Christian Aust wrote:
Am 12.08.2008 um 01:45 schrieb Tom Eastep:This is reinforced by the fact that with the rules you posted, you should have no problem with mDNS in the local network yet you claim that you are. So something is wrong here....Please find attached two Shorewall dumps, one from a Shorewall configuration compiled using the shell compiler, the other one using perl. With the shell configuration, mDNS works (I can ping a host on the .local. domain), with the perl-generated configuration, it doesn't as the ping times out.
As I told you earlier, the MULTICAST option doesn't apply to your setup. Please turn it off and mDNS will begin working. When MULTICAST=Yes, multicast packets to/from the firewall must be explicitly ACCEPTed via rules. They do not pass through the policy-generated Netfilter rules.
-Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
