On 04/28/2018 12:26 PM, Norman Henderson wrote:
> Hi Tom,
> No sign of anything netfilters related in syslog or other log files -
> maybe there is a log setting I am missing?

No -- messages that I was hoping to see would have been error/failure
messages.

 I did run a trace and got the
> following (repeated frequently):

That trace shows packets from an established flow, so there aren't going
through the nat table.
> 
> Is that any help, or are there other diagnostics I should run?
> 

A trace of a new flow would be useful. You can use 'conntrack -F' to
flush the conntrack table while you are tracing.

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to