Re: [Shorewall-users] hShorewall 4.5.20

2013-08-27 Thread Simon Matter
It looks as problem in 4.5.20 folder only. http://canada.shorewall.net/pub/shorewall/4.5/shorewall-4.5.20/releasenotes.txt Forbidden You don't have permission to access /pub/shorewall/4.5/shorewall-4.5.20/releasenotes.txt on this server. Apache Server at canada.shorewall.net Port 80

Re: [Shorewall-users] hShorewall 4.5.20

2013-08-27 Thread Hristo Benev
Problem is caused by following permission -rwxr-x--- it should be -rw-r--r-- instead. I did fix it temporary on canada.shorewall.net, but it has to be fixed on master. http://canada.shorewall.net/pub/shorewall/4.5/shorewall-4.5.20/ Оригинално писмо От: Simon Matter

[Shorewall-users] Routing from one vpn to another one

2013-08-27 Thread Luca Camillo
Hi all, I have a firewall with openvpn roadwarrior clients and strongswan ipsec connetion to another network and I want to allow roadwarriors to connect to the ipsec vpn network. Is it possible? strongswan ipsec ip address: eth1:10.168.0.0/24 openvpn roadwarrior: tun+:172.19.254.0/24

[Shorewall-users] stoppedrules file in 4.5.4

2013-08-27 Thread Thomas Harold
We have a bonded pair of ethernet ports (eth0+eth1 - bond0) defined in /etc/shorewall/interfaces as: loc bond0 The /etc/shorewall/zones is: fw firewall loc ipv4 net ipv4 When shorewall is stopped, I want to still allow traffic from the local zone (bond0) to the firewall to open