[Shorewall-users] shorewall + multi isp + script

2013-09-16 Thread nicolas du
hello i make a small script, i would want know if there is an other way dirrectly in shorewall to do the same thing: i have 4 provider: eth0 tun0 wlan0 eth4 tun0 pass through wlan0 my script make this: priority on tun0 then when the bandwith of tun0 is full > priority on eth0 then when the

Re: [Shorewall-users] routeback to same interface

2013-09-16 Thread Tom Eastep
On 9/15/2013 12:41 PM, İlker Aktuna wrote: > Very interestingly, after the upgrade , problem is solved. > I didn't understand how because the upgrade did not update any packages > related to kernel, netfilter , routing, iptables etc... > > Any ideas about how this happened ? No -- Are you sure t

Re: [Shorewall-users] shorewall + multi isp + script

2013-09-16 Thread Tom Eastep
On 9/16/2013 2:40 AM, nicolas du wrote: > hello i make a small script, > i would want know if there is an other way dirrectly in shorewall to do the > same thing: > > i have 4 provider: > eth0 > tun0 > wlan0 > eth4 > > tun0 pass through wlan0 > > my script make this: > priority on tun0 > then

Re: [Shorewall-users] Rsync rules for Shorewall

2013-09-16 Thread Alan McKay
On Mon, Sep 16, 2013 at 3:56 PM, Alan McKay wrote: > I'm guessing maybe my VOIP traffic shaping must be the cause but > we shall see.. Yup, I disable traffic shaping in shorewall.conf and rsync works fine. I did have this : TC_ENABLED=Internal so that uses tcrules, tcclasses, tcdevices eth0

Re: [Shorewall-users] shorewall alias interface

2013-09-16 Thread johnny bowen
Hey Maria, you're not going to be able to get two networks isolated from each other if you're using the same physical interface and using one switch. If you're trying to have a setup of security and control this is what I would do: Interfaces: neteth0detectdhcp,tcpflags

Re: [Shorewall-users] routeback to same interface

2013-09-16 Thread İlker Aktuna
Hi, No kernel wasn't installed. Uname output is as below: oot@router:~# uname -a Linux router 3.2.0-38-generic #61-Ubuntu SMP Tue Feb 19 12:20:02 UTC 2013 i586 i586 i386 GNU/Linux It was the same before the upgrade. -Original Message- From: Tom Eastep [mailto:teas...@shorewall.net]

Re: [Shorewall-users] routeback to same interface

2013-09-16 Thread Tom Eastep
On 9/16/2013 10:28 AM, İlker Aktuna wrote: > Hi, > > No kernel wasn't installed. > Uname output is as below: > oot@router:~# uname -a > Linux router 3.2.0-38-generic #61-Ubuntu SMP Tue Feb 19 12:20:02 UTC 2013 > i586 i586 i386 GNU/Linux > > It was the same before the upgrade. Interesting. -To

Re: [Shorewall-users] shorewall-lite error at start

2013-09-16 Thread Tom Eastep
On 9/16/2013 11:23 AM, matt darfeuille wrote: > here they are! > > administrative system > SBINDIR=/sbin #Directory where system > administration programs are installed > > firewall system: > SBINDIR=/usr/sbin > > The firewall system's shorewallrc file says that 'sho

Re: [Shorewall-users] shorewall-lite error at start

2013-09-16 Thread matt darfeuille
ok to resolved the cross-version issues i installed shorewall-core-4.5.7 along with shorewall-4.5.7 on the administrative system but the following error comes up: "ash: /usr/sbin/shorewall-lite: Permission denied" root@old:/usr/share/shorewall/open# /sbin/shorewall load 192.168.88.1 Enter passp

