Networking :: Hooking Up A Firewall Into A OS X Network?
Feb 25, 2010
I am a networking admin of a network running a mac osx server Running the Darwin 9.8.0 kernel. My goal is to get a firewall computer running ubuntu with the program IQfirewall. My networking hardware goes ( __ cat 5 cables)
*internet* _____DS1___ cisco router_____ a small switching hub___OSX server___a ProCurve switch ___ a cat 5 box____ routers ___ computers.
from what i have read I want the server to act like a gatway/firewall and sort of have the server forward packets to the OSX server.How would I get started. IQfirewall uses a GUI interface and I can later copy my rules if you would want to see them. it is based off of iptables
I greet you at the same time ask me to help with a problem I have and I could not solve. Within the requirements I have is to connect a network that is connected by VPN to my LAN.The detail is I could have connection to the network by adding a network card (eth3) on the firewall and connect to the VPN router (DLINK) cable network, but I can not reach the other estin that are in the VPN.
It should be noted if I add a station within the network: 10.30.1.X/24 has no problems connecting with the other destinations.Physically this router is inside my 10.30.1.X DATA CENTER another wan.
I suspect this is an initial configuration bug. All firewall logs seem to be going to all three files. That causes a lot of clutter in the log files, and makes it difficult to see whether there are any serious problems being logged.
i wanted to deploy a firewall for my wireless network. low power footprint & small device that can be installed with linux to create a small firewall appliance.i might try configuring shorewall on it.
I want to write a custom rule to allow all connections to the ip addresses on my local network (192.168.2.2 through ...99) but I don't know how. I know adding a custom rule asks me to read a file and put it in "iptables" format, but I don't know how...
I am new with IP tables stuff and i have a problem....i have a pc Contain a fedora OS and i want to make a small network (4 PCs Contain XP OS) and using the pc of fedora OS as a firewall i want to Prevent the ping (i think it called(ICMP)) in the privat network and prevent one of the PCs from Browsing internet(prevent port 80 and 81 as i think) and i still don't know how to make the internet go Through the firewall to the private network...
I am attempting to set up a firewall in my home network environment. the rest of the environment is windows, sorry I am attempting now so bear with me. what I have is a cable modem coming in, then my fedora 11 box with 2 nics, then the wireless router and the rest of the network.
everything works fine until I put the linux box in. If I put the firwall in the firewall sees the internet but the wireless router directly after does not. I am doing something wrong with the dhcp I am guessing. I dont want the firewall to give the address to the network I want the router to. I tried to get the firewall to do it (yum install dhcp leafnode) but it kept saying something didn't work right.
so I figure I will let the cable modem give the firewall an ip and the router give the rest of the network their ip's but how do I get the firewall and router to see each other and allow passthrough?
I have just installed CentOS and it is working fine!I made a masquerade with the document there: I didn't used the script, because right now, I do not completely understand it, and obviously I am not modifying anything by leaving it like that.I was using Mandriva before and I am used to graphical tools My questions are:I add the following lines in my iptables:
[root@localhost ~]# service iptables stop [root@localhost ~]# iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE [root@localhost ~]# service iptables save
I'm working on setting up access for our developer via Telnet, we are on a local network behind a physical firewall. I set up the standard Telnet service for Fedora15 and from localhost I can login via any user and root.... However I cannot login from another terminal on the LAN, even though I can ping and FTP to the fedora15 box. I added the firewall rules for telnet, that did not work, so I disabled the firewall, still cannot get a connection via port 25. I feel either port 25 is closed in another manor or the telnet is restricted to the localhost.
Also I cannot login to root to configure the Firewall Desktop GUI, only standard users, is this an issue? I also cannot login to the console as root even though I use the correct password.I can only su to root and sometimes it is a PITA. There must be some settings to clear these issues up...
i have a hp 6500 e709a printer. have configured for network printing and would like to use the scan facility.i have tried to scan from the printer but it does not find the computer. the hp documents mention advanced firewall information on incoming udp ports and tcp ports etci believe it is with my machine as my son has a windows box with the hp software and i have managed to scan from that machine.
could set up a firewall on my linux machine? I have is to connect my router wired to the linux machine and then from the linux machine to my main computer, and obviously routing the internet connection through the linux box as a firewall. I use a Netgear DG834G router
I am learning to setup firewall in my home for that i have selected four system(sys1,sys2....sys4) for testing .I have configured sys2 to act as a firewall with two NIC. sys3 and sys4 are inside the firewall . sys1 is not connected to firewall for testing purpose.
the IP assignments are follows :
sys1 : ( fedora, not connected to firewall i am thinking, But i am not sure )
what happened is that sys1(not connected to firewall) can ssh to sys4(connected,inside firewall),since the rules are written not to ssh form sys1 to sys4..
then I came to know whatever the request I give, It directly goes as sys1 --> sys4. Not as sys1-----> sys2(firewall)---> sys4 .and the firewall is not filtering and processing anything for both inbound and outbound (i think it's my mistake some where). the requests are directly going inside without firewall.
My house is WiFi enabled. I am putting Live Fedora 14 to test, on my 2003 desktop pc, in the next 1 or 2 days. The first thing I would like to do with FEDORA is to hook it to my home WiFi. Where will I go on the screen, to do it?? by the time I boot I can do it with ease.
Samba is working correctly if Susefirewall2 is off. I have added Samba client and Samba Services for extern access but samba is not working when firewall is now on. Which services should I also add ?
I want some advice for making my system more secure. I want deactivate any network connection that is unnecessary. Only my browser and the update ability of zypper should have access to the internet. On windows there are personal firewalls.
How can I block internetaccess for all other programmes on openSUSE?
I think the subject title says it all, but well... that's what I would like to do, to buy a TV tuner with support for HD resolution (although I'll be working with a 15.6" 16:9 1366x768 display, laptop one) to hook up a PS3 and not having to spend some extra cash on a display (ideally).
Can anyone give me a hint on this? The only 'premise' I ideally pursue is for the device to fully work, I mean... fuck DVB-T per se, I'm not interested in TV reception, just to put the A/V signal out of the PS3 and onto the tuner and use a program like tvtime (ideally), but something that can work reliably (even if I have to grab a tarball or a cvs/svn/git tree and compile it myself, as I use a custom-made+deviated CLFS/LFS distro, I'm more than accustomed to compile everything by hand).
I have a Dell Inspiron 9300 and I recently installed Fedora 14. The computer has a built in Ethernet card, and I'm not sure about what exactly the card is, but I do know that I have a Wireless USB Netopia IEEE 802.11b (model # SWL-2300U) that worked fine on my XP, but now that I've changed over to Linux I can't seem to find this driver for Linux anywhere!
Is there a way to hook calls to new/malloc, delete/free in C++? I tried the following methods: LD_PRELOAD -> fails for malloc, because dlsym seems to depend on malloc -Wl,--wrap,malloc -> doesn't work for 'new' gcc hooks -> doesn't work always, e.g. for uclibc there are no hooks Are there any other methods I could try?
I'm having a really odd problem with my workspace switcher. First off, I keep 5 workspaces all in one row.
My problems: When I use the keyboard shortcuts Ctrl + Alt + Left or Ctrl + Alt + Right I can switch workspaces just fine, however I have a xbindkeys install set up to detect specific keypresses from my Logitech MX Revolution and spit out those very shortcuts, and they aren't working. When using the keyboard shortcuts to switch workspaces there's a new look to the visual aid that pops up in the middle of the screen. It's much boxier and ugly looking, and I'd like to get it back to the way it was before, with the larger boxes with rounded edges and no text. This started last night when I plugged my laptop into my Panasonic HDTV via S-Video. Can anyone tell me how to uninstall the workspace switcher component and reinstall it? I'm fairly new to Ubuntu and just want the default settings back. I'm running 10.04 btw.
I am trying to add a custom allow rule in the firewall for a range of IPs from 74.201.102.0 - 74.201.103.255, what exactly am I supposed to enter in the source box? I believe I have to add two separate rules for 102 and 103, and I put /24 at the end of both, is this correct to get the whole range of IPs?
1. Under openSUSE 11.2, I allowed printer sharing through CUPS by setting the Firewall to Allow Services of CUPS in the External Zone section. I don't see the CUPS option in the Allow Services of the Firewall under 11.4, any zone. Is my system missing something?2. If I turn off the Firewall, the client computer can see the printers, even get the broadcasted names. If I put port 631 in TCP of the Advanced setting of the External Zone, the client computer can see the printer too, but I know I read somewhere that putting 631 in the External Zone is basically allowing printer requests from the entire internet.
switched recently to 11.2 and it works fine for me as workstation I want to set up a router separating a part of the network and also acting as a firewall/proxy... Configured 2 Ethernet Interfaces, checked Ip forwarding in Yast but it does not forward the packets from the "internal" to the "external" network. Hovewer after I set up my router as default for machines on internal network I can ping the external interface but no adress on external network (particularly the one of the default router) !!! From the router I can reach both networks and the net via default gateway on external. Tried to:
a) switch firewall completely off b) iptables -P FORWARD ACCEPT c) masquarading internal adresses to the external network
my interfaces configuration looks like: eth0 Link encap:Ethernet HWaddr 00:13:D4:E3:A2:7B inet addr:192.168.1.34 Bcast:192.168.1.255 Mask:255.255.255.0 inet6 addr: fe80::213:d4ff:fee3:a27b/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
We have reason to ask this of you following some strange firewall behaviour - But don't panic If you use openSUSE 11.2 and you think: Your Firewall should be running You are not sure but think it should be check and report back here.
I'm trying to get OpenMPI (a parallel programming library) working on my home system. I have just two machines on it now, t61 and quad, connected through a router. (Which is also connected to cable modem for internet.) I can ssh between the machnes, mount directories with NFS, etc. However, I just can't get the OpenMPI to run. The OpenMPI message board suggested that the most probable cause is that the firewall is blocking TCP. I don't know how to tell if that's the problem, and can't find any manual for the SuSE firewall, while the various Wikis &c that pop up in a search don't provide any information that addresses my problem.
SuSE 10.0 X86 32 acting as my internet gateway and firewall.
eth0 is my internal interface network 192.168.0.0/24 IP 192.168.0.254 dsl0 is my internet connection and is a single ip PtP connection to my ISP.
My internal network is masquaraded onto the external network.
I run an smtp server on my gateway box that I need to be accessable to both the internal and external networks.
However I want to prevent machines on the internal network from establishing connections to external smtp servers, but still alow them to connect to the smtp server on the gateway to send email.
NOTE I do not want to force attempts to connect to [URL] 25 to be re-directed to my internal server I just want to drop or reject the connection.
The firewall up until now has just been configured through YaST, but am not afraid to edit script files if needed
The reason for doing this it to prevent spambots from being able to send through my isp, I keep my own machines clean but sometimes get asked to disinfect machines for other people (family members etc), where I need to connect to the outside world to get updates/virus defs etc, but don't want them spamming from my network.
can I deny the access to my server for a specific OS? I have one PC which I want to give it acces from winxp, but if it's boot into ubuntu I want to deny all access to my server, same IP, same ethernet card
I've setup vnc over ssh tunnelling however the Suse firewall seems to be blocking it. On the local host I have this in ~/.ssh/config:LocalForward localhost:5900 remotehost.com:5900 The problem is that this only works when I either disable the firewall or add an exception for VNC. Both of these actions defeat the whole purpose of ssh tunnelling since they leave my VNC port open to the outside world (very insecure).
