[Shorewall-users] AutoBL issues on CentOS 6

2013-10-07 Thread Simon Matter
Hi Tom and all, I started to play a bit with the AutoBL action on a CentOS 6 box and ran into the following problems: 1) The action.AutoBL doesn't work for me until I patch it like so: --- /usr/share/shorewall/action.AutoBL.orig 2013-10-01 00:59:42.0 +0200 +++

Re: [Shorewall-users] AutoBL issues on CentOS 6

2013-10-07 Thread Tom Eastep
On 10/7/2013 6:18 AM, Simon Matter wrote: Hi Tom and all, I started to play a bit with the AutoBL action on a CentOS 6 box and ran into the following problems: 1) The action.AutoBL doesn't work for me until I patch it like so: --- /usr/share/shorewall/action.AutoBL.orig 2013-10-01

Re: [Shorewall-users] Processing precedence: rule/MASQ

2013-10-07 Thread Tom Eastep
On 9/30/2013 4:53 AM, Fred Maillou wrote: There is a similar diagram at http://www.shorewall.net/NetfilterOverview.html. Not shown in that diagram is the case where a local process sends a packet to another local process. Unfortunately this URL currently returns 'not found'. Fred.

Re: [Shorewall-users] AutoBL issues on CentOS 6

2013-10-07 Thread Simon Matter
On 10/7/2013 6:18 AM, Simon Matter wrote: Hi Tom and all, I started to play a bit with the AutoBL action on a CentOS 6 box and ran into the following problems: 1) The action.AutoBL doesn't work for me until I patch it like so: --- /usr/share/shorewall/action.AutoBL.orig 2013-10-01

Re: [Shorewall-users] TCCLASSES vs Providers

2013-10-07 Thread Nico Pagliaro
Tom can you give me a hand here? Thanks On Fri, Oct 4, 2013 at 4:58 PM, Nico Pagliaro nico...@gmail.com wrote: My shorewall version is 4.5.0.2 and my kernel is 2.6.18 On Fri, Oct 4, 2013 at 4:36 PM, Nico Pagliaro nico...@gmail.com wrote: Thanks Toms for your reply. Suppose this example:

Re: [Shorewall-users] TCCLASSES vs Providers

2013-10-07 Thread Tom Eastep
On 10/7/2013 9:19 AM, Nico Pagliaro wrote: Tom can you give me a hand here? Thanks Nico, If you have specific questions, I will try to answer them. But I'm not going to create the configuration for you. -Tom -- Tom Eastep\ When I die, I want to go like my Grandfather who Shoreline,

Re: [Shorewall-users] TCCLASSES vs Providers

2013-10-07 Thread Nico Pagliaro
Tom that's the problem, I don't know how to solve this and I don't know if I can do it. Now in my configuration I have only prerouting working great, so the problems comes to my when I need to mix prerouting and forward with the same ISP like the example I wrote. Que question is how I can

Re: [Shorewall-users] TCCLASSES vs Providers

2013-10-07 Thread Tom Eastep
On 10/7/2013 6:08 PM, Nico Pagliaro wrote: Tom that's the problem, I don't know how to solve this and I don't know if I can do it. If you don't try, then it is certain that you will not do it. You *cannot* use PREROUTING marking rules for QOS if you have more than one provider. I recommend

[Shorewall-users] Shorewall dropping packets that should be forwarded

2013-10-07 Thread Mark D. Montgomery II
I had to restart one of my routers tonight and since then shorewall on it has been dropping SIP packets coming in from one machine instead of forwarding them to the freebpx server. Shorewall:net2all:DROP:IN=eth0 OUT= MAC=removed SRC=my home network external ip DST=server network external