On 05/20/2013 08:18 AM, Tom Eastep wrote:
> On 05/20/2013 08:03 AM, Tom Eastep wrote:
>> On 05/20/2013 07:44 AM, Tom Eastep wrote:
>>> The more I have thought about it, the less that I like 'local' being an
>>> interface option. In this Beta, 'local' changes to being a zone type.
>>>
>>> 1)  A new interface option has been added.
>>>
>>>     destonly
>>>
>>>     Causes the compiler to omit rules to handle traffic arriving on
>>>     the interface.
>>>
>>
>> The attached patch allows 'destonly' on the loopback interface to work
>> correctly with a 'local' zone.
> 
> Please disregard this patch.

Hmmm -- head is still not quite back into work this morning. The patch
*is* correct.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to