Re: [Shorewall-users] Changed ISP and DNAT stopped working for external IP addresses

2014-09-13 Thread Paolo Nesti Poggi
Den 08-09-2014 10:33, Paolo Nesti Poggi skrev: Den 08-09-2014 01:24, Tom Eastep skrev: On 9/5/2014 3:29 AM, Paolo Nesti Poggi wrote: Hi We use a shorewall 4.4.11.6, with a 3 NIC setup (net - dmz - localnet) that has been working flawlessly for years. Now we have changed broadband provider and

Re: [Shorewall-users] Changed ISP and DNAT stopped working for external IP addresses

2014-09-13 Thread Tom Eastep
On 9/13/2014 5:20 AM, Paolo Nesti Poggi wrote: Den 08-09-2014 10:33, Paolo Nesti Poggi skrev: Den 08-09-2014 01:24, Tom Eastep skrev: On 9/5/2014 3:29 AM, Paolo Nesti Poggi wrote: Hi We use a shorewall 4.4.11.6, with a 3 NIC setup (net - dmz - localnet) that has been working flawlessly for

[Shorewall-users] Shorewall 4.6.3.3

2014-09-13 Thread Tom Eastep
Shorewall 4.6.3.3 is now available for download. Problems corrected: 1) Including a PREROUTING SECTION in the accounting file unconditionally resulted in a fatal error: ERROR: The PREROUTING SECTION is not allowed when ACCOUNTING_TABLE=filter 2) Previously, the compiler

Re: [Shorewall-users] Changed ISP and DNAT stopped working for external IP addresses

2014-09-13 Thread Paolo Nesti Poggi
Den 13-09-2014 17:11, Tom Eastep skrev: On 9/13/2014 5:20 AM, Paolo Nesti Poggi wrote: Den 08-09-2014 10:33, Paolo Nesti Poggi skrev: Den 08-09-2014 01:24, Tom Eastep skrev: On 9/5/2014 3:29 AM, Paolo Nesti Poggi wrote: Hi We use a shorewall 4.4.11.6, with a 3 NIC setup (net - dmz -

[Shorewall-users] Dynamic DNS Within Shorewall Files

2014-09-13 Thread Kenneth Jacker
Good day! I just wanted to check with the list that, in fact, there is no way to have an IP address change during Shorewall's run time. My params file currently contains something like this: DESKTOP=`dig +short desktop.mynetgear.com` (I know that Tom discourages using domain names in the

[Shorewall-users] How to limit bandwidth hog

2014-09-13 Thread Paolo Prandini
I have a question that maybe has a general interest. Sometimes it happens that a customer has really a fast connection and can saturate the bandwidth to our email server, maybe just 5 seconds, but effectively every bit is allocated to this connection, and it is quite annoying for the other users.

Re: [Shorewall-users] Dynamic DNS Within Shorewall Files

2014-09-13 Thread Tom Eastep
On 9/13/2014 10:24 AM, Kenneth Jacker wrote: Good day! I just wanted to check with the list that, in fact, there is no way to have an IP address change during Shorewall's run time. My params file currently contains something like this: DESKTOP=`dig +short desktop.mynetgear.com`

Re: [Shorewall-users] How to limit bandwidth hog

2014-09-13 Thread Tom Eastep
On 9/13/2014 10:57 AM, Paolo Prandini wrote: I have a question that maybe has a general interest. Sometimes it happens that a customer has really a fast connection and can saturate the bandwidth to our email server, maybe just 5 seconds, but effectively every bit is allocated to this

Re: [Shorewall-users] Shorewall 4.6.3.3

2014-09-13 Thread Thomas D.
Hi Tom, is there a reason why you pulled the previous version (4.6.3.2) immediately after you announced 4.6.3.3? I am asking because the Gentoo ebuilds for example are referencing the shorewall.net mirror as authoritative source. So when you pull the old version but we haven't yet updated the

Re: [Shorewall-users] Shorewall 4.6.3.3

2014-09-13 Thread Tom Eastep
On 9/13/2014 2:38 PM, Thomas D. wrote: Hi Tom, is there a reason why you pulled the previous version (4.6.3.2) immediately after you announced 4.6.3.3? I am asking because the Gentoo ebuilds for example are referencing the shorewall.net mirror as authoritative source. So when you pull the

[Shorewall-users] shorewall-init fails 1 provider (vpn) interface unusable on boot -- but sys ends up fully up running after boot anyway. why?

2014-09-13 Thread PGNd
I'm attempting to troubleshoot boot-time failures for shorewall-init.service start, and the interface of one of my provider's interfaces (my vpn). I'm currently stymied by the fact that *despite* the failures -- for which I can't yet find the reason -- once *fully* booted, the system heals