On 5/23/11 6:54 PM, Mr Dash Four wrote:
> 
>>> AllowICMPs(audit)       -       -       icmp
>>> DropUPnP(audit)
>>> DropDNSrep(audit)
>>>
>>> So, shouldn't the above be A_ACCEPT and A_DROP instead of ACCEPT and 
>>> DROP then?
>>>     
>>
>> No -- not unless you have modified the macros like I suggested in an
>> earlier post.
>>   
> So, in other words, specifying "audit" in the above 3 macros is 
> completely meaningless then?

You are an output-only device which I'm now shutting off for the night.

Good evening,
-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
vRanger cuts backup time in half-while increasing security.
With the market-leading solution for virtual backup and recovery, 
you get blazing-fast, flexible, and affordable data protection.
Download your free trial now. 
http://p.sf.net/sfu/quest-d2dcopy1
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to