-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 06/29/2016 04:59 PM, Thomas Schneider wrote: > sure... tarball attached. >
Several things: 1) NONE policies are only to be used when *no* traffic is ever expected between the SOURCE and DEST zones. That is why Rules are not allowed between zones with a policy of NONE. Since you do want to allow some traffic, REJECT would be a better policy. You then need to add rules for the traffic you wish to accept. 2) For Linux traceroute, you need to use the Trcrt macro. 3) Your ACCEPT rules for all icmp types are not needed. 4) The configuration in the dump doesn't match the configuration that you sent in the tarball with respect to ping. Be sure that 'shorewall reload -c' compiles and loads your configuration successfully. - -Tom - -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJXdSySAAoJEJbms/JCOk0QbegP/1DkQBPsLTBndeaoO69dWjpK llL6Nipu76v8Zqwx+xAApUIQR5UP49a5v6wVIRpw39Vgq6uEcaJh3DQQNpkk0p1F ZhNOGgFOZAP8TAt0Ihn91u/B1yR9NME/3r7g2ZY6aS3Omh+rlB3KSVqp19PGZB/c ykZCMY0nSjA6UNdlKoBraBc4QN+h9iib6yTXRAfhZ/w+p55aSCS/M0aAfPy1Lze+ 9Ks7AiJTzRdIYHdjDhv8MDMwKFWLtV7rsR37rG1bXh/ej2NCXsHIj8rB99U5NhTi ga/WyAl23T0CVgvPxJ1jiZpR5L5thKaVmKBtBBMlhdO4vcXgUNxU7ez/2kI87UMx QK+D+8UpyAurOvSe1ErNS6iT59eu5JhWdNeJ3J6w7Msm8wbOi8DkiiwKhLLDWYUj TSudI6dNJtNzh+LjAReNOwasXc+rIRT4EQ22vsvUHAwqVE3eHdHzcnz2WI4sGx/C MtNyNJ1JDopqDVUxlbMOS1QCxYRDZUPvkyWoxZySGY61Fo+gEmbVPRjQD5V4JVRO FJDRzmaudXjw+tNdcSnNNmkUbEgWFIsZBDdMTQlBPxkgs1pl+XZOlPcT+WK6FSmI 8OgJgf+9ZZ1LCPWNPmCD+9iYJRTb4WYu/iECT+z8oDll5WZ9MLIaF+iel0c2yIKE 9se5BOWMDszbARuhEj3u =pKzI -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users