On 10/27/2017 10:40 AM, [email protected] wrote: > On 10/27/2017 10:27 AM, [email protected] wrote: > >> >>> Well, so far, all you have given us is a log message, one rule, and a >>> "It works sometimes". >>> >>> Given that the rule you posted doesn't include a log level, but a log >>> message is being produced, I am wondering if the fw->net policy is >>> ACCEPT with a log level specified. If that is the case, then I can >>> understand that you would be concerned that the rule is somehow not >>> being effective. >>> >>> For these types of problems, the output of 'shorewall dump' collected as >>> described at http://www.shorewall.net/support.htm#Guidelines is most >>> helpful to us. >>> >>> Thanks, >>> -Tom >> >> Indeed, policy calls for logging. I haven't been able to narrow it >> down more as it is infrequent, so the best I can do is say about 'half >> the time, REJECTs and DROPs are -not- logged'. (It's not my intent to >> start a bickering contest, and am not withholding anything) >> >> I've always been able to solve the problem/blockage by adjusting >> Shorewall rules, even without the blockage being logged. But I wish >> it would just log all REJECTs and DROPs. And I don't understand why >> it's suddenly logging these ACCEPTs... I haven't asked it to. >> >> Given the nature of this being hard to nail down, I don't have much >> hope of solving it, but I've sent the dump to Tom anyway. > > Eh, except I got bounced with: > > SMTP error from remote mail server after RCPT TO:<[email protected]>: > 504 5.5.2 <ns2>: Helo command rejected: need fully-qualified hostname >
You can try sending it to [email protected]. If that fails, try [email protected]. -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
