Rich Wales wrote:

> 
> I would also have thought (possibly naively?) that even if there had
> been a stale ARP cache issue, it wouldn't have affected things if I
> were originating connections from my firewall (as opposed to outside
> hosts trying to connect to me).

That naive assumption is incorrect. How do you think responses to your
outgoing packets could reach your system if they were being sent to the
wrong link-layer address?

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to