On 03/28/2016 09:55 AM, Paolo Prandini wrote: > Sorry, my question was not clear enough. > I know about settings for sending and accepting redirects. > Currently I am not either accepting or sending them. > The question is: can I filter the source for redirects using shorewall > or are those packets captured by the kernel BEFORE getting to shorewall? > I would like to filter the source address of IP redirects and have the > kernel accept only those coming from the routers I want.
To filter redirects, you must place rules in the RELATED section of the rules file. If your RELATED_DEFAULT setting is ACCEPT (the default), then you must place DROP rules in that section for redirects that you want to reject. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
