On 7/5/10 7:28 AM, Tom Eastep wrote: >> Any Ideas? > > > A shorewall dump taken when there is little or no traffic flowing is not > particularly useful for analyzing TC problems but it looks to me as if > you have entries in /etc/shorewall/tcfilters with 0.0.0.0 in the SOURCE > and DEST columns where you really want 0.0.0.0/0.
I notice that you are running a particularly ancient version of Shorewall (4.2.1 -- Released in October of 2008). I found the following under 'Problems Corrected' in the release notes for 4.2.8: 5) When a network address was specified in the SOURCE or DEST column of /etc/shorewall/tcfilters, Shorewall-perl was generating an incorrect netmask. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
