Tom Eastep wrote: > Tom Eastep wrote: > > Klemens Rutz wrote: > >> Hi, > >> > >> playing around with the nosmurfs option I found out that the firewall > >> script contains no rules to enter <interface>_fwd chains when > >> generated shorewall-perl: > >> # grep eth0_fwd firewall > >> :eth0_fwd - [0:0] > >> -A eth0_fwd -m state --state NEW,INVALID -j smurfs > >> > >> As a result the nosmurf option does not affect forwarded packages. > >> This is also true for other interface options like e.g. tcpflags, > >> maclist, etc. > > > > Please see if the attached hack to > > /usr/share/shorewall-perl/Shorewall/Chains.pm corrects this for you. > > I've come up now with the correct patch -- please reverse the prior patch > (if you've applied it) and apply this one. > > This will be released shortly as Shorewall-perl-4.2.6.1.
Many thanks. Both patches have fixed the issue, the second obviously in line with the changed design in shorewall-perl... Regards, Klemens ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
