On Tue, Sep 22, 2009 at 06:51:14PM -0400, Max DiOrio wrote:
> Here's my config, maybe someone can spot something that's wrong.

> rules:
> ACCEPT        net:204.11.116.47,204.11.119.47,67.242.xx.xx    $FW     all
> ACCEPT        $FW:204.11.116.47,204.11.119.47,67.242.xx.xx    net     all
The 2nd line doesn't make sense, unless the 204 and 67 addresses are
associated with some interface on the fw.  Move them to the third
column with "net:" prefix.

You can of course look at the output of "iptables -L -v -n -t filter"
for testing how shorewall is interpretting its configuration input.

Justin

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to