Hi

>> Right now I have the following (shall I build a minimal failing case and
>> email the config?)
> Be sure to send a capabilities file as well.

Near as I can tell, a very minimal rule and masq is triggering this.  I 
do have an unusual interfaces file though?


Minimal config here:
     http://www.mailasail.com/w/uploads/Support/shorewall.broken.tar.gz

Capabilities here:
$ shorewall show capabilities
Shorewall has detected the following iptables/netfilter capabilities:
    NAT: Available
    Packet Mangling: Available
    Multi-port Match: Available
    Extended Multi-port Match: Available
    Connection Tracking Match: Available
    Extended Connection Tracking Match Support: Available
    Packet Type Match: Available
    Policy Match: Available
    Physdev Match: Available
    Physdev-is-bridged Support: Available
    Packet length Match: Available
    IP range Match: Available
    Recent Match: Available
    Owner Match: Available
    Ipset Match: Available
    CONNMARK Target: Available
    Extended CONNMARK Target: Available
    Connmark Match: Available
    Extended Connmark Match: Available
    Raw Table: Available
    Rawpost Table: Not available
    IPP2P Match: Available
    CLASSIFY Target: Available
    Extended REJECT: Available
    Repeat match: Available
    MARK Target: Available
    Extended MARK Target: Available
    Extended MARK Target 2: Available
    Mangle FORWARD Chain: Available
    Comments: Available
    Address Type Match: Available
    TCPMSS Match: Available
    Hashlimit Match: Available
    NFQUEUE Target: Available
    Realm Match: Available
    Helper Match: Available
    Connlimit Match: Available
    Time Match: Available
    Goto Support: Available
    LOGMARK Target: Available
    IPMARK Target: Available
    LOG Target: Available
    ULOG Target: Not available
    NFLOG Target: Available
    Persistent SNAT: Available
    TPROXY Target: Available
    FLOW Classifier: Available
    fwmark route mask: Available
    Mark in any table: Available
    Header Match: Not available
    ACCOUNT Target: Available
    AUDIT Target: Available
    ipset V5: Available
    Condition Match: Not available
    Statistic Match: Available
    IMQ Target: Not available
    iptables -S: Available
    Basic Filter: Available
    CT Target: Available

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to