Steven Jan Springl wrote:
> Tom
> 
> Rule: 
> 
> REDIRECT  all  12340  tcp  80  1000:10000  192.168.1.0/24
> 
> when compiled with shorewall-shell generates the following rules:
> 
> -A OUTPUT -d 192.168.1.0/255.255.255.0 -p tcp -m tcp --sport 
> 1000:10000 --dport 80 -j REDIRECT --to-ports 12340 

Note that the above is actually an error -- it should only be generated when
the source zone is 'all+'.

> 
> -A lan_dnat -d 192.168.1.0/255.255.255.0 -p tcp -m tcp --sport 
> 1000:10000 --dport 80 -j REDIRECT --to-ports 12340 
> 
> -A fw2fw -p tcp -m tcp --sport 1000:10000 --dport 12340 -j ACCEPT 
> -A lan2fw -p tcp -m tcp --sport 1000:10000 --dport 12340 -j ACCEPT 
> 
> 
> when compiled with shorewall-perl it produces the following the following 
> error:
> 
> ERROR: Unknown destination zone (12340)

Thanks, Steven.

Fixed in Revision 6237.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to