Smoothwall Express 3.0 with Multiple NAT

This is a must have for any Smoothwall Express Setup. This mod gives you full control of your interfaces including multiple IP addresses, ports and mac control:

The mod gives ultimate control with the following:

1. Specify origin source IP/Network

2. Specify the origin/destination ports to be open for your specific IP/Network

e.g. Open access for the IP 222.111.55.333 on port 57 to your IP xxx.xxx.xxx.xxx on port 22

To install the mod simply run the following from command line:

1. wget http://stans-smoothwall3mods.googlecode.com/files/fullfirewall-3.3.3.1-Express-3.0-i386.run

2. sh ./fullfirewall-3.3.3.1-Express-3.0-i386.run

**NOTE: Smoothwall Express 3.0 should be up to and including update 9 – Maintenance > Updates.

Log back into the Smoothwall GUI and you will now see the Full Firewall Control interface.

control, full firewall, mod, port forwarding, smoothwall

For further reading take a look at below link:
https://www.linuxtutorial.co.uk/tag/smoothwall/

Comments

Cisco ASA 5510 with Dual ISP Redundancy

Cisco ASA 55XX with Dual ISP Redundancy This article will cover setting up redundant ISPs for outbound connectivity on an ASA 5510 (although the same should work on the 5520s and up as well). It’s important to note that this covers outbound connectivity only. The ASA does not have built in functionality to NAT multiple public IPs to a single internal IP – for that you’d need a router (how-to article soon!). For an ASA to provide inbound redundancy to your servers you’d need to utilize two separate IPs for each server – one to be NAT’d to each public IP block. The information you’ll need to complete this task: · Primary ISP Subnet / Gateway · Secondary ISP Subnet / Gateway · A Public host to ping (i.e. 4.2.2.1) The Public host to ping is a device (read: cluster of devices) th...

Lenovo Ideapad V310-15ISK Wi-Fi issue on Ubuntu/fedora/CentOS

Go to terminal and RUN below command You can also copy & paste the below line on command prompt: # sudo tee /etc/modprobe.d/blacklist-ideapad.conf <<< "blacklist ideapad_laptop" # reboot. Link: https://askubuntu.com/questions/893668/qualcomm-atheros-wifi-lenovo-v310-ubuntu-16-04

How to Block Root Password-Guessing Attacks on a Linux Server

How to Block Root Password-Guessing Attacks on a Linux Server The benefit of performing the preceding steps is that it is nearly impossible for an attacker to log on to your server as root by guessing the password. In order for the attacker to masquerade as root, she or he would have to have your private key and know the pass phrase associated with it. Using Cryptographic Keys for SSH Root Login Take one look at /var/log/secure on an Internet-connected server and you'll immediately understand the need for securing your root account. The bad guys are constantly attempting root and other usernames to attempt to login to your server using SSH or some other protocol. If you use a simple password, it's only a matter of time before your server is compromised by a password-guessing attack. Best practice is to disallow SSH logins by root, thus eliminating a big part of the risk. The problem is that doing so also eliminates a lot of ...

Blog for Sysadmins

Search This Blog