Re: [Shorewall-users] Viewing my cable modem's status page from LAN/FW

2020-12-15 Thread Sam
On 12/15/20 5:06 PM, Paul Elliott wrote: Hi all, I have something of a puzzle that I am trying to sort out. My setup is relatively simple. I have a minorly modified dual homed shorewall setup - three zones (net, fw and loc) and I bind net and loc to the external and internal NICs in the firewal

Re: [Shorewall-users] Viewing my cable modem's status page from LAN/FW

2020-12-15 Thread Eddie
On 12/15/2020 3:39 PM, Justin Pryzby wrote: On Tue, Dec 15, 2020 at 11:06:34PM +, Paul Elliott wrote: My cable modem sits outside the firewall (on the net NIC) on the IP address 192.168.100.1, and with my current setup I cannot connect to it, either from the internal network or the firewal

[Shorewall-users] dhcp relay agent

2020-12-15 Thread Vieri Di Paola
Hi, I configured dhcrelay on my shorewall router to send DHCP requests to a remote DHCP server. I need to listen for DHCP requests on on one interface (say lan.1). However, this interface has multiple IP addresses/netmasks. The remote DHCP server has only one scope and only one of the IP addresses

Re: [Shorewall-users] shorewall and port mirroring on vlans

2020-12-15 Thread Vieri Di Paola
On Tue, Dec 15, 2020 at 10:47 PM Tom Eastep wrote: > > You haven't defined soc.50 to Shorewall, so it is rejecting all IPv4 > traffic to/from that interface. Missed that. Thank you very much for pointing that out to me. Vieri ___ Shorewall-users mail

Re: [Shorewall-users] Viewing my cable modem's status page from LAN/FW

2020-12-15 Thread Justin Pryzby
On Tue, Dec 15, 2020 at 11:06:34PM +, Paul Elliott wrote: > My cable modem sits outside the firewall (on the net NIC) on the IP > address 192.168.100.1, and with my current setup I cannot connect to > it, either from the internal network or the firewall. I would like to > do this in order to be

[Shorewall-users] Viewing my cable modem's status page from LAN/FW

2020-12-15 Thread Paul Elliott
Hi all, I have something of a puzzle that I am trying to sort out. My setup is relatively simple. I have a minorly modified dual homed shorewall setup - three zones (net, fw and loc) and I bind net and loc to the external and internal NICs in the firewall, and masquerade between the two (internal

Re: [Shorewall-users] shorewall and port mirroring on vlans

2020-12-15 Thread Tom Eastep
On 12/15/20 1:04 AM, Vieri Di Paola wrote: > I don't know if this can help, but the SOC VM admin is claiming that > only ARP traffic is seen there when there should also be plenty of > TCP/UDP traffic. > > So I've increased shorewall logging and noticed that some packets are > being rejected. The

[Shorewall-users] shorewall and port mirroring on vlans

2020-12-15 Thread Vieri Di Paola
I don't know if this can help, but the SOC VM admin is claiming that only ARP traffic is seen there when there should also be plenty of TCP/UDP traffic. So I've increased shorewall logging and noticed that some packets are being rejected. The SOC VM is a ssh and http server, but I cannot access th