[Shorewall-users] testing shorewall6 on a virtual machine

2012-07-05 Thread Andreas Rittershofer
I want to test shorewall6 in a scenario with several virtual machines. Each virtual machine has the interface eth0. With IPv4, I would assign an IP-alias to eth0:1 and so would have eth0 and eth0:1 as interfaces for shorewall6. How is this done with IPv6? Viele Grüße Andreas Rittershofer

Re: [Shorewall-users] Excluding by group in shore wall rules

2012-07-05 Thread Tom Eastep
On 07/04/2012 09:32 PM, Anshuman Aggarwal wrote: I'm actually running both squid and apt-cacher-ng. Squid uses apt-cacher-ng internally as a parent, only for deb packages to save bandwidth since apt-cacher handles that better than squid...and both do it transparently. Here is how it's

[Shorewall-users] Clearing TC stats

2012-07-05 Thread Fred Maillou
Hello,   Is there any way to clear the TC stats without having any disruption ? Thanks. -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed

[Shorewall-users] tcclasses: why need to mark in POSTROUTING?

2012-07-05 Thread Raphael Bauduin
Hi, I have shorewall configured on my gateway to limit incoming http traffic, and it didn't work until I configured the marking in the POSTROUTING. Here is the config I had (which didn't work): In shorewall.conf: MARK_IN_FORWARD_CHAIN=No In tcrules: # Mark http with mark 8 8 0.0.0.0/0

Re: [Shorewall-users] testing shorewall6 on a virtual machine

2012-07-05 Thread Andreas Rittershofer
Am 05.07.2012 um 16:17 schrieb Tom Eastep: On 07/05/2012 12:35 AM, Andreas Rittershofer wrote: I want to test shorewall6 in a scenario with several virtual machines. Each virtual machine has the interface eth0. With IPv4, I would assign an IP-alias to eth0:1 and so would have eth0 and

Re: [Shorewall-users] testing shorewall6 on a virtual machine

2012-07-05 Thread Brad Clarke
On Thu, Jul 5, 2012 at 10:44 AM, Andreas Rittershofer andr...@rittershofer.de wrote: Am 05.07.2012 um 16:17 schrieb Tom Eastep: On 07/05/2012 12:35 AM, Andreas Rittershofer wrote: I want to test shorewall6 in a scenario with several virtual machines. Each virtual machine has the interface

Re: [Shorewall-users] testing shorewall6 on a virtual machine

2012-07-05 Thread Andreas Rittershofer
Am 05.07.2012 um 17:53 schrieb Brad Clarke: On Thu, Jul 5, 2012 at 10:44 AM, Andreas Rittershofer andr...@rittershofer.de wrote: Am 05.07.2012 um 16:17 schrieb Tom Eastep: On 07/05/2012 12:35 AM, Andreas Rittershofer wrote: I want to test shorewall6 in a scenario with several virtual

Re: [Shorewall-users] testing shorewall6 on a virtual machine

2012-07-05 Thread Tom Eastep
On 07/05/2012 11:45 AM, Andreas Rittershofer wrote: Am 05.07.2012 um 09:35 schrieb Andreas Rittershofer: With IPv4, I would assign an IP-alias to eth0:1 and so would have eth0 and eth0:1 as interfaces for shorewall6. How is this done with IPv6? Solution: Definition of a second network