Tom, Thanks for the instructions.
On Sat, Oct 28, 2017, at 05:31 PM, Tom Eastep wrote: > > "- Don't use any option for the TUN interface in /etc/shorewall > > /interfaces that causes a change in /proc/sys/net/config/." > > > > When I look in there > > > > cd /proc/sys/net/ ls bridge/ core/ ipv4/ ipv6/ netfilter/ > > nf_conntrack_max unix/ > > > > What changes do I look for? > > Delete 'routefilter=0' and 'logmartians=0' That's on the IPv4 side of things. On IPv6 I guess I at least also change - vpn VPNIF optional,physical=tun1,forward=1,accept_ra=1,sourceroute=0,tcpflags,nosmurfs + vpn VPNIF physical=tun1,forward=1,accept_ra=1,sourceroute=0,tcpflags,nosmurfs Do I also get rid of the "sourceroute=0" & "nosmurfs", which sound kinda similar. Or more? less? How do you figure out what "causes a change in /proc/sys/net/config/" ? Do you just know that from experience already? Or can you grep for something in that dir? Dave ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
