Steven Jan Springl wrote:
> Tom
> 
> Testing routeback.
> 
> interface:
> 
> lan  eth0  routeback,detectnets
> 
> policy:
> 
> lan  lan  DROP
> 
> produces the following iptables rules:
> 
> -A eth0-fwd -o eth0 -s 192.168.0.0/24 -d 192.168.0.0/24 -j lan2lan
> .
> .
> -A lan2lan -j Drop
> -A lan2lan -j ACCEPT      <<<< should this not be -j DROP ?

Yes, it should.

Fixed in revision 6072.

Thanks, Steven

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to