On 11/7/2015 12:46 PM, Tom Eastep wrote: > On 11/7/2015 10:28 AM, Stonie R. Cooper wrote:
>> So, what am I doing incorrectly? >> > > We will need to see the entire output of 'shorewall dump'. > Before you collect the dump, check a couple of things: - Verify that you currently have FORWARD_CLEAR_MARK=Yes. That would explain why it appears that marking isn't working. - Set MARK_IN_FORWARD_CHAIN=Yes or place ":F" after MARK(...) in your rules (I'm assuming that the two IP addresses in your marking rules are associated with hosts behind the firewall). -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
