Re: [Shorewall-users] External connection appear coming from internal Shorewall IP - different ports

2014-07-06 Thread Tom Eastep
On 7/6/2014 6:29 PM, Guilsson . wrote: > Any hint about this ? > I frankly didn't understand what the problem was -- and as always, "it didn't work" isn't helpful. -Tom -- Tom Eastep\ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not

Re: [Shorewall-users] External connection appear coming from internal Shorewall IP - different ports

2014-07-06 Thread Guilsson .
Any hint about this ? On Mon, Jun 23, 2014 at 1:56 PM, Guilsson . wrote: > I have a weird need covered by FAQ 1F (http://shorewall.net/FAQ.htm#faq1f) > using "ugly hack" mentioned there. > > RULES: DNAT net loc:10.10.10.33: tcp > MASQ: eth1:10.10.10.33 eth0 10.10.10.11 tcp > (

Re: [Shorewall-users] Manually specify gateway MAC

2014-07-06 Thread Lee Brown
On Sun, Jul 6, 2014 at 9:48 AM, Tom Eastep wrote: > On 7/6/2014 8:57 AM, Tom Eastep wrote: >> On 7/6/2014 7:55 AM, Tom Eastep wrote: >>> On 7/6/2014 3:08 AM, Lee Brown wrote: Hi, One of the providers I use has their gateway on the other side of a radio bridge several miles away

Re: [Shorewall-users] Confused, as usual...

2014-07-06 Thread TN Patriot
On Sun, 06 Jul 2014 16:05:57 +0200 "matt darfeuille" wrote: > > > > Hi folks, > > > > I've honestly tried reading the FAQ's and the other references on the > > Shorewall website, but I either just don't know what I'm looking at or > > for, or somehow missed it. > > > > My small problem

Re: [Shorewall-users] Confused, as usual...

2014-07-06 Thread Göran Höglund
Hi We have the same setup where a apc ups is connected by usb to one server (master) that provide other servers (clients) with the ups information over tcp. Matts example below is what is needed for the other devices in your network to connect and talk to the master. Maybe you need to look ove

Re: [Shorewall-users] Manually specify gateway MAC

2014-07-06 Thread Tom Eastep
On 7/6/2014 8:57 AM, Tom Eastep wrote: > On 7/6/2014 7:55 AM, Tom Eastep wrote: >> On 7/6/2014 3:08 AM, Lee Brown wrote: >>> Hi, >>> >>> One of the providers I use has their gateway on the other side of a >>> radio bridge several miles away. Occasionally the MAC detection that >>> Shorewall does f

Re: [Shorewall-users] Manually specify gateway MAC

2014-07-06 Thread Tom Eastep
On 7/6/2014 7:55 AM, Tom Eastep wrote: > On 7/6/2014 3:08 AM, Lee Brown wrote: >> Hi, >> >> One of the providers I use has their gateway on the other side of a >> radio bridge several miles away. Occasionally the MAC detection that >> Shorewall does fails and prevents Shorewall from starting. >> >

Re: [Shorewall-users] Manually specify gateway MAC

2014-07-06 Thread Tom Eastep
On 7/6/2014 3:08 AM, Lee Brown wrote: > Hi, > > One of the providers I use has their gateway on the other side of a > radio bridge several miles away. Occasionally the MAC detection that > Shorewall does fails and prevents Shorewall from starting. > > Is there a way to specify the MAC address ma

Re: [Shorewall-users] Shorewall 4.6.1.2 / CentOS6.5 / ipset / SELinux

2014-07-06 Thread Tom Eastep
On 7/6/2014 2:45 AM, Lee Brown wrote: > Dear All, > > I could find no reference to SELinux in the documentation to this, > hopefully it helps others. > When I added ipset into the mix and played around from the command > line, everything worked as expected. However during boot, shorewall > compla

Re: [Shorewall-users] Confused, as usual...

2014-07-06 Thread matt darfeuille
Most basic open rule format: ACCEPT SRCzone DSTzone proto port EG: ACCEPT zone1 zone2 tcp,udp 3551 -Matt On 6 Jul 2014 at 8:00, TN Patriot wrote: > > Hi folks, > > I've honestly tried reading the FAQ's and the other references on the > Shorewall website, but I either just don't know what I

[Shorewall-users] Confused, as usual...

2014-07-06 Thread TN Patriot
Hi folks, I've honestly tried reading the FAQ's and the other references on the Shorewall website, but I either just don't know what I'm looking at or for, or somehow missed it. My small problem - I've installed apcupsd on my Slackware 14.1 and need to somehow make port 3551 open/seeab

[Shorewall-users] Shorewall 4.6.1.2 / CentOS6.5 / ipset / SELinux

2014-07-06 Thread Lee Brown
Dear All, I could find no reference to SELinux in the documentation to this, hopefully it helps others. When I added ipset into the mix and played around from the command line, everything worked as expected. However during boot, shorewall complains: 00:36:00 ERROR: ipset names in Shorewall confi

[Shorewall-users] Manually specify gateway MAC

2014-07-06 Thread Lee Brown
Hi, One of the providers I use has their gateway on the other side of a radio bridge several miles away. Occasionally the MAC detection that Shorewall does fails and prevents Shorewall from starting. Is there a way to specify the MAC address manually for these gateways in the providers file? I