Re: [Shorewall-users] IPSET clarification

Fri, 20 May 2016 20:22:49 -0700

On 5/20/2016 8:34 PM, Tom Eastep wrote:
On 5/20/2016 9:30 AM, Eric Teeter wrote:

Tom:

I have Shorewall v 4.5.21.6 and trying IPSET when I put the following in 
blrules file:

#ACTION         SOURCE                  DEST PROTO   DEST    
SOURCE          ORIGINAL        RATE USER/   MARK    CONNLIMIT       TIME
#
DROP            net:+blacklist4

and refreshed I got the following:

Compiling...
Processing /etc/shorewall/params ...

...

Compiling /etc/shorewall/blrules...
    ERROR: Missing destination zone /etc/shorewall/blrules (line 13)

Then when I added all in the destination zone

#ACTION         SOURCE                  DEST PROTO   DEST    
SOURCE          ORIGINAL        RATE USER/   MARK    CONNLIMIT       TIME
#
DROP            net:+blacklist4          all

It worked!

Is this the way it suppose to work having to supply both source and 
destination.

Yes.


Your sample does not show this.

Which sample???
Page: http://shorewall.net/ipsets.html This is the one!! no DEST

Example 1: Blacklist all hosts in an ipset named "blacklist"

/etc/shorewall/blrules

#ACTION      SOURCE           DEST     PROTO    DPORT
DROP         net:+blacklist


Does version 5 do the same thing?
when I upgrade


Yes

-Tom



------------------------------------------------------------------------------
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j


_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users


--
Eric Teeter 349 N Rutland Ave. Apt 3 Brooklyn WI 53521 (608) 455-4172
------------------------------------------------------------------------------
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to