Re: [leaf-user] problem with icmp STATE invalid

[Tom Eastep]

--On Monday, November 25, 2002 06:32:12 PM +0100 q0016 <[EMAIL PROTECTED]> wrote:

hi ray

This question is a bit too succinct to get a good response. I assume it
refers to an icmp type-11 packet. And I'll guess that the underlying
problem motivating the question is traceroute failures (but a

clarification

of that part would be welcome).

yes, it's a traceroute-problem.

But what version of  LEAF is involved, what firewall package, and what

does

the actual, complete "OUTPUT Rule 2" say (from what you posted, I can't
even tell if we are discussing ipchains or iptables)? Oh, and if the
firewall logs the DROP

it's rc3 with standard shorewall version (i think it is 1.3.1)

Please upgrade your version of Shorewall. The rule that is giving you problems was in that old version of Shorewall as a workaround for a kernel bug that isn't present in the Bering kernels.

-Tom
--
Tom Eastep \ Shorewall - iptables made easy
AIM: tmeastep \ http://shorewall.sf.net
ICQ: #60745924 \ [EMAIL PROTECTED]



-------------------------------------------------------
This SF.net email is sponsored by: Get the new Palm Tungsten T handheld. Power & Color in a compact size! http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0002en
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html