On 7 Jul 2011, at 01:22, Tom Eastep wrote:
On Jul 6, 2011, at 5:17 PM, J. Randall Owens wrote:
I don't know about TPROXY in particular, but in most places in shorewall6,
you can enclose the IPv6 addresses (including prefix length) in angle
brackets, like so (all mine are in hosts so
On Thu, 7 Jul 2011, J. Randall Owens wrote:
Date: Thu, 7 Jul 2011 04:02:37
From: J. Randall Owens jrowens.sourcefo...@ghiapet.net
To: Shorewall Users shorewall-users@lists.sourceforge.net
I don't think you've shown us the actual tcrules line 4, have you? Does
it start with
On 07/07/11 14:39, Tom Eastep wrote:
On Thu, 2011-07-07 at 04:22 -0700, J. Randall Owens wrote:
I take that back now. While it's not on that page, I see where Tc.pm has
a place for picking out an IP address as a third parameter. In that case,
I'd say that process_tc_rule is messing up at
On Thu, 7 Jul 2011, Tom Eastep wrote:
Date: Thu, 7 Jul 2011 06:39:41
From: Tom Eastep teas...@shorewall.net
To: Shorewall Users shorewall-users@lists.sourceforge.net
Subject: Re: [Shorewall-users] Tproxy with Shorewall6
On Thu, 2011-07-07 at 04:22 -0700, J. Randall Owens wrote:
I take
On Thu, 2011-07-07 at 14:59 +0100, Dominic Benson wrote:
On 07/07/11 14:39, Tom Eastep wrote:
Attached is a patch which allows an IPv6 address in the third parameter.
Enclosing the address in [...] or... is optional.
Great, that works perfectly!
Thanks for confirming, Dominic --
On Jul 6, 2011, at 4:35 PM, Dominic Benson wrote:
I have since put in a new router, with recent kernel and iptables, so I have
now got it working for real, and it works well - thanks.
One niggle I did encounter was in specifying address as the third argument to
TPROXY in tcrules6 - the
On Thu, 7 Jul 2011, Dominic Benson wrote:
Date: Wed, 6 Jul 2011 16:35:51
From: Dominic Benson domi...@lenny.cus.org
Reply-To: Shorewall Users shorewall-users@lists.sourceforge.net
To: Shorewall Users shorewall-users@lists.sourceforge.net
Subject: [Shorewall-users] Tproxy with Shorewall6
On Jul 6, 2011, at 5:17 PM, J. Randall Owens wrote:
I don't know about TPROXY in particular, but in most places in shorewall6,
you can enclose the IPv6 addresses (including prefix length) in angle
brackets, like so (all mine are in hosts so far, so these are with
interfaces):