On 04/11/2016 02:36 AM, Tuomo Soini wrote: > On Mon, 11 Apr 2016 11:42:09 +0300 > Tuomo Soini <[email protected]> wrote: > >> On Wed, 6 Apr 2016 09:17:59 -0700 >> Tom Eastep <[email protected]> wrote: >> >>> Shorewall 5.0.8 Beta 3 is now available for testing. >> >> Oops. This change broke shorewall6 icmp-ipv6. Difference between >> icmp-ivp6 and icmp was only real difference between shorewall and >> shorewall6 actions. > > Actually the real problem is actions from shorewall do have wrong order > for Broadcast and AllowICMPs. For IPv6 to work AllowICMPs must be > before Broadcast handling. > > For ipv4 this is not required. Question: do we just change order of > these for both or should we re-add actions for shorewall6?
Let's just reverse the order of the rules. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Find and fix application performance issues faster with Applications Manager Applications Manager provides deep performance insights into multiple tiers of your business applications. It resolves application problems quickly and reduces your MTTR. Get your free trial! http://pubads.g.doubleclick.net/ gampad/clk?id=1444514301&iu=/ca-pub-7940484522588532
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
