Christian Aust wrote:
The was nothing in the shorewall logs (I've got the last REJECT rule log with level INFO), but I made sure that the logging worked by accessing some strange ports somewhere, which promptly showed up in the log files. Nothing wrong with logging.
Shorewall suppresses policy logging of packets with a multicast destination address. This is necessary to keep us from being overrun with excited problem reports stating that the user's firewall is under attack from his cable modem, networked printer, IP-enabled refrigerator, etc.
So, what did I do wrong here? I enabled multicasting in shorewall.conf
The setting of that option is very unlikely to be relevant in your case.
and had an "allow all" rule for ICMP.
I know of no connection between ICMP and mDNS... Are you aware of any issues
regarding mDNS?
No.
For the record: mDNS uses UDP port 5353 along with multicasts to 254.0.0.251. Avahi responds to these packets, announcing itself as a mDNS enabled host.Any help is appreciated. Regards,
It is difficult to help when you have said nothing about your Shorewall configuration other than you are using Shorewall-perl. Please see http://www.shorewall.net/support.htm#Guidelines.
But for starters, have you enabled UDP port 5353 from the local net to the firewall?
-Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
