Re: [Shorewall-users] Do SNAT rules support ipsets?

2018-04-06 Thread Igor Sverkos
Hi Tom, thank you! I took the opportunity, created my own Debian packages and upgraded to 5.1.12.3. If the Debian maintainer is following this list: Would be nice to see a package bump in 9.5 :) -- Regards, Igor -- C

Re: [Shorewall-users] Do SNAT rules support ipsets?

2018-04-06 Thread Tom Eastep
On 04/06/2018 09:42 AM, Tom Eastep wrote: > On 04/05/2018 07:50 PM, Igor Sverkos wrote: > > It is a bug that was corrected in Shorewall 5.1.7. > Attached is the patch. patch /usr/share/shorewall/Shorewall/Rules.pm < commit-3b373f3 -Tom -- Tom Eastep\ Q: What do you get when you

Re: [Shorewall-users] Do SNAT rules support ipsets?

2018-04-06 Thread Tom Eastep
On 04/05/2018 07:50 PM, Igor Sverkos wrote: > Hi, > > I am on Debian Stretch system with multiple IP addresses and > shorewall-5.0.15.6. > > I have set "/etc/shorewall/snat" to > >> SNAT(1.2.3.4)0.0.0.0/0 eth0:+ip_restricted_endpoints[dst] > > My expectation: > > Whenever I