Rabie van der Merwe wrote: > Hi, > > Wonder if this is possible, on some comercial firewalls (pix/checkpoint) > you can masq (hide NAT) all outgoing traffic but then you can do exclutions > based on a certain source/destinations combo: > > ie what I want is : (eth1 = dsl eth0 = internal) > eth1:192.168.10.0/24 eth0!192.168.0.0/24 > eth1 eth0 > however it dies with a error: > iptables v1.3.5: Unknown arg `--sport' > Try `iptables -h' or 'iptables --help' for more information. > ERROR: Command "/sbin/iptables -t nat -A ppp0_masq -s 192.168.10.0/24 > -d 192.168.0.0/24 --sport 53 -m policy --pol none --dir out -j" Failed
There's a fix for that bug. See ftp://shorewall.net/pub/shorewall/3.2/shorewall-3.2.4/known_problems.txt It's the first problem listed. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
