-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Red Baron wrote:
> Without your configs, this wont be exact, bu assuming your zones are
> named as you said, add this to your rules
> 
> 
> DROP local:<host ip> net

It is a bit friendlier to your users to use REJECT rather than DROP for
outgoing rules.

- -Tom
- --
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkrbXmIACgkQO/MAbZfjDLIEZQCfbgHfN7fvQmwTlvqnaaNxjMxU
F98An3VPmmWgJMGyax+vNPNa7oG6dEgU
=8HL0
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to