On 8/2/20 7:27 PM, Bruce Bannerman wrote:
> Hello,
> 
> I have noticed a number of shorewall entries in my log file similar to:
> 
>   * ...Shorewall:@net-dmz:DROP...
>   * ...Shorewall:@net-dmz:DROP…
> 
> 
> I’m trying to understand what the @ symbol signifies in these entries.
> 
> Can someone point me to the relevant documentation that discusses this?
> 
> I’m having trouble find a reference in my searches.
> 

It is currently undocumented, but may be understood by looking at the
output of 'shorewall show'. It means that the sending host has exceeded
the RATE specified in the net-dmz policy. Either there is syn flooding
occuring, or you need to increase the RATE.

-Tom
-- 
Tom Eastep        \ Q: What do you get when you cross a mobster
Shoreline,         \    with an international standard?
Washington, USA     \ A: Someone who makes you an offer you
http://shorewall.org \    can't understand
                      \________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to