Tom

Testing a script to compare the iptables rules generated by shorewall-shell 
and shorewall-perl has hightlighted the following discrepancy:
 
Rule:

        REDIRECT  lan  3128  tcp  443  -  10.1.1.1,10.1.1.2


when compiled with shorewall-shell generates:

        -A lan2fw -p tcp -m tcp --dport 3128 -j ACCEPT


when compiled with shorewall-perl generates:

        -A lan2fw -p tcp -m tcp --dport 3128 -m conntrack --ctorigdst 10.1.1.1 
-j
        ACCEPT
        -A lan2fw -p tcp -m tcp --dport 3128 -m conntrack --ctorigdst 10.1.1.2 
-j
        ACCEPT

Steven.




-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to