On 09/26/2012 08:54 AM, Nuno Fernandes wrote:
> Hello,
>
> Attached i'm sending the tgz of /etc/shorewall as a shorewall dump of
> the server. Since my last email i've added 2 new interface cards
> (eth4 and eth5) to new providers.
>
> When i'm on the internet and try:
>
> $ telnet EXTERNAL_IP 443
>
> Trying EXTERNAL_IP...
>
> Connected to EXTERNAL_IP.
>
> Escape character is '^]'.
>
> I get the connection, but when i'm on trying to connect from the tux
> hosts:
>
> $ telnet EXTERNAL_IP 443
>
> Trying EXTERNAL_IP...
>
> telnet: connect to address EXTERNAL_IP: Connection refused
>
> Hope you can help,
The problem is that you have this in /etc/shorewall/policy:
tux loc ACCEPT
IMPLICIT_CONTINUE won't override that policy. So you either need to
remove that policy or change it to
tun loc CONTINUE
If you take the latter approach (which I recommend), then you can set
IMPLICIT_CONTINUE=No, since it is no longer necessary.
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
------------------------------------------------------------------------------
How fast is your code?
3 out of 4 devs don\\\'t know how their code performs in production.
Find out how slow your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219672;13503038;z?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users