Tom Eastep wrote: > > I got a bit ahead of myself -- I'm correct that to do this right, you need > policy match. But you should be able to get it to work if we can determine why > your ruleset drops most traffic to/from 192.168.241.65. Please send me a > tar-ball of your /etc/shorewall/ directory. >
Ah -- I see. eth0:192.168.241.65 is a zone called 'obo'. And there is no net->obo policy; neither are there any net2obo rules. Consequently all net->obo traffic is being dropped under the net->all DROP policy. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
