Re: [Shorewall-users] Accounting avoid reset

2014-09-17 Thread John Doe
From: RYAN M. vAN GINNEKEN >I have mostly successfully gotten accounting working using this doc >http://shorewall.net/Accounting.html >By mostly i mean i get output when i run shorewall show web and even more when >i run shorewall show >However counters seem to get reset each time i restart sho

[Shorewall-users] Internal traffic shapping...

2014-03-25 Thread John Doe
Hi, I am trying to switch on internal traffic shaping and I am wondering if I set it up correctly...  I have clients behind a firewall connected to 3 providers. I have 1 SDSL and 2 ADSL:   tcdevices:     eth1  4mbit  4mbit     eth2  6mbit  796kbit     eth3  6mbit  796kbit I setup 4 classes fo

Re: [Shorewall-users] shorewall accounting

2013-10-28 Thread John Doe
From: Tom Eastep > On 10/26/2013 1:32 PM, Roland RoLaNd wrote: >> i have per ip accounting setup and running. >> i can see per ip usage by executing iptaccount -l tablename >> but i'm wondering if there's a way to export this data to a file, >> or maybe into a database? > > No. > >> >> P

Re: [Shorewall-users] lsm configuration issues...

2013-09-23 Thread John Doe
From: Tom Eastep > Rather than running ${VARDIR}/firewall, you can just run > ${SBINDIR}/shorewall (usually /sbin/shorewall or /usr/sbin/shorewall): > >     shorewall disable >     shorewall enable Thx, JD -- LIMITED

Re: [Shorewall-users] lsm configuration issues...

2013-09-23 Thread John Doe
From: Tom Eastep > To: shorewall-users@lists.sourceforge.net > Cc: > Sent: Tuesday, September 10, 2013 6:34 PM > Subject: Re: [Shorewall-users] lsm configuration issues... > > On 09/10/2013 08:24 AM, John Doe wrote: >> Hi, >> >> I use shorewall-4.5.4 + ls

[Shorewall-users] lsm configuration issues...

2013-09-10 Thread John Doe
Hi, I use shorewall-4.5.4 + lsm-0.143 and it does not seem to work as expected... When all providers are up, everything seems fine. When one goes down, lsm says "link down event"... and it seems ok but we then experience some problems such as a few unreachable sites, DNS problems... If I rem

Re: [Shorewall-users] Multi isps configuration...

2013-07-25 Thread John Doe
From: John Doe > I did configure lsm; but not tried it yet. > Just wondering about the /etc/lsm/shorewall.conf file. > It seems that the checkips are set to the ISP gateaways. > Is that so? > When we have network issues, the gateway is fine; but the traffic behind is > n

Re: [Shorewall-users] Multi isps configuration...

2013-07-25 Thread John Doe
From: John Doe > From: Tom Eastep >> On 07/24/2013 09:14 AM, Tom Eastep wrote: >>>   You must install and configure LSM (Link Status Monitor). >> And configure all provider interfaces as 'optional'. I did configure lsm; but not tried it yet. Just wondering

Re: [Shorewall-users] Multi isps configuration...

2013-07-25 Thread John Doe
From: Tom Eastep > On 07/24/2013 09:14 AM, Tom Eastep wrote: >> On 07/24/2013 09:03 AM, John Doe wrote: >>> we have a 3 isps balanced configuration. >>> When all are up, everything is fine. >>> But when we lose one, we basically lose all connectivity... &

[Shorewall-users] Multi isps configuration...

2013-07-24 Thread John Doe
Hi, we have a 3 isps balanced configuration. When all are up, everything is fine. But when we lose one, we basically lose all connectivity... Do we have to (not) do something for failover to work? Thx, JD -- See everyt

Re: [Shorewall-users] Accounting...

2013-07-22 Thread John Doe
From: Tom Eastep > On 07/22/2013 03:12 AM, John Doe wrote: >> I have a vpn on an adsl line and I wanted to add its traffic to the adsl >> accounting. >> The two separated accounting rules seem to work fine. >> >>   all_vpn -      eth0:192.168.0.0

[Shorewall-users] Accounting...

2013-07-22 Thread John Doe
Hi, I have a vpn on an adsl line and I wanted to add its traffic to the adsl accounting. The two separated accounting rules seem to work fine.   all_vpn -   eth0:192.168.0.0/16 tun0    tcp   all_vpn -   tun0    eth0:192.168.0.0/16 tcp   all_vpn -   eth0:192.168.0.0/16 tu