-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 03/08/2017 10:15 PM, Simon Matter wrote:
> > After doing countless reloads I found a way to prevent those > connections from being killed. Removing "routefilter" from eth2 > seems to change the behavior. > > Does it make any sense? Any suggestion what to do instead? Using > "sfilter" instead or using "routeback,routefilter" (didn't test as > my testing time is over)? > It only makes sense if you are adding and deleting routes as part of reload, either from /etc/shorewall/routes or in an extension script. Adding 'routeback' will prevent the packets from being rejected in the FORWARD chain -- they will simply time out and be retransmitted. - -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJYwXeIAAoJEJbms/JCOk0Q3HAQAINjest8XQQPEQWa+gS1x8Aa 1HyInOW7iLeAn86jlN1U5YqC+v8MiGEKFC2GbUJAJS8pVek8sPrRURMk1mvcHzv2 5oGDS9ThkVKhS3iinYg6Hi64ZY8rIiI2FWyyLcAV3ZnpSslan7EUz1wwFL7V+4WQ VtcR7loFRyYFDZNrkJdCB87TDOkIq2FHt+W29ig3fLhNSv+oNtdtTQHGd1iOLH6F wRlsXB4E0/ogDHtM4yDCPqTt6sDx7S2i1VV5LkQqP88MoJQsY/LpAduRsf9zx/e+ VWcZju9F+NXn4v4aTWIZOlqnnmIC+gPSX2Gxm6zB9n4JPWSUWw2m28r/0rKz9j1r fIRnS8m12hILYsJf5FdCnVRoQSSCvvdjGP2uEB716qtLvO55UhlxWoqHrNIYYbjN yTGEVZn6BJI8dQP21rCevgHefbDOhHOmo6RBf5Cr+N7/P0OlaAPuKtWYq81klXC0 0Y4r+MeUN6OvRiLRr/i/KqcdFWwOwN+WnEzjBwXJW4yHHo6T1d/n3GBbyJWOGezA R1uD93BTSKhp5HHSpWViVKL9vZuCSKiyxD00+xh0pAw+yJlYPRpHF/Bvfy1St+qP fenYUm1gaPdecQ7KTqy5QqGSVbK+aNvPkdEMaz1PTWzehtGXKV9O0nS+yikmOqgX APqtJdZRGY4vql4fSC6X =XJUV -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Announcing the Oxford Dictionaries API! The API offers world-renowned dictionary content that is easy and intuitive to access. Sign up for an account today to start using our lexical data to power your apps and projects. Get started today and enter our developer competition. http://sdm.link/oxford _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
