bruma wrote: > Hi, > > I'm using following rule in /etc/shorewall/rules > REJECT:ULOG:P2P loc net ipp2p:all ipp2p > > iptables -L :
That command is completely useless. Please don't post its output on this list. If you want to show netfilter rules, either use "iptables -L -n -v" or "shorewall show". > Chain loc2net (1 references) > target prot opt source destination > ACCEPT all -- anywhere anywhere state > RELATED,ESTABLISHED > ULOG all -- anywhere anywhere ipp2p > v0.8.2 --ipp2p ULOG copy_range 0 nlgroup 1 prefix > `Shorewall:loc2net:REJECT:P2P' queue_threshold 1 > reject all -- anywhere anywhere ipp2p > v0.8.2 --ipp2p > ACCEPT all -- anywhere anywhere > > but ipp2p traffic is not rejected. Why? Am I doing something wrong? > There are also no records of P2P in ULOG log files. If you *really* want to do that then move the rule to the ESTABLISHED section of the rules file. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
