> In the generated firewall script, there is a function named > "stop_firewall()". In that function is the input passed to > iptables-restore when stopping the firewall. It should contain: > > *nat > :PREROUTING ACCEPT [0:0] > :OUTPUT ACCEPT [0:0] > :POSTROUTING ACCEPT [0:0] > COMMIT > > Those 5 lines should be clearing the NAT table during 'shorewall stop'. > Does your generated script contain those 5 lines? >
Hi, I don't recall the previous exact version now, I could pull it from my build scripts, but it's a 4.4 around 2-4 months old. Right now I have the following (shall I build a minimal failing case and email the config?) *nat :PREROUTING ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :eth1_masq - [0:0] :eth2_masq - [0:0] :eth3_masq - [0:0] :ppp0_masq - [0:0] :ppp10_masq - [0:0] :ppp11_masq - [0:0] :ppp12_masq - [0:0] :ppp13_masq - [0:0] :ppp1_masq - [0:0] :ppp2_masq - [0:0] :ppp3_masq - [0:0] :wlan1_masq - [0:0] :wlan2_masq - [0:0] -A POSTROUTING -o eth1 -j eth1_masq -A POSTROUTING -o eth2 -j eth2_masq -A POSTROUTING -o eth3 -j eth3_masq -A POSTROUTING -o wlan1 -j wlan1_masq -A POSTROUTING -o wlan2 -j wlan2_masq -A POSTROUTING -o ppp0 -j ppp0_masq -A POSTROUTING -o ppp1 -j ppp1_masq -A POSTROUTING -o ppp2 -j ppp2_masq -A POSTROUTING -o ppp3 -j ppp3_masq -A POSTROUTING -o ppp10 -j ppp10_masq -A POSTROUTING -o ppp11 -j ppp11_masq -A POSTROUTING -o ppp12 -j ppp12_masq -A POSTROUTING -o ppp13 -j ppp13_masq -A eth1_masq -j MASQUERADE -A eth2_masq -j MASQUERADE -A eth3_masq -j MASQUERADE -A ppp0_masq -j MASQUERADE -A ppp10_masq -j MASQUERADE -A ppp11_masq -j MASQUERADE -A ppp12_masq -j MASQUERADE -A ppp13_masq -j MASQUERADE -A ppp1_masq -j MASQUERADE -A ppp2_masq -j MASQUERADE -A ppp3_masq -j MASQUERADE -A wlan1_masq -j MASQUERADE -A wlan2_masq -j MASQUERADE COMMIT Thanks Ed W ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2 _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
