On Mon, 2007-12-03 at 15:11 -0800, Tom Eastep wrote:

> 
> At any rate, none of the traffic matched any of your rules. The
> requirements seem similar enough that you might must move all of the
> rules to POSTROUTING and only have to code them once.
> 

And of course, in POSTROUTING the rules could be changed to CLASSIFY
rules so that you wouldn't have to do any packet marking at all.

Just a thought,
-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: This is a digitally signed message part

-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to