Re: [Shorewall-users] Using Shorewall to remove martian warnings from kernel log

2023-10-19 Thread David Watkins
i Di Paola wrote: > Hi, > > Not sure about the log, but a quick workaround would be to add 172.26 as > an alias to the shorewall gateway. > > On Wed, Oct 18, 2023, 15:09 David Watkins wrote: > >> Hi, >> >> I'm a long time shorewall user, but with very basic

[Shorewall-users] Using Shorewall to remove martian warnings from kernel log

2023-10-18 Thread David Watkins
Hi, I'm a long time shorewall user, but with very basic skills, running a simple 2 port firewall between my ISP and a home network. Home network is on 192.168.0.x My wife has configured her laptop NIC with both a 192.168 address and a 172.16.x address, so that she can connect to a private develo

Re: [Shorewall-users] Home user shorewall configuration

2020-10-29 Thread David Watkins
On Thu, 29 Oct 2020 at 05:31, Aero Maxx D wrote: > Hello, > > I’m new to this group and to shorewall also. I’ve read the installation > and configuration guides for two interfaces, but I’m not sure they match > the setup I have at home. > > I currently have the following two pieces of DCE equipm

Re: [Shorewall-users] Is this a DOS attack?

2020-01-03 Thread David Watkins
> > > 2. Why is shorewall correctly blocking these packets but my BT Homehub > is not? The Homehub firewall is enabled and set to drop all unsolicited > incoming traffic. > > Have you configured it to send all incoming traffic to your internal > firewall (DMZ host) ? If so, then that might bypass

Re: [Shorewall-users] Is this a DOS attack?

2020-01-01 Thread David Watkins
To All who replied, Interesting that port 37970 is trending. My Googling failed to find that out so thanks for that pointer. I'm fairly sure my BT Homehub setup hasn't been compromised (except by BT themselves who seem to be able to fiddle with it if they wish). I'll change the admin password a

[Shorewall-users] Is this a DOS attack?

2020-01-01 Thread David Watkins
Dear All, I'm a long time user of shorewall and haven't touched my shorewall configuration for quite a while. My configuration is a BT Homehub 5 as my ISP access point connected to my shorewall firewall box on eth1 (192.168.1.1). My home network is connected to the firewall on eth0 (192.168.0.1)

Re: [Shorewall-users] shorewall noob question

2012-02-08 Thread David Watkins
On 8 February 2012 12:03, Andy Kannberg wrote: > Hi David, > > Thanks for the answer. When I run iptables -L, I don't see any rules. > Shouldn't the rules generated by shorewall be visible in iptables ? I'd say so, yes. I certainly can. Are you saying iptables -L returns nothing, or that you ca

Re: [Shorewall-users] shorewall noob question

2012-02-08 Thread David Watkins
> - Hoe does shorewall stand against iptables ? Does it need iptables or do > both programs co-exist nicely ? I'm sure others can answer this question better than me but, crudely put, shorewall is a tool for configuring iptable rules. You need iptiables installed. When you run shorewall it build

Re: [Shorewall-users] shorewall does not see pppoe

2011-06-29 Thread David Watkins
On 29 June 2011 07:07, Frank Richards wrote: > Hi > >    Had shorewall working fine with net on dhcp have changed it to pppoe > updated shorewall interfaces and masg but the interface doesn't work in > or out. If I reboot with shorewall disabled access is fine. The ifconfig file is empty. Also,

Re: [Shorewall-users] iptables

2011-06-17 Thread David Watkins
> Are my shorewall restarts causing the problem? > I wanted a  static ip address but I wasn't able to get one for this user. Can you use their MAC address? -- EditLive Enterprise is the world's most technically advanced c

Re: [Shorewall-users] Time Matching Using shorewall

2010-11-09 Thread David Watkins
> Why, on FC10, are you using such an old version of Shorewall? (the > current version is 4.4.14) That was the version I got after installing FC10 and doing a 'yum update'. I tend not do do subsequent updates unless I know I need to. Not sure if that\'s a bad habit or not? > And from the trace

[Shorewall-users] Time Matching Using shorewall

2010-11-09 Thread David Watkins
I'm trying to introduce some time based rules into my shorewall firewall. I have reason to believe that my kernel and iptables installations support time matched rules (because I can create them directly using iptables), but I can't get shorewall to create any. AFAICT all I need to do is create t