On Wednesday, 15 August, 2012 07:56:06 Tom Eastep wrote: > Are you an OpenDNS subscriber by chance?
Thanks. I do not subscribe to OpenDNS, but I do use their dnscrypt-proxy. I've just installed it and haven't gotten it working yet. I find in the man page: "By default, dnscrypt-proxy sends outgoing queries to UDP port 443." Eureka! So I'll open that port. > Do yourself a favor and remove the logging specification from your > DROP(Invalid) rule. Those are probably late-arriving RSTs from > connections which have already been closed. They are nothing to worry about. Can't find a DROP(Invalid) in policy, shorewall.conf, or rules. > I personally use fwlogwatch. Then that's my ticket. ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
