Re: [Shorewall-users] shorewall 5.0.14.1 not creating DOCKER nat chain?

2017-02-21 Thread Raphael Bauduin
On Thu, Feb 16, 2017 at 12:00 AM, Tom Eastep wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > On 02/13/2017 11:46 PM, Raphael Bauduin wrote: > > > > > > On Thu, Feb 9, 2017 at 12:47 PM, Raphael Bauduin > > mailto:rbli...@gmail.com>> wrote: > > > > > > > > On Wed, Jan 25, 2017 at 9:3

Re: [Shorewall-users] REJECT precedence over REDIRECT rules

2017-02-21 Thread Guilsson .
On Mon, Feb 20, 2017 at 11:17 PM, Benny Pedersen wrote: > Guilsson . skrev den 2017-02-21 02:07: > > > Any clue how to get all these rules works like I need ? > > dns is port 53 > I know. In my named.conf: listen-on port 53 { any; }; listen-on port 54 { any; }; > on top of that

[Shorewall-users] shorewall and geoip

2017-02-21 Thread Vieri Di Paola
Hi, I'm trying to block hosts accessing from some GeoIP IP address ranges. For instance, I'm unable to block host with src IP address 180.97.106.162. I installed the GeoIP database in: # ls /usr/share/xt_geoip/LE/ A1.iv4 BH.iv4 CO.iv4 FO.iv4 HU.iv4 KZ.iv4 MQ.iv4 PF.iv4 SI.iv4 TR.iv4 A1