On 4/15/2014 1:07 AM, Hervé Werner wrote: > > OK that addresses the case of multiple interfaces sharing multiple zones. > > However I'm puzzled about the configuration with only one network > interface (first part of my email), I'm wondering why smurfs et > tcpflags checks are not applied to all zones. Did I misread the > iptable rules that have been generated ?
The normal way to configure this setup is to consider 'loc' to be nested within 'net' (as I have done in the files that I posted). If you configure it that way, you get the smurf filtering done correctly. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/NeoTech
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
