LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Closed Thread
  Search this Thread
Old 08-18-2010, 03:18 AM   #1
fdelval
Member
 
Registered: Feb 2010
Posts: 107

Rep: Reputation: 15
check this shorewall script


I marked my previous post as solved and maybe nobody can reply there but me,

Just in case i made a new thread..




I was about to add another NIC to my box to replace the ip aliases config i did and well, i dont have any more PCI slots...

Regardless of the security issue discussed in the thread about the insecurity with differents subnets in the same segment, check please if this config is "enough"

eth2 -> 192.168.1.0
eth2:0 ->192.168.50.0
eth1 and eth0 are the net interfaces, 1 router each to provide wan failover (not implemented here)


Hosts:
Quote:
loc1 eth2:192.168.1.0/24
loc50 eth2:192.168.50.0/24
Interfaces
Quote:
net6 eth0 detect
net7 eth1 detect
- eth2 192.168.1.255,192.168.50.255
Masq
Quote:
eth0 eth2
eth1 eth2
eth2 eth2
Policy
Quote:
all all ACCEPT info
Rules
SECTION NEW
Quote:
REJECT loc50 loc1 all
Zones
Quote:
fw firewall
net6 ipv4
net7 ipv4
loc1 ipv4
loc50 ipv4

Problems / Doubs:

1) Is the hosts file required?

2) I guess i need doing masq from local to each external, and also from local to local even if they share the same interface, hence the eth2 eth2 in the masq file...

3) So is shorewall well implemented in these scritps to handle aliases?
 
Old 08-18-2010, 05:26 AM   #2
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by fdelval View Post
I marked my previous post as solved and maybe nobody can reply there but me,

Just in case i made a new thread..
I'm closing this thread, as it's unnecessary. I've marked your original thread back to unsolved (although marking as solved doesn't prevent members from replying), and I've also given it a courtesy bump for you. I'm not familiar with Shorewall so I can't be of much assistance, but surely someone will be along to help you out soon. Good luck!

Last edited by win32sux; 08-18-2010 at 05:30 AM.
 
  


Closed Thread



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
writing auto start script for static routes in suse linux10.3 with shorewall 3.0 nerdnero Linux - Newbie 5 06-18-2010 05:25 PM
Please Check Script ehegagoka Slackware 3 02-13-2007 07:44 AM
shorewall config question with /etc/shorewall/rules peter72 Linux - Networking 3 01-01-2007 09:33 PM
Startup scripts not continuing after Shorewall script charleswj Slackware 4 10-11-2005 03:47 PM
Script check Echo Kilo Programming 1 12-12-2004 12:55 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:05 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration