-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 05/25/2017 08:40 AM, Vieri Di Paola wrote: > Hi, > > I have another system with Shorewall & Squid running on the same > box. > > Failing to connect from host in 'loc' zone with IP addr. > 10.215.145.8 to http://www.shorewall.net. Nothing in Squid > access.log. > > Here's what I did: > > # shorewall reset Shorewall Counters Reset > > [tried to access from 10.215.145.8 to 63.135.54.24 port 80] > > # shorewall dump > dump > > # fgrep 3129 dump 2 96 TPROXY tcp -- * * > 0.0.0.0/0 0.0.0.0/0 TPROXY redirect > 0.0.0.0:3129 mark 0x200/0x200 > > # ss -tnap | fgrep 3129 LISTEN 0 128 :::3129 > :::* users:(("squid",pid=17339,fd=41)) > > # fgrep 63.135.54.24 dump (nothing) > > I put a big ACCEPT loc $FW all rule for testing purposes. > > I'm attaching the dump. > > What did I do wrong again? >
Please set LOGFILE correctly and reproduce the problem -- there are no log entries listed in this dump, yet there have been packets dropped since the counters were reset. - -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJZJ0InAAoJEJbms/JCOk0QxyQP/RGy6wfckxOTJulVM1FbCHIG ppw/guJSvrJE30a/BcNLv5cErTUWaGG/rhENTW7gpNJZCXC+Fppp8RfJs53TDJaZ ZxNzAUH7VtujDOm48Q2BDJjvgdMsCgIