Re: [Shorewall-users] AutoBL issues on CentOS 6

2013-10-08 Thread Simon Matter
>> On 10/7/2013 6:18 AM, Simon Matter wrote: >>> Hi Tom and all, >>> >>> I started to play a bit with the AutoBL action on a CentOS 6 box and >>> ran >>> into the following problems: >>> >>> 1) The action.AutoBL doesn't work for me until I patch it like so: >>> >>> --- /usr/share/shorewall/action.A

Re: [Shorewall-users] Bug with H323 helper? Shorewall 4.5.16.1 as packaged up for Debian.

2013-10-08 Thread Jim Barber
On 8/10/2013 11:25 PM, Tom Eastep wrote: > > Jim, > > There is a bug. > > Patch attached. > > patch /usr/share/shorewall/Shorewall/Config.pm < H323.patch > > -Tom Thank you. The patch has fixed the problem. - Jim Barber

[Shorewall-users] Shorewall 4.5.21.1

2013-10-08 Thread Tom Eastep
Shorewall 4.5.21.1 is now available for download. Problems Corrected: 1) Problems with the Shorewall Init installer (install.sh) were corrected. These problems affected initial Gentoo and Debian installs. 2) A problem that prevented multiple ICMP/ICMP6 types to be specified in a ru

[Shorewall-users] tc shaping with shorewall

2013-10-08 Thread Roland RoLaNd
A lot of information exists online, yet none are thorough enough.i've read both complex and simple traffic shaping on shorewall.net my goal is the following: users are shaped to 50 KB/s unless connection is idle and that's where they can use it all. i tested the following, with no luck. /etc/sh

Re: [Shorewall-users] Shorewall dropping packets that should be forwarded

2013-10-08 Thread Mark D. Montgomery II
Quoting Tom Eastep : On 10/08/2013 09:09 AM, Mark D. Montgomery II wrote: Quoting Tom Eastep : On 10/7/2013 10:25 PM, Mark D. Montgomery II wrote: I had to restart one of my routers tonight and since then shorewall on it has been dropping SIP packets coming in from one machine instead of

[Shorewall-users] QoS with virtual devices

2013-10-08 Thread Nico Pagliaro
Hi everybody, I have a question about this: I have a web-server with a 1gb up-link and with 3 virtual devices eth0 eth0:0 eth0:1 I have an apache running in eth0 and streaming services running in eth0:0 and eth0:1 every virtual device with a different IP. So, if I would like to implement QoS to

Re: [Shorewall-users] Bug in shorewall6: specifying multiple icmp6 types

2013-10-08 Thread Mark van Dijk
Hi, >> Undefined subroutine &Shorewall::Chains::list_split called at >> /usr/share/shorewall/Shorewall/Chains.pm line 4488, <$currentfile> line 25. >> > > Patch attached. > Thanks Tom, this solves the issue! Mark --

Re: [Shorewall-users] Shorewall dropping packets that should be forwarded

2013-10-08 Thread Tom Eastep
On 10/08/2013 09:09 AM, Mark D. Montgomery II wrote: > > Quoting Tom Eastep : > >> On 10/7/2013 10:25 PM, Mark D. Montgomery II wrote: >>> >>> I had to restart one of my routers tonight and since then shorewall on >>> it has been dropping SIP packets coming in from one machine instead of >>> forw

Re: [Shorewall-users] Shorewall dropping packets that should be forwarded

2013-10-08 Thread Mark D. Montgomery II
Aha! I did conntrack -D -s and it removed a bunch of entries and the trunk came right back up. Thanks! Quoting Tom Eastep : On 10/7/2013 10:25 PM, Mark D. Montgomery II wrote: I had to restart one of my routers tonight and since then shorewall on it has been dropping SIP packets coming

Re: [Shorewall-users] Shorewall dropping packets that should be forwarded

2013-10-08 Thread Mark D. Montgomery II
Quoting Tom Eastep : On 10/7/2013 10:25 PM, Mark D. Montgomery II wrote: I had to restart one of my routers tonight and since then shorewall on it has been dropping SIP packets coming in from one machine instead of forwarding them to the freebpx server. Shorewall:net2all:DROP:IN=eth0 OUT= MA

Re: [Shorewall-users] Bug with H323 helper? Shorewall 4.5.16.1 as packaged up for Debian.

2013-10-08 Thread Tom Eastep
On 10/8/2013 2:19 AM, Jim Barber wrote: > Hi all. > > I can't seem to get the h323 connection tracking configured correctly for > Shorewall. > I am using the Debian Shorewall 4.5.16.1 package. > I am running a Debian 3.9 kernel like so: > > # uname -a > Linux gw 3.9-1-amd64 #1 SMP De

Re: [Shorewall-users] Bug in shorewall6: specifying multiple icmp6 types

2013-10-08 Thread Tom Eastep
On 10/8/2013 5:35 AM, Mark van Dijk wrote: > Hi Tom and list members, > > I had the following in my shorewall6 rules file: > > ACCEPT wan lan icmp 135,136 > > to accept ICMPv6 packets of type rtsol/adv. > > When restarting shorewall the following output was observed: > > Undefined subrouti

Re: [Shorewall-users] Shorewall dropping packets that should be forwarded

2013-10-08 Thread Tom Eastep
On 10/7/2013 10:25 PM, Mark D. Montgomery II wrote: > > I had to restart one of my routers tonight and since then shorewall on > it has been dropping SIP packets coming in from one machine instead of > forwarding them to the freebpx server. > > Shorewall:net2all:DROP:IN=eth0 OUT= MAC= SRC= extern

[Shorewall-users] Bug in shorewall6: specifying multiple icmp6 types

2013-10-08 Thread Mark van Dijk
Hi Tom and list members, I had the following in my shorewall6 rules file: ACCEPT wan lan icmp 135,136 to accept ICMPv6 packets of type rtsol/adv. When restarting shorewall the following output was observed: Undefined subroutine &Shorewall::Chains::list_split called at /usr/share/shorewall/

[Shorewall-users] Bug with H323 helper? Shorewall 4.5.16.1 as packaged up for Debian.

2013-10-08 Thread Jim Barber
Hi all. I can't seem to get the h323 connection tracking configured correctly for Shorewall. I am using the Debian Shorewall 4.5.16.1 package. I am running a Debian 3.9 kernel like so: # uname -a Linux gw 3.9-1-amd64 #1 SMP Debian 3.9.8-1 x86_64 GNU/Linux My version of iptables