Thomas Debost wrote: > I am trying to apply the new :T flag in tcrules. the man page for this > file [1] sayas that if SOURCE is $FW then rules are applied in OUTPUT. > > this doesn't seem to work on my setup. I have in tcrules : > ------------------------------------------------------------------------ > RESTORE:T 0.0.0.0/0 0.0.0.0/0 all - - - 0 > CONTINUE:T 0.0.0.0/0 0.0.0.0/0 all - - - !0 > 2:T $FW 0.0.0.0/0 ipp2p:all > SAVE:T 0.0.0.0/0 0.0.0.0/0 all - - - !0 > ------------------------------------------------------------------------
The man page says that if neither :F nor :P nor :T is specified, *then* if the SOURCE is $FW then rules are applied in OUTPUT. It your case, all of your rules specify :T so they are all applied in POSTROUTING. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
