James Gray wrote:
got rid of the "routefilter" option on eth3 and
> eth4, all with the same results.

If 'routefilter' isn't specified on any interface and and
ROUTE_FILTER=No in shorewall.conf, then Shorewall 3.4.6 does nothing WRT
rp_filter settings. As a consequence, we see the following in /proc from
your dump:

   /proc/sys/net/ipv4/conf/eth4/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth4/log_martians = 1

Treatment of these /proc options is improved in Shorewall 4.0 -- see the
4.0.4 release notes.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to