On Wed, 2011-11-09 at 16:03 +0100, Simon Hobson wrote:
> Tom Eastep wrote:
> 
> >Will netmap (http://www.shorewall.net/netmap.html) serve your need?
> 
> Yes, I think it would be just the ticket. Should NETMAP show up when 
> I do "shorewall show capabilities" ?

No. There's no specific test for NETMAP but Squeeze supports it.
> 
> But then since the problem* came to light that's triggered this, 
> management have finally suggested we review our network setup. So 
> it's just possible I might be able to move to a routed setup 
> internally :-)
> 
> * It turns out that if two people attempt to access an SMB share via 
> many-to-one NAT, each connection attempt results in all other users 
> sharing the same IPv4 address to have their sessions terminated. It 
> only happens with Windows servers and clients which have enhanced 
> security turned on. It's been driving the web developers in the other 
> office nuts :D
> http://www.nynaeve.net/?p=93
> Brilliant protocol design, and something else that NAT breaks :-/
> 

I feel your pain.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to