>> I am not sure I understand this - care to elaborate?
>>     
>
> Here's an example from the accounting file:
>
>   #ACTION           CHAIN    SOURCE   DEST    PROTO   DEST    SOURCE
>   #                               PORT(S) PORT(S)
>   COUNT   -     br0    -     tcp  80      =
>
>     This rule matches all TCP packets entering through br0 where either
>     the source port or the destination port is 80.
>   
Ah, I get it! Is this just for "accounting" or is this valid everywhere 
else?

> Good - thanks.
>   
No problem.

>> run_ip route replace <default gateway address> src $SW_LO_ADDRESS dev lo
>> run_ip route replace <default gateway address> src $SW_LO_ADDRESS dev lo
>> table XX
>> run_ip route add default via <default gateway address> src
>> $SW_LO_ADDRESS dev lo table XX
>>     
>
> Where else to you mention 'lo' in your configuration. I have an entry like
> yours in my interfaces file and I don't have that issue.
>   
Grep tells me the "interfaces" file is the only place I have it. I do 
have a local zone, but it is nothing to do with "lo". The only place I 
use "lo" is in "started" to (re)set my arp tables.

> It is going to have to wait until Beta 1. There are some issues to resolve.
>   
OK, then. I'll get to test it when you're ready.


------------------------------------------------------------------------------
Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester  
Wave(TM): Endpoint Security, Q1 2013 and "remains a good choice" in the  
endpoint security space. For insight on selecting the right partner to 
tackle endpoint security challenges, access the full report. 
http://p.sf.net/sfu/symantec-dev2dev
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to