Tom

A couple of further issues with ESTABLISHED/RELATED sections.
 
If FASTACCEPT=Yes is set and there are rules in the ESTABLISHED section,
shorewall-shell produces the following message:

ERROR: Entries in the ESTABLISHED SECTION of the rules file not permitted with 
FASTACCEPT=Yes

shorewall-perl does not produce a message, but generates iptables rules for 
the entries in the ESTABLISHED section.

The same applies to the RELATED section.

Secondly, shorewall-perl allows actions NONAT and ACCEPT+ in the 
ESTABLISHED/RELATED sections, shorewall-shell does not.

Steven. 

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to