Good morning, here is a default rule for SSH connections included in /usr/share/doc/ shorewall/examples/two-interfaces/rules:
# # Accept SSH connections from the local network for administration # SSH(ACCEPT) loc $FW This should realize the SSH connections from loc to the firewall. So I think, my icinga2 port is open on the host (192.168.1.1) like the ssh port too, and I could build the same rule for 5665: ICINGA(ACCEPT) loc $FW and for the other direction ICINGA(ACCEPT) $FW loc But it doesn't run lihe desired. My host is with its two interfaces vmbr0 and vmbr1 part of both networks net and loc, and named as $FW. I don't understand this behaviour. Best regards Andreas _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users