On 2/21/11 6:38 AM, Dorian Kind wrote: > The strange thing about the martian log entry is that the link layer header > indicates that the packet is coming from the gateway of the cable connection > (MAC 44:58:29:7d:1f:a9) to our 'eth-cable' interface (MAC 00:1b:21:72:95:54) > but the message above that looks to me like the packet is originating from the > firewall itself (x.x.x.42 to 95.101.221.15). I'm not sure what to make of > this. Can it be that the packet is routed back to the firewall by the gateway? > But why would that happen?
With this configuration, is the 'loc' zone still able to communicate with the net? -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
