Den 2012-07-31 23:40, Tom Eastep skrev: > Shorewall supports the iptables CT target now (see > shorewall-notrack(5)); the problem is that when the deprecated mode > is > turned off, everyone who uses helpers (which is almost 100% of the > Shorewall user base) will have to change their configuration in an > unintuitive way.
yes its need more dokumention before rule out, you say xtables-addons geoip module works from notrack ? since geoip is public avail in csv files it would make an php to convert it to shorewall blacklist format, much more stable for me :=) > My challenge is to determine how to make the transition smoother. changed subject if some want to follow it ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
