S. J. van Harmelen wrote: > When I try you rules: > > DNAT- net loc:192.168.1.160 tcp 80 > Limit:info:HTTPACCESS,3,60 net loc:102.168.1.160 tcp 80 > > I receive this warning when doing 'shorewall check': > > WARNING: The destination zone (loc) is ignored in DNAT rules : > /etc/shorewall/rules (line 34) > > I understand that it is just a warning, but should I change anything > to get rid of the warning? Or is this the only way and should I just > ignore the warning?
I gave you those rules before you had mentioned what version of Shorewall you were running. Replace 'net' with '-' in the first rule. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users