Link to us
click here to generate a link for your website.
| Addons für Ipcop 1.4.13 [ These downloads work only on Ipcop 1.4.13 and higher ]
Comments
|
Comments: 1
Registered: 26 Feb 2007 : 13:43 | Does SNAT-Gui have problems with Zerina OPENVPN?
|
|
Comments: 1
Registered: 20 Jul 2007 : 10:37 | Hello Markus.
your addons are very good thanks.
is this addons SNAT working with newer IPCOP version's?
1.4.15 +
anything to consider before installing?
thanks
|
|
Comments: 245
Location: Helmbrechts, Germany | Afaik there should be no problem with 1.4.16.
If you like my addons, feel free to donate some money.
Even little amounts help to keep things going. |
|
Comments: 1
Registered: 03 Aug 2007 : 18:12 | Hi, i just install it, but it doent seems to be doing the snat...
initily when i click the status buttos i got the error "Setuid script "/var/ipcop/snat/bin/setsnat" on nosuid filesystem"
then i change permisions and ownership from the dir /var/ipcop/snat to nobody:nobody and the error change to "Cannot clear group list. at /var/ipcop/snat/bin/setsnat line 621."
Thanks
|
|
Comments: 1
Registered: 21 Aug 2007 : 18:06 | Hi,
I've just installed the addon on IPCop 1.4.13 and I've noticed two small but critical problems:
- The green IP on eth0 (172.26.5.254) has an alias (172.26.3.254) which isn't recognized. This effectively blocks outgoing traffic from the 172.26.3.0/24 network since no SNAT or Masq is performed on packets. FYI: this alias isn't configured in the IPCop webinterface (because it doesn't support aliases on the green network), it's a manual hack. The only way to find this alias is by parsing the output of 'ifconfig', which is doable.
- For some reason 'generic' traffic from my green network (traffic from hosts which haven't got an external SNAT address and should get the IPCop red address assigned) isn't picked up by the generic 172.26.5.0/24 rule. This can be solved by removing the restriction on the input interface of this rule, which is specified by the '-i' parameter on lines 273 and 459 of the setsnat-script. I can't think of a reason why this won't work, but it does work without the '-i' option. Furthermore I don't think there are any security issues introduced by removing the '-i' option, so why not remove it?
Can you please address those issues?
|
|
Comments: 245
Location: Helmbrechts, Germany | Thanks for the info, but please open a forum-threat for further questions/answers.
If you like my addons, feel free to donate some money.
Even little amounts help to keep things going. |
|
Comments: 1
Registered: 07 Oct 2007 : 19:06 | Markus,
I am running IPCop v.14.16 and have installed your latest version SnatGUI (1.9.2) but it does not work as expected. The static NAT does not work for the ORANGE zone IP address but works for GREEN zone IP address.
FYI... my IPCop box is having GREEN, RED, ORANGE and BLUE networks.
GREEN: 10.250.1.0/24
BLUE: 10.250.2.0/24
ORANGE: 10.250.3.0/24
RED: .71 - .75.
The web server is inaccessbile when setting 10.250.3.10 => .72 does not work. I move the machine to GREEN with IP 10.250.1.130 and set => .72, it works. The web server can be reached from public.
Could you please advise what went wrong?
I have seen several postings about this problem. Removing/disabling ORANGE NIC or moving the maching to GREEN zone solve the problems. But again this defies the functions, controls and purposes of DMZ (ORANGE zone).
Please advise... Thanks...
|
|
Comments: 245
Location: Helmbrechts, Germany | I'll have a look at it as soon as possible.
If you like my addons, feel free to donate some money.
Even little amounts help to keep things going. |
|
Comments: 4
Registered: 19 Jul 2005 : 19:19 | Is there a upgrade procedure from 1.9 to 1.9.2 or do we just have to uninstall and reinstall the add-on?
Thanks for the great work.
Thomas
|
|
Comments: 245
Location: Helmbrechts, Germany | Just install the new version, the install-script will update the previous version.
If you like my addons, feel free to donate some money.
Even little amounts help to keep things going. |
|
Comments: 4
Registered: 19 Jul 2005 : 19:19 | Thanks a lot - also for your effort, keep on the exzellent work.
|
|
Comments: 4
Registered: 19 Jul 2005 : 19:19 | I think a found a bug:
We did a upgrade from snatgui_ipcop_1.4.11.tar.gz to snatgui_ipcop_1.4.13.tar.gz and the strange behaviour is:
If a NAT rule is defined, then anyhting works fine. If for a particular host is no NAT-Rule defined - and so the default public IP of IPCop should be used, then the request cant pass the firewall. And there are also no error messages in /var/log/message.
|
|
Comments: 245
Location: Helmbrechts, Germany | Ok, i'll have a look at it at the weekend.
If you like my addons, feel free to donate some money.
Even little amounts help to keep things going. |
|
Comments: 1
Registered: 26 Nov 2007 : 09:56 | Greetings, Markus.
I had some problems with my mail-server, but then I found your addon and it seemed that my problemes were solved. But now I see, that when SNAT is started ICQ can't connect to server and I can't open hotmail.com... When I stop SNAT everything works fine...
I have proxy sever on and think that problem is in "Traffic control&report" addon, but I'm not sure.
|
|
Comments: 1
Registered: 10 Dec 2007 : 15:51Location: Michigan USA | I have installed the latest snatgui and when I start it, I lose my Green. Noting on the LAN can get out to the Internet... I have created a port forward and disabled it but that did not seem to help. I have a web/mail/ftp server on my Orange and I need to get this working for my mail server. Any other ideas?
IPCop 1.4.18 | AdvProxy 2.1.6 | Snatgui 1.9.2 | ZERINA-0.9.5b (openvpn) | Update Accelerator 2.0 (Beta 1) |
|
Comments: 1
Registered: 07 Mar 2008 : 14:47 | Hi.
I have the same problem and it seems a common issue:
[link]
|
You must be logged in to make comments on this site - please log in, or if you are not registered click here to signup |
support mhaddons !
Donat-o-Meter Stats
2010´s Donations|
| Name for Front Page |
Jan 21 |
€100 |
I would like to thank pcengines
for the generous donation of a complete
WRAP-machine.
Here is a list of people who have donated to mhaddons so far.
Here you could read about the advantage of being a donator.
IT!works Systemhaus GmbH
Unser Name ist Programm! - SAP-Entwicklung
- SAP-Beratung
- EDV-Dienstleistungen
- Softwareentwicklung
- Netzwerk-Installation
- PCs und Software
|
