On 5/20/2016 9:30 AM, Eric Teeter wrote: > Tom: > > I have Shorewall v 4.5.21.6 and trying IPSET when I put the following in > blrules file: > > #ACTION SOURCE DEST PROTO DEST > SOURCE ORIGINAL RATE USER/ MARK CONNLIMIT TIME > # > DROP net:+blacklist4 > > and refreshed I got the following: > > Compiling... > Processing /etc/shorewall/params ... ... > Compiling /etc/shorewall/blrules... > ERROR: Missing destination zone /etc/shorewall/blrules (line 13) > > Then when I added all in the destination zone > > #ACTION SOURCE DEST PROTO DEST > SOURCE ORIGINAL RATE USER/ MARK CONNLIMIT TIME > # > DROP net:+blacklist4 all > > It worked! > > Is this the way it suppose to work having to supply both source and > destination.
Yes. > Your sample does not show this. Which sample??? > Does version 5 do the same thing? > when I upgrade > Yes -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Mobile security can be enabling, not merely restricting. Employees who bring their own devices (BYOD) to work are irked by the imposition of MDM restrictions. Mobile Device Manager Plus allows you to control only the apps on BYO-devices by containerizing them, leaving personal data untouched! https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
