On 01/30/2018 09:14 AM, Tom Eastep wrote: > You need to: > > - set tcpflags=0 on enp7s0f2 > - Place your ACCEPT rule for tcp/3230 at the top of the NEW section of > your rules file. > - Follow that ACCEPT rule with: > > TCPFlags:$TCP_FLAGS_LOG_LEVEL <zone>:enp7s0f2 all tcp > > You may omit 'tcp' if you are running 5.1.10 or later. <zone> is the > zone associated with enp7s0f2. >
I should point out, however, that the RST and FIN flags are mutually exclusive, so having them both set in a packet header is a clear protocol violation. -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
