Re: [Shorewall-users] Tc rules Help with multiISP+ squid& squidguard...

2006-10-17 Thread Tom Eastep
Joffrey FLEURICE wrote: > Tom wrote : >> My advice to you is still the same -- you are going to have to use > tcpdump >or ethereal to see what is happening. You have the computer > there in front >of you >> -- we don't. So only you are going to be able to solve this. We are > not. > >>From the dum

Re: [Shorewall-users] Multiple Isp & Traffic Shaping

2006-10-17 Thread Tom Eastep
Mike Lander wrote: > Hello to the list and Tom, >I am building a box with Fdc5 stock Kernel, 4 interface. > You can see their functions from the dump. eth2 is shut down > right now because its in a test environment right now with no > dmz servers on the proxy arp dmz. The two providers > are co

Re: [Shorewall-users] Shorewall 3.2.4 Debian Package

2006-10-17 Thread Jorge Armando Medina
On Sunday 15 October 2006 17:23, Tom Eastep wrote: > There is a Shorewall 3.2.4 .deb available at > http://idea.sec.dico.unimi.it/~lorenzo/shorewall/ > > -Tom Hello Thanks for the package, just one comment: when you install the package you get this message: WARNING the firewall won't

[Shorewall-users] Multiple Isp & Traffic Shaping

2006-10-17 Thread Mike Lander
Hello to the list and Tom, I am building a box with Fdc5 stock Kernel, 4 interface. You can see their functions from the dump. eth2 is shut down right now because its in a test environment right now with no dmz servers on the proxy arp dmz. The two providers are comcast and a 1.1 frac T-1 for t

[Shorewall-users] Email Test

2006-10-17 Thread Mike Lander
Hello list, I have been off the list for a long time. Tryed to post to the list and I was rejected. I belive the email addresses have all changed since I was on here last. Please forgive if this goes through. Thanks Mike ---

Re: [Shorewall-users] Tc rules Help with multiISP+ squid& squidguard...

2006-10-17 Thread Joffrey FLEURICE
Tom wrote : >My advice to you is still the same -- you are going to have to use tcpdump >or ethereal to see what is happening. You have the computer there in front >of you >-- we don't. So only you are going to be able to solve this. We are not. >From the dump you sent, it looks like many SYN pac

Re: [Shorewall-users] Tc rules Help with multiISP + squid& squidguard...

2006-10-17 Thread Tom Eastep
Joffrey FLEURICE wrote: > I have delete "lo" Zones And Interface and rebuild all the firewall >>From Local I ping www.google.fr with DNS resolution > DNSMASK installed on the firewall. > POSTFIX and Squid+SquidGuard Installed on firewall > All clients machines have the IP of Firewall for Dns resolu

Re: [Shorewall-users] Shorewall 3.2.4 Debian Package

2006-10-17 Thread Nick Leverton
On Monday 16 October 2006 01:23, Tom Eastep wrote: > There is a Shorewall 3.2.4 .deb available at > http://idea.sec.dico.unimi.it/~lorenzo/shorewall/ Upgraded fine on two machines here - one running Etch which previously had standard 3.0.7, and one running Backports.org on which I was previously

Re: [Shorewall-users] Tc rules Help with multiISP + squid& squidguard...

2006-10-17 Thread Joffrey FLEURICE
I have delete "lo" Zones And Interface and rebuild all the firewall >From Local I ping www.google.fr with DNS resolution DNSMASK installed on the firewall. POSTFIX and Squid+SquidGuard Installed on firewall All clients machines have the IP of Firewall for Dns resolution New Dump joint Without Sq