Vieri Di Paola wrote: > Please disregard the time stamps as the two systems' > clocks are skewed. > > Updated shorewall dumps for both systems > (gateway and bridge): > > http://213.96.91.201/shorewall/ >
In this dump, I did not see a conntrack entry on the bridge as before but there is one on the outer firewall. tcp 6 0 SYN_RECV src=194.179.55.129 dst=192.168.100.2 sport=39005 dport=25 packets=1 bytes=52 src=10.215.144.7 dst=194.179.55.129 sport=25 dport=39005 packets=6 bytes=312 mark=2 use=1 My advice from yesterday still stands (see my response to my own post) -- you need to understand where the responding SYN,ACK is being lost. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
