i installed shorewall-perl with the same version than shorewall (4.0.15)
i restarted shorewall with this command:
shorewall restart -C perlthere is been no errors.
but there is always the same dropped packets in /var/log/messages:
Apr 8 19:38:31 ps75dmz01 kernel: Shorewall:INPUT:DROP:IN=eth0 OUT=
MAC=00:c0:4f:56:c9:eb:00:07:cb:23:27:c5:08:00 SRC=202.173.185.229
DST=192.168.42.92 LEN=48 TOS=0x00 PREC=0x00 TTL=103 ID=51444 DF PROTO=TCP
SPT=4230 DPT=51413 WINDOW=65535 RES=0x00 SYN URGP=0
Apr 8 19:38:35 ps75dmz01 kernel: Shorewall:INPUT:DROP:IN=eth0 OUT=
MAC=00:c0:4f:56:c9:eb:00:07:cb:23:27:c5:08:00 SRC=202.173.185.229
DST=192.168.42.92 LEN=48 TOS=0x00 PREC=0x00 TTL=103 ID=51933 DF PROTO=TCP
SPT=4230 DPT=51413 WINDOW=65535 RES=0x00 SYN URGP=0
Apr 8 19:38:40 ps75dmz01 kernel: Shorewall:INPUT:DROP:IN=eth0 OUT=
MAC=00:c0:4f:56:c9:eb:00:07:cb:23:27:c5:08:00 SRC=202.173.185.229
DST=192.168.42.92 LEN=48 TOS=0x00 PREC=0x00 TTL=103 ID=52654 DF PROTO=TCP
SPT=4230 DPT=51413 WINDOW=65535 RES=0x00 SYN URGP=0
Apr 8 19:38:43 ps75dmz01 kernel: Shorewall:INPUT:DROP:IN=eth0 OUT=
MAC=00:c0:4f:56:c9:eb:00:07:cb:23:27:c5:08:00 SRC=85.69.134.203
DST=192.168.42.92 LEN=95 TOS=0x00 PREC=0x00 TTL=121 ID=8642 PROTO=UDP SPT=47648
DPT=51413 LEN=75
Apr 8 19:38:50 ps75dmz01 kernel: Shorewall:INPUT:DROP:IN=eth0 OUT=
MAC=00:c0:4f:56:c9:eb:00:07:cb:23:27:c5:08:00 SRC=80.185.202.177
DST=192.168.42.92 LEN=95 TOS=0x00 PREC=0x00 TTL=120 ID=14491 PROTO=UDP
SPT=47647 DPT=51413 LEN=75
Apr 8 19:38:56 ps75dmz01 kernel: Shorewall:INPUT:DROP:IN=eth0 OUT=
MAC=00:c0:4f:56:c9:eb:00:07:cb:23:27:c5:08:00 SRC=79.72.177.124
DST=192.168.42.92 LEN=95 TOS=0x00 PREC=0x00 TTL=113 ID=20802 PROTO=UDP
SPT=49689 DPT=51413 LEN=75
Apr 8 19:38:58 ps75dmz01 kernel: Shorewall:INPUT:DROP:IN=eth0 OUT=
MAC=00:c0:4f:56:c9:eb:00:07:cb:23:27:c5:08:00 SRC=77.193.206.64
DST=192.168.42.92 LEN=95 TOS=0x00 PREC=0x00 TTL=119 ID=26001 PROTO=UDP
SPT=57572 DPT=51413 LEN=75
You will find in attachment the output of shorewall dump
thanks
> Date: Sun, 5 Apr 2009 08:53:01 -0700
> From: [email protected]
> To: [email protected]
> Subject: Re: [Shorewall-users] dropped packets on shorewall + bittorent
>
> christophe savigny wrote:
> >
> > Thanks.
> > In fact, Shorewall uses the shell compiler.
> > I installed shorewall-perl.
> > i added this line in the shorewall config file:
> >
> > SHOREWALL_COMPILER=perl
> >
> > I restarted shorewall but i have the below errors
> >
> > 16:37:58 Compiling...
> > ERROR: Invalid value ( 3 ) supplied for parameter verbosity
>
> According to your prior post:
>
> > I installed Shorewall (Version: 4.0.15-1~bpo40+1) on a debian server.
>
> The above error message is only produced by Shorewall-perl 4.2.*. So
> have you also upgraded shorewall-common to version 4.2? I suspect not
> since /sbin/shorewall should have either caught an invalid VERBOSITY
> setting in /etc/shorewall/shorewall.conf or would have clamped the
> verbosity after it had been adjusted by -q and -v options.
>
> -Tom
> --
> Tom Eastep \ When I die, I want to go like my Grandfather who
> Shoreline, \ died peacefully in his sleep. Not screaming like
> Washington, USA \ all of the passengers in his car
> http://shorewall.net \________________________________________________
>
Votre correspondant a choisi Hotmail et profite d'un stockage quasiment
illimité. Créez un compte Hotmail gratuitement !
_________________________________________________________________
Téléphonez gratuitement à tous vos proches avec Windows Live Messenger !
Téléchargez-le maintenant !
http://www.windowslive.fr/messenger/1.asp
------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
