Kai Szymanski wrote:
> Hi!
> 
> I have a strange problem with shorewall on one of our routers. When i 
> configure a rule like
> 
>     ACCEPT  loc:192.x.x.x       net     tcp     80
> 
> this rules will only work if i do a
> 
>     tcpdump -i all port 80
> 
> After doing the tcpdump the clientrules works. When i don't use tcpdump 
> before the connection will be refused.

I think you are drawing the wrong conclusion here. Communication may not
work until you tcpdump but it has nothing to do with the Shorewall rule.

I suggest that you look at first the local then the remote interface
when 'it doesn't work'. And be sure that you don't have your two
interfaces cabled to the same switch/hub.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to