On Sat, 8 Sep 2012, Tom Eastep wrote: > I don't believe that. If you remove the 'maclist' option altogether, > then there will be no no br1_rec chain. So the log message that you > posted cannot possibly be issued.
Indeed the log message is not issued. But no packets pass across the firewall from one bridged interface to the client IP that is connected to the other bridge. Steve ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
