Tom Eastep wrote:
> Steven Jan Springl wrote:
>> On Tuesday 08 May 2007 01:59, Tom Eastep wrote:
>>> Tom Eastep wrote:
>>>> Steven Jan Springl wrote:
>>>>> Tom
>>>>>
>>>>> shorewall.conf entries:
>>>>>
>>>>>   LOGRATE=10/second
>>>>>   LOGBURST=10
>>>>>   FASTACCEPT=No
>>>>>
>>>>> zones file
>>>>>   fw   firewall
>>>>>   lan  ipv4  mss=22
>>>>>
>>>>> rules entries:
>>>>>
>>>>>   SECTION ESTABLISHED
>>>>>   LOG:warn  lan  fw  tcp  21
>>>>>   SECTION RELATED
>>>>>   LOG:warn  lan  fw  tcp  20
>>>>>   SECTION NEW
>>>>>   ACCEPT     lan  fw  tcp  21,22
>>>>>
>>>>> When compiled with shorewall-perl they generate the rules in attached
>>>>> file iptables-perl. They look incorrect to me.
>>>>>
>>>>> When compiled with shorewall-shell they generate the rules in attached
>>>>> file iptables-shell. They look correct to me.
>>>> Steven,
>>>>
>>>> revision 6275 should work better.
>>> I'm still working on the MSS part....
>>>
>>> -Tom
>> Tom
>>
>> There are also the LOGRATE a LOGBURST parameters form shorewall.conf that 
>> seem 
>> to be ignored.
> 
> Steven,
> 
> I believe all of your reported problems are corrected in revision 6277.
> 

Take that back -- I found more problems that are corrected in revision 6278.

Thanks again, Steven

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to