A fix for this problem is available at http://www1.shorewall.net/pub/shorewall/3.2/shorewall-3.2.9. See the known_problems.txt file in that directory.
If IMPLICIT_CONTINUE=Yes is in effect, then sub-zones receive the
implicit CONTINUE policy for their intra-zone traffic (rather than
the implicit ACCEPT policy for such traffic). This can cause
intra-zone traffic to be rejected by rules or policies in one of the
parent zones.
The patch mentioned in the known_problems.txt file applies (with offset) to
all Shorewall 3.2 releases. The 'compiler' file should only be installed if
you are running 3.2.9.
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ [EMAIL PROTECTED]
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
