[Shorewall-users] Quagga & Shorewall

2008-11-11 Thread Rob Hicks
The Multiple ISP documentation for Shorewall (http://www.shorewall.net/MultiISP.html) suggests that Quagga (http://www.quagga.net/) "is a better solution." Does this means that Shorewall cannot be used in conjunction with Quagga? Otherwise, does anyone have any experience in using them together?

Re: [Shorewall-users] DNAT Issue

2008-10-01 Thread Rob Hicks
Thanks Martin! -Original Message- From: Martin Leben [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 01, 2008 2:54 PM To: shorewall-users@lists.sourceforge.net Subject: Re: [Shorewall-users] DNAT Issue Rob Hicks wrote: > Hi. Hi, > The test lab firewall has two NICS. One (eth

[Shorewall-users] DNAT Issue

2008-10-01 Thread Rob Hicks
problem is with the DNAT entry. If I enable it, when someone uses ssh to log into the firewall (the first rule), somehow the request is forwarded to the dmz:10.20.30.21 machine. If I comment out the DNAT rule, logging into the firewall using ssh works. Any help would be appreciated. Rob Hicks

Re: [Shorewall-users] Shorewall & FTPS

2008-09-11 Thread Rob Hicks
Sep 11, 2008 at 15:26, Rob Hicks <[EMAIL PROTECTED]> wrote: > Recently, a client has asked us to support the client side of FTPS. Are you being asked to support SFTP or FTPS? See [1] for a discussion of the different protocols. If you can, suggest SFTP instead of FTPS; it only needs o

[Shorewall-users] Shorewall & FTPS

2008-09-11 Thread Rob Hicks
We’ve been using Shorewall for about 3 years now. We basically lock down everything and then only open up what is absolutely necessary. Recently, a client has asked us to support the client side of FTPS. Our service can automatically move data to remote end points using a number of secure prot