Hej SW-list,

I started a thread two weeks ago but did not get an answer. So I try
again but make it in a different way - step by step:

With a SW-config that seemed to work fine I get rejects in spite of
having an acception-rule for that kind of traffic:

shorewall.log:
Sep 22 10:59:13 nordgate4 INPUT REJECT  IN=eth0 OUT=
MAC=00:0d:b9:13:fb:d8:44:4e:6d:6b:c6:92:08:00 SRC=79.247.163.132
DST=217.70.192.188 LEN=69 TOS=00 PREC=0x00 TTL=55 ID=38
733 DF PROTO=UDP SPT=1194 DPT=1194 LEN=49 MARK=0

rule in /shorewall/tunnels:
generic:udp:1194 net 0.0.0.0/0

Also, I get forward rejects by simply requesting a WebServer (outside)
with port 80 from the loc zone:

Sep 22 11:24:35 nordgate4 FORWARD REJECT  IN=eth0 OUT=eth1
MAC=00:0d:b9:13:fb:d8:44:4e:6d:6b:c6:92:08:00 SRC=134.119.168.179
DST=192.168.23.150 LEN=1492 TOS=00 PREC=0x00 TTL=52 ID=1594 DF PROTO=TCP
SPT=80 DPT=52436 SEQ=766449736 ACK=1639787111 WINDOW=235 ACK URGP=0 MARK=0

rule in /shorewall/policy:
loc     net    ACCEPT

Thanks for any idea,


Boris


_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to