic on a new device (vlan actually) temporarily, and to treat that device as completely unprotected (but also not add routing rules for it) so I can handle finalizing some config information for that vlan before converting it/adding it to a

Re: [Shorewall-users] temporary "Trust connections" mode?

2010-12-12 Thread Tom Eastep
On 12/11/10 11:58 PM, Christ Schlacta wrote: > is there a way to configure shorewall to allow all traffic on a new > device (vlan actually) temporarily, and to treat that device as > completely unprotected (but also not add routing rules for it) so I can > handle finalizing some config informati

[Shorewall-users] weird fail with conversion to bridges?

2010-12-12 Thread Christ Schlacta
I'm converting my network from a "one interface per segment" to a "single connection with vlans", well, some hardware I have requires using different vlan IDs. suffice it to say I need bridges to connect a few different vlans that should all be one but can't be because of firmware constraints.

Re: [Shorewall-users] weird fail with conversion to bridges?

2010-12-12 Thread Simon Hobson
Christ Schlacta wrote: >... far as I can tell, the bridges are set up right and working, Does traffic flow if you clear Shorewall (ie do "shorewall clear") ? If not then you need to fix that before trying to get Shorewall working. >is there more I need to do to handle a bridge device in ubuntu

Re: [Shorewall-users] weird fail with conversion to bridges?

2010-12-12 Thread Christ Schlacta
On 12/12/2010 2:39 PM, Simon Hobson wrote: > Christ Schlacta wrote: >> ... far as I can tell, the bridges are set up right and working, > Does traffic flow if you clear Shorewall (ie do "shorewall clear") ? > If not then you need to fix that before trying to get Shorewall > working. > >> is there m