Tom, Thank you very much! got it working, after re-reading shorewall.conf man
FORWARD_CLEAR_MARK was not set (which if i understand the man correctly it defaults to YES?) after changing it to No, it seems to work now! On Tue, Nov 12, 2013 at 7:10 PM, Tom Eastep <teas...@shorewall.net> wrote: > On 11/12/2013 8:24 AM, JC Putter wrote: >> attached the shorewall dump. >> >> MARK_IN_FORWARD_CHAIN=No >> > > As I explained in the last email, it is *never* going to work with > MARK_IN_FORWARD_CHAIN=No and FORWARD_CLEAR_MARK=Yes. You must change the > setting of one or the other or you must do your marking in the FORWARD > or POSTROUTING chains using a :F or :P suffix. > > -Tom > -- > Tom Eastep \ When I die, I want to go like my Grandfather who > Shoreline, \ died peacefully in his sleep. Not screaming like > Washington, USA \ all of the passengers in his car > http://shorewall.net \________________________________________________ > > > ------------------------------------------------------------------------------ > November Webinars for C, C++, Fortran Developers > Accelerate application performance with scalable programming models. Explore > techniques for threading, error checking, porting, and tuning. Get the most > from the latest Intel processors and coprocessors. See abstracts and register > http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > ------------------------------------------------------------------------------ November Webinars for C, C++, Fortran Developers Accelerate application performance with scalable programming models. Explore techniques for threading, error checking, porting, and tuning. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users