-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On 03/24/2017 09:11 AM, Nerijus Baliunas wrote:
> On Fri, 24 Mar 2017 08:51:12 -0700 Tom Eastep
> <[email protected]> wrote:
>
>> You could also insert an ACCEPT rule in the nat table in front of
>> the DNAT rule for port 443.
>>
>> iptables -t nat -I ethX_dnat -p tcp --dport 443 -j ACCEPT
>>
>> where ethX is your Internet interface.
>
> iptables -t nat -I em1_dnat -p tcp --dport 443 -j ACCEPT iptables:
> No chain/target/match by that name.
>
You'll have to look at the nat table then and find the rule:
shorewall show nat
- -Tom
- --
Tom Eastep \ Q: What do you get when you cross a mobster with
Shoreline, \ an international standard?
Washington, USA \ A: Someone who makes you an offer you can't
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org
iQIcBAEBCAAGBQJY1U3vAAoJEJbms/JCOk0Q1YMQAI2T3q8RVXg5BEbk4a3S8e0z
KWOcH+juRfUFBbDj+kJ/yqRV+KgUqm1Htr09nlcexKnt+fyvmRr93AwQ8HzY9lEm
UJC7zpqkyc//9FfLH+VW997xBn+IM2jikp5A5CtWNnAHzwoM3DwFlndJEk4nS/Vz
Ke/aIo40LgIt0UdYHrYQOjOSB/oiK2vUfb0GIpBMfVkaKpOQgdB8kT1B2uLNcaOE
JAtze0Ndi4Gq+h7yTR0pcoRzhGun1RwfvmKf2HQrgbdrUM5wMzc4TQSN2dbVCXRt
hk0TMNd/jurMpuxBzncgV/06GWe6U5C820kTxJB1BdlU3q0vTKz936Pp3WsVybZJ
vfH/aZTI59Y9KwOhUmONylYF2gwy7Eh9/xFUwNypKZX0K5bMjB+v7najQtrxBkSG
REpE9f+gpehhA3T6JLkf3Xlq+fi3tPlysAXcVsPYQ5p9prvb7nUfNN6qLZ8AX6p4
GvsW3NXes9znTlEhYaEoR7VuCLs6wF9OAp9ruD5GMSOTzxgQJ69R6opeHbNGeJhC
C4lB+oQY1v08F4tuRC5Q/57+RfVRV8JAqecQiBRcMnjyVK4FGQvS1/0sFeb1+3aI
L5vGOBEMmdK4K44qLK9M1eEytaljgHPDbJTOb0jk+VMBBU27NmuaQMNj7E0e43yf
BiiyVeA1eQO6Qkw57Ldo
=nnSH
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
