On Tuesday 15 May 2007 01:03, Tom Eastep wrote:
> Steven Jan Springl wrote:
> >>On Tuesday 15 May 2007 00:15, Tom Eastep wrote:
> >> Wow -- that uncovered a can of worms. I think it's all sorted out in
> >> 6352.
> >>
> >> -Tom
> >
> > Tom
> >
> > Yes, that seems to have fixed the problem.
>
> Thanks, Steven!
>
> -Tom

Good morning Tom.

WARNING..... drink two large, strong, cups of coffee before continuing.


Yesterday you mentioned a can of worms, I think it might be back.


Zones:

        fw      firewall
        lan     ipv4
        wan     ipv4
        dmz     ipv4
        tst:wan,lan,dmz ipv4
        vpn     ipsec

Interfaces:

        lan     eth0
        wan     eth1
        -       eth2

Hosts;

        dmz     eth2:!10.0.0.0/8


When the following commands are issued:

        shorewall start
        shorewall add eth2 10.0.0.0/8 tst

the following messages are produced:

iptables v1.3.6: host/network `exclude' not found
Try `iptables -h' or 'iptables --help' for more information.
   ERROR: Can't add eth2:10.0.0.0/8 to zone tst

iptables v1.3.6: host/network `exclude' not found
Try `iptables -h' or 'iptables --help' for more information.
   ERROR: Can't add eth2:10.0.0.0/8 to zone tst


Steven.


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to