Re: TCP delay, solved

their ident lookups themselfs! The only way to go is to use iptables to reject those lookups. Cheers, Juri -- Juri Haberland [EMAIL PROTECTED]

Re: Rookie Question - Changing output interface

at the Advanced Routing HowTo (http://www.tldp.org/HOWTO/Adv-Routing-HOWTO.html) and the command ip. Maybe a combination of netfilter and routing (I think of marking the packets and then routing decision made by marks) will do the trick. Cheers, Juri -- Juri Haberland [EMAIL PROTECTED]

Re: ipchains and RH 7.2 firewall ftp masq problem

to put that into this script You should start using iptables. Ipchains in 2.4 kernels is only supported in a more-or-less compatible way that doesn't do all the things that ipchains on a 2.2 kernel did. Juri -- Juri Haberland [EMAIL PROTECTED]

Re: Unsolicited Bulk Spam (mostly from Asia) on netfilter@lists.samba.org

account on the machine. Juri -- Juri Haberland [EMAIL PROTECTED]

Re: Hello? Have you heard of Spam blocking?

I'm willing to provide any help if it is needed... -- Juri Haberland [EMAIL PROTECTED]

Re: basic firewall question

--servers 192.168.1.0/24 Is it possible? Should be doable with a bridging firewall. You need a patch that enables the kernel to use IPtables rules when bridging. Get it from http://bridge.sourceforge.net/ . There are even ready-to-install kernel RPMs for RedHat. Cheers, Juri -- Juri

Re: always transparent proxy...

? Have you compiled squid with --enable-linux-netfilter? Cheers, Juri -- Juri Haberland [EMAIL PROTECTED]

[OT] Re: squid log error with transparent proxy

and me pointed out in the other thread: Did you compile your squid with --enable-linux-netfilter? Juri -- Juri Haberland [EMAIL PROTECTED]