-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 03/24/2017 08:08 AM, Nerijus Baliunas wrote: > On Fri, 24 Mar 2017 07:47:00 -0700 Tom Eastep > <[email protected]> wrote: > >> To solve you issue, I suggest that you place '!direct' in the >> SWITCH column of the your DNAT rule. That way, you can turn it >> off by setting the 'direct' switch. Then the open command will >> work. > > I tried, but got: ERROR: A non-empty SWITCH column requires > Condition Match in your kernel and iptables /etc/shorewall/rules > (line 58) > > It is a CentOS 6 system, probably it does not have Condition > Match? >
Most likely. Might be in the iptables-addons package if that is available for CentOS 6. - -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJY1TkVAAoJEJbms/JCOk0QjgQQALasOKNzcZw6ZRv0D/NsoMR6 kG5oFy8xgOHl0ens8OJdE8vfbHdb0zZ5Malbr8isNZB71J4TkCd4/+x4FXpJyOPP oFWbKrACIPVXIaRGPnn5Ey5arQQa7LGw5Hmfat5ABZFOBXqCMBBU2egv6k/hr0TP 0dTiWKCfGZxLVvJ4JZ76lft3xeQtQLxSmAeBVEjBmYB2I9LvTcJpXmTSdfezZyWG iVMG9TlPsNQaQ8eSFbiTYLkr+lcA5srl4uXgfuAAZLSeYEU0aCcNDN7mVfmoYx2o wJZn/lcUFleeQXc1inlOPGEQcVEp+mT2cPfNOsjFFRa1Swd/bWy7UQYMo+3dqzRW 8p2OykwhkSB9zb0gM3Zk/nrT6OiMCx9TfSa+yyPLt+RUXYGGDdvxPqgQdJSb8bvL L0wmQ0RixXcxy5aLptpgtO7T/AQykhGzlDxavTkmrGnS5Nx4Z8qm7NNKFdZe2Vh8 1j+Oj8R+oZwccXiBF8ksmLFynonK9bLRYexC7XBVs0CmGzaxKrbDqTYWqbpyGrfb TsGN8Htwqw3D0sbWjFFhjXVyQRKqrcL63Wr8p8G5FU+WtrzTJ4aEffqvvCWbg+9/ iU91J+l/u+uuDcZHtp88vjGNJ2xDRfrLUEIxlfyfREkpWINAvRuKMWTm34fV35Lp CAud42hDLFBriLwWpAvm =WV7E -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