Re: [Shorewall-users] shorewall-lite error at start

2013-09-16 Thread Tom Eastep
On 9/16/2013 10:43 AM, matt darfeuille wrote: > Copy complete > Enter passphrase for key '/root/.ssh/id_rsa': > ash: /usr/sbin/shorewall-lite: not found > > any idea why? > In /usr/share/shorewall/shorewallrc, what is the setting of SBINDIR on both systems? Thanks, -Tom -- Tom Eastep\

Re: [Shorewall-users] Rsync rules for Shorewall

2013-09-16 Thread Alan McKay
On Mon, Sep 16, 2013 at 5:29 PM, Tom Eastep wrote: > This is a FAQ. Look at the traffic control section of > http://www.shorewall.net/FAQ.html Thanks but I am not sure what section you are talking about ... I don't see a Traffic Control section. I see a Traffic Shaping section but it only has on

Re: [Shorewall-users] Rsync rules for Shorewall

2013-09-16 Thread Alan McKay
On Mon, Sep 16, 2013 at 7:15 PM, Alan McKay wrote: > Am I missing something obvious? OK I guess you meant this one http://www.shorewall.net/FAQ.htm#faq97 Seems to work now. Thanks! -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of

Re: [Shorewall-users] Rsync rules for Shorewall

2013-09-16 Thread Tom Eastep
On 9/16/2013 4:20 PM, Alan McKay wrote: > On Mon, Sep 16, 2013 at 7:15 PM, Alan McKay wrote: >> Am I missing something obvious? > > OK I guess you meant this one > > http://www.shorewall.net/FAQ.htm#faq97 > > Seems to work now. Thanks! > > Sorry about that -- the first URL was a very old ve

Re: [Shorewall-users] Rsync rules for Shorewall

2013-09-16 Thread Tom Eastep
On 9/16/2013 1:08 PM, Alan McKay wrote: > On Mon, Sep 16, 2013 at 3:56 PM, Alan McKay wrote: >> I'm guessing maybe my VOIP traffic shaping must be the cause but >> we shall see.. > > Yup, I disable traffic shaping in shorewall.conf and rsync works fine. > > I did have this : > > TC_ENABLED=Int

Re: [Shorewall-users] shorewall-lite error at start

2013-09-16 Thread matt darfeuille
Ok it is now working like a charm! I just had to change SBINDIR=/usr/sbin to SBINDIR=/sbin in shorewallrc! Now it brings me to an other question! I want to keep install shorewall 4.5.7 for managing my firewall system but i would like to run an other version of shorewall(eg 4.5.18) for firewalli

Re: [Shorewall-users] Rsync rules for Shorewall

2013-09-16 Thread Alan McKay
Well it seems to be more than rsync ... scp gets throttled pretty severely too until I disable shorewall. I'm not sure what the heck I'm doing wrong. Will start looking into it. I'm guessing maybe my VOIP traffic shaping must be the cause but we shall see.. I started an scp of an 18G file and i

Re: [Shorewall-users] shorewall-lite error at start

2013-09-16 Thread matt darfeuille
here they are! administrative system SBINDIR=/sbin #Directory where system administration programs are installed firewall system: SBINDIR=/usr/sbin administrative system: root@old:~# cat /usr/share/shorewall/shorewallrc # # Debian Shorewall 4.5 rc file # BUILD=

Re: [Shorewall-users] Rsync rules for Shorewall

2013-09-16 Thread johnny bowen
Hi, Edit policy and add info to the loc record: loc$FWDROPinfo Then you can check your logs to see if the firewall is dropping it, and why it's dropping it. Is your rsync connection trying files over ssh? Do you have ssh open? On Mon, Sep 16, 2013 at 12:43 PM, Alan McKa

[Shorewall-users] Rsync rules for Shorewall

2013-09-16 Thread Alan McKay
Hi folks, I'm having an issue with rsync between my firewall and an internal box. It seems to be a shorewall issue (or correctly speaking, an issue with my shorewall config) because if I disable shorewall my rsync works fine. And I just can't find it documented anywhere what I need to do. I ha