On 09/26/2012 08:54 AM, Nuno Fernandes wrote:
 > Hello,
 >
 > Attached i'm sending the tgz of /etc/shorewall as a shorewall dump of
 > the server. Since my last email i've added 2 new interface cards
 > (eth4 and eth5) to new providers.
 >
 > When i'm on the internet and try:
 >
 > $ telnet EXTERNAL_IP 443
 >
 > Trying EXTERNAL_IP...
 >
 > Connected to EXTERNAL_IP.
 >
 > Escape character is '^]'.
 >
 > I get the connection, but when i'm on trying to connect from the tux
 > hosts:
 >
 > $ telnet EXTERNAL_IP 443
 >
 > Trying EXTERNAL_IP...
 >
 > telnet: connect to address EXTERNAL_IP: Connection refused
 >
 > Hope you can help,

The problem is that you have this in /etc/shorewall/policy:

        tux     loc     ACCEPT

IMPLICIT_CONTINUE won't override that policy. So you either need to 
remove that policy or change it to

        tun     loc     CONTINUE

If you take the latter approach (which I recommend), then you can set 
IMPLICIT_CONTINUE=No, since it is no longer necessary.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

------------------------------------------------------------------------------
How fast is your code?
3 out of 4 devs don\\\'t know how their code performs in production.
Find out how slow your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219672;13503038;z?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to