Skip to main content

Thread: calling all shorewall experts I need some help configuring

-

the machine has 1 interface card br0

on machine openvpn, tap0 , eth0 bridged br0

when client connects via vpn to lan can ping vpn server no other machines on lan. ping returns unreachable

here are files /etc/shorewall

zones
code:
###############################################################################  #zone	type	options			in			out  #					options			options  fw	firewall  net	ipv4  loc:net	ipv4  vpn:loc ipv4
interfaces
code:
#zone	interface	broadcast	options  net     br0            	detect          dhcp,tcpflags,logmartians,nosmurfs
tunnels
code:
#type		zone		gateway		gateway zone    openvpn		net		0.0.0.0/0	 vpn
rules
code:
#action		source		dest		proto	dest	source		original	rate		user/	mark  #							port	port(s)		dest		limit		group    # reject ping "bad" net zone.. , prevent log being flooded..    ping/reject	net		$fw    # permit icmp traffic firewall net zone    accept		$fw		net		icmp    # permit custom connections    ssh/accept	net		$fw  accept		net		$fw		udp	1194
policy (i have no idea going on here adding things @ random see if work..
code:
#source		dest		policy		log level	limit:burst  $fw		all		accept  vpn		$fw		accept  vpn		all		accept  loc		$fw		accept  loc		all		accept  net		$fw		drop		info  net		all		drop		info  # following policy must last  all		all		reject		info

... after whole day of pouring on documentation no further.



Forum The Ubuntu Forum Community Ubuntu Official Flavours Support Networking & Wireless [ubuntu] calling all shorewall experts I need some help configuring


Ubuntu

Comments

Post a Comment

Popular posts from this blog

Convierte tu Raspberry en un NAS. Firmware fvdw-sl 15.3 - Raspberry Pi Forums

-
¿conocéis este proyecto? fvdw-sl 15.3 para raspberry pi. convierte la raspi en un nas. http://plugout.net/viewtopic.php?f=31&t=1880 llevo tiempo intentando encontrar la forma de hacer que una de mis raspberry se comporte como un nas. configurando samba, minidlna, transmision, ftp, nfs, etc. pues con esta distribución lo tengo todo hecho. lo instalé ayer y me tiene soprendido. ahora mi raspi es un nas, hecho y derecho. caracterísitcas. - interfaz web. que cambia en función de si eres el administrador o un usuario. - gestión de usuarios. puediendo dar distintos permisos carpetas y funciones. - gestión de carpetas - vpn - ftp - nfs - webdav - varios servidores dlna como minidlna, townky, etc - varios gestores de descarga como transmision, mldonkey, etc - gestión de periféricos usb como impresoras o webcam. - gestión de cron para automatizar procesos. - creo que se basa en arch linux. por cierto, estoy creando una tarea para que me exporte un archivo txt del dis...
Read more

How to format a Get Request

-
i have external server running mysql. have installed php script that, when accessed http deliver data 1 of tables. works fine browser: code: [select] http://www.seti.net/php/getevents.php i cannot figure out how send command arduino. have ethernetclient library working , can access google in example. when send command through client: code: [select] client.println("//get /php/getevents.php http/1.0"); the server returns: code: [select] </head><body> <h1>method not implemented</h1> <p>get /php/getevents.php not supported.<br /> what correct way format in arduino? i use send temperature web server. note lack of http version , additional blank line after - not sure whether difference important works: code: [select] void  sendtemptoserver() { char getrequest[80]; if (client.connect(server, 80))   {   sprintf(getrequest,"get /cgi-bin/arduino.cgi?reading=%s&arduino_id=23&sensor_id=1",t...
Read more

avrdude: verification error, first mismatch at byte 0x0000 0x0c != 0x62

-
hello, im confused uno r3, uploaded code quite few months in uno, working fine. now without having altered of circuits, trying upload code changes,im getting strange error "avrdude: verification error, first mismatch @ byte 0x0000          0x0c != 0x62" i tried research able solve issue,  im running kind of fuse bit being changed or clock speed altered, im pretty sure did not play around these items. any people, please . . thanks taz Arduino Forum > Using Arduino > Installation & Troubleshooting > avrdude: verification error, first mismatch at byte 0x0000 0x0c != 0x62 arduino
Read more