Tom,

Thank you very much! got it working, after re-reading shorewall.conf man

FORWARD_CLEAR_MARK was not set (which if i understand the man
correctly it defaults to YES?) after changing it to No, it seems to
work now!


On Tue, Nov 12, 2013 at 7:10 PM, Tom Eastep <teas...@shorewall.net> wrote:
> On 11/12/2013 8:24 AM, JC Putter wrote:
>> attached the shorewall dump.
>>
>> MARK_IN_FORWARD_CHAIN=No
>>
>
> As I explained in the last email, it is *never* going to work with
> MARK_IN_FORWARD_CHAIN=No and FORWARD_CLEAR_MARK=Yes. You must change the
> setting of one or the other or you must do your marking in the FORWARD
> or POSTROUTING chains using a :F or :P suffix.
>
> -Tom
> --
> Tom Eastep        \ When I die, I want to go like my Grandfather who
> Shoreline,         \ died peacefully in his sleep. Not screaming like
> Washington, USA     \ all of the passengers in his car
> http://shorewall.net \________________________________________________
>
>
> ------------------------------------------------------------------------------
> November Webinars for C, C++, Fortran Developers
> Accelerate application performance with scalable programming models. Explore
> techniques for threading, error checking, porting, and tuning. Get the most
> from the latest Intel processors and coprocessors. See abstracts and register
> http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>

------------------------------------------------------------------------------
November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most 
from the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to