I think adding the routeback option to your Internet facing interface should fix that but.... i can't quite remember.
Ex: net eth0 detect routeback
------------------------------------------------------------------------------
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
