Good morning,

here is a default rule for SSH connections included in /usr/share/doc/
shorewall/examples/two-interfaces/rules:

# 
#       Accept SSH connections from the local network for administration 
# 
SSH(ACCEPT)     loc             $FW

This should realize the SSH connections from loc to the firewall. So I think, 
my icinga2 port is open on the host (192.168.1.1) like the ssh port too, and I 
could build the same rule for 5665:

ICINGA(ACCEPT)     loc              $FW

and for the other direction

ICINGA(ACCEPT)     $FW              loc

But it doesn't run lihe desired. My host is with its two interfaces vmbr0 and 
vmbr1 part of both networks net and loc, and named as $FW. I don't understand 
this behaviour.

Best regards 

Andreas






_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to