Re: [Shorewall-users] DNAT behaves like DNAT-

2011-07-07 Thread Alexander Wilms
According to http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.11.1.txt and the corresponding patch not. - Ursprüngliche Mail - Von: Dominic Benson domi...@lenny.cus.org An: Shorewall Users shorewall-users@lists.sourceforge.net Gesendet: Donnerstag, 7. Juli 2011

Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-07 Thread Dominic Benson
On 7 Jul 2011, at 01:22, Tom Eastep wrote: On Jul 6, 2011, at 5:17 PM, J. Randall Owens wrote: I don't know about TPROXY in particular, but in most places in shorewall6, you can enclose the IPv6 addresses (including prefix length) in angle brackets, like so (all mine are in hosts so

Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-07 Thread J. Randall Owens
On Thu, 7 Jul 2011, J. Randall Owens wrote: Date: Thu, 7 Jul 2011 04:02:37 From: J. Randall Owens jrowens.sourcefo...@ghiapet.net To: Shorewall Users shorewall-users@lists.sourceforge.net I don't think you've shown us the actual tcrules line 4, have you? Does it start with

Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-07 Thread Dominic Benson
On 07/07/11 14:39, Tom Eastep wrote: On Thu, 2011-07-07 at 04:22 -0700, J. Randall Owens wrote: I take that back now. While it's not on that page, I see where Tc.pm has a place for picking out an IP address as a third parameter. In that case, I'd say that process_tc_rule is messing up at

Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-07 Thread J. Randall Owens
On Thu, 7 Jul 2011, Tom Eastep wrote: Date: Thu, 7 Jul 2011 06:39:41 From: Tom Eastep teas...@shorewall.net To: Shorewall Users shorewall-users@lists.sourceforge.net Subject: Re: [Shorewall-users] Tproxy with Shorewall6 On Thu, 2011-07-07 at 04:22 -0700, J. Randall Owens wrote: I take

Re: [Shorewall-users] Tproxy with Shorewall6

2011-07-07 Thread Tom Eastep
On Thu, 2011-07-07 at 14:59 +0100, Dominic Benson wrote: On 07/07/11 14:39, Tom Eastep wrote: Attached is a patch which allows an IPv6 address in the third parameter. Enclosing the address in [...] or... is optional. Great, that works perfectly! Thanks for confirming, Dominic --

[Shorewall-users] Connection problem via VPN (only regarding some destinations)

2011-07-07 Thread Dieter Egert
Hello I have a lan with e.g. these ip adresses: 192.100.100.104 wilhelm (AIX 4.3) 192.100.100.57eurexc (Windows 95, 100 MB ethernet card)) 192.100.100.62windows62 192.100.100.1 (Ubuntu 8, shorewall V3 installed, std gateway, eth0, eth1) External clients were connected via vpn to

Re: [Shorewall-users] Connection problem via VPN (only regarding some destinations)

2011-07-07 Thread Tom Eastep
On Thu, 2011-07-07 at 23:18 +0200, Dieter Egert wrote: Hello I have a lan with e.g. these ip adresses: 192.100.100.104 wilhelm (AIX 4.3) 192.100.100.57eurexc (Windows 95, 100 MB ethernet card)) 192.100.100.62windows62 192.100.100.1 (Ubuntu 8, shorewall V3 installed, std

Re: [Shorewall-users] blacklist range of port

2011-07-07 Thread Tom Eastep
On Jul 7, 2011, at 3:51 PM, m...@smtp.fakessh.eu wrote: hi folks with the file /etc/shorewall/blacklist blacklist can ban ip ports by specifying ~]# cat /etc/shorewall/blacklist # # Shorewall version 4 - Blacklist File # # For information about entries in this file, type man

Re: [Shorewall-users] blacklist range of port

2011-07-07 Thread Tom Eastep
On Jul 7, 2011, at 4:11 PM, Tom Eastep wrote: On Jul 7, 2011, at 3:51 PM, m...@smtp.fakessh.eu wrote: hi folks with the file /etc/shorewall/blacklist blacklist can ban ip ports by specifying ~]# cat /etc/shorewall/blacklist # # Shorewall version 4 - Blacklist File # # For