Re: [Shorewall-users] Do SNAT rules support ipsets?

2018-04-06 Thread Tom Eastep
On 04/05/2018 07:50 PM, Igor Sverkos wrote: > Hi, > > I am on Debian Stretch system with multiple IP addresses and > shorewall-5.0.15.6. > > I have set "/etc/shorewall/snat" to > >> SNAT(1.2.3.4)0.0.0.0/0 eth0:+ip_restricted_endpoints[dst] > > My expectation: > > Whenever I

Re: [Shorewall-users] Do SNAT rules support ipsets?

2018-04-06 Thread Tom Eastep
On 04/06/2018 09:42 AM, Tom Eastep wrote: > On 04/05/2018 07:50 PM, Igor Sverkos wrote: > > It is a bug that was corrected in Shorewall 5.1.7. > Attached is the patch. patch /usr/share/shorewall/Shorewall/Rules.pm < commit-3b373f3 -Tom -- Tom Eastep\ Q: What do you get when you

[Shorewall-users] IPV6 Tunnel Ping Fail

2018-04-06 Thread colony.three--- via Shorewall-users
# ip address 7: he-ipv6@NONE: mtu 1480 qdisc noqueue state UNKNOWN qlen 1 link/sit 50.47.100.167 peer 216.218.226.238 inet6 2001:470:a:c3::2/64 scope global valid_lft forever preferred_lft forever inet6 fe80::322f:64a7/64 scope link valid_lft forever preferred_lft foreve

Re: [Shorewall-users] IPV6 Tunnel Ping Fail

2018-04-06 Thread colony.three--- via Shorewall-users
‐‐‐ Original Message ‐‐‐ On April 6, 2018 11:18 AM, colony.three--- via Shorewall-users wrote: > # ip address > 7: he-ipv6@NONE: mtu 1480 qdisc noqueue state > UNKNOWN qlen 1 > link/sit 50.47.100.167 peer 216.218.226.238 > inet6 2001:470:a:c3::2/64 scope global >valid_l

Re: [Shorewall-users] Fw: IPV6 Tunnel Ping Fail

2018-04-06 Thread colony.three--- via Shorewall-users
‐‐‐ Original Message ‐‐‐ On April 6, 2018 11:58 AM, wrote: > ​​ > > ‐‐‐ Original Message ‐‐‐ > > On April 6, 2018 11:44 AM, Tom Eastep teas...@shorewall.net wrote: > > > > After shorewall6 clear, ping6 just hangs. > > > > > > ping6 google.com > > > > > > >

Re: [Shorewall-users] Fw: IPV6 Tunnel Ping Fail

2018-04-06 Thread Tom Eastep
On 04/06/2018 01:22 PM, colony.three--- via Shorewall-users wrote: > > ‐‐‐ Original Message ‐‐‐ > > On April 6, 2018 11:58 AM, wrote: > >> ​​ >> >> ‐‐‐ Original Message ‐‐‐ >> >> On April 6, 2018 11:44 AM, Tom Eastep teas...@shorewall.net wrote: >> After shorewall6 clear, p

Re: [Shorewall-users] Do SNAT rules support ipsets?

2018-04-06 Thread Igor Sverkos
Hi Tom, thank you! I took the opportunity, created my own Debian packages and upgraded to 5.1.12.3. If the Debian maintainer is following this list: Would be nice to see a package bump in 9.5 :) -- Regards, Igor -- C

Re: [Shorewall-users] Fw: IPV6 Tunnel Ping Fail

2018-04-06 Thread colony.three--- via Shorewall-users
‐‐‐ Original Message ‐‐‐ On April 6, 2018 2:32 PM, Tom Eastep wrote: > ​​ > > On 04/06/2018 01:22 PM, colony.three--- via Shorewall-users wrote: > > > ‐‐‐ Original Message ‐‐‐ > > > > On April 6, 2018 11:58 AM, colony.th...@protonmail.ch wrote: > > > > > ‐‐‐ Original Mess