[Shorewall-users] Multiple networks on a single zone

2016-01-30 Thread Alex
Hi, I'm using fedora22 with shorewall-4.6.11.1 which has been upgraded from an ancient version of shorewall. It's working fine, but I haven't really done much configuration so I'm not as familiar with configuration as I once was. We have a firewall with two interfaces - eth0 is a 10mbit link to th

Re: [Shorewall-users] rule for allowing users in LOC zone to the websites running in DMZ zone

2016-01-30 Thread Tom Eastep
On 01/30/2016 08:55 AM, Jeremy Baker wrote: > On 01/30/2016 11:39 AM, Tom Eastep wrote: >> On 01/29/2016 10:55 PM, Zenny wrote: >>> On 1/30/16, Tom Eastep wrote: On 1/29/2016 10:58 AM, Zenny wrote: > Hi, > > I am using 3-interface shorewall and working very well. However, I >

Re: [Shorewall-users] rule for allowing users in LOC zone to the websites running in DMZ zone

2016-01-30 Thread Jeremy Baker
On 01/30/2016 11:39 AM, Tom Eastep wrote: > On 01/29/2016 10:55 PM, Zenny wrote: >> On 1/30/16, Tom Eastep wrote: >>> On 1/29/2016 10:58 AM, Zenny wrote: Hi, I am using 3-interface shorewall and working very well. However, I could not figure out how can the users in LOC zone ac

Re: [Shorewall-users] Help with isolation

2016-01-30 Thread Tom Eastep
On 01/30/2016 12:22 AM, Iam7of9 Iam7of9 wrote: > I have a two-interface shorewall setup. > I also have a dhcp server which gives a small range of ip address to > unknown host, and allow them on the network. The rest are all fixed > addresses assigned according to macs. > I want to isolate ( not bei

Re: [Shorewall-users] rule for allowing users in LOC zone to the websites running in DMZ zone

2016-01-30 Thread Tom Eastep
On 01/29/2016 10:55 PM, Zenny wrote: > On 1/30/16, Tom Eastep wrote: >> On 1/29/2016 10:58 AM, Zenny wrote: >>> Hi, >>> >>> I am using 3-interface shorewall and working very well. However, I >>> could not figure out how can the users in LOC zone access the websites >>> running in DMZ zone? >>> >>>

[Shorewall-users] Help with isolation

2016-01-30 Thread Iam7of9 Iam7of9
I have a two-interface shorewall setup. I also have a dhcp server which gives a small range of ip address to unknown host, and allow them on the network. The rest are all fixed addresses assigned according to macs. I want to isolate ( not being able to see the other users) and put certain restricti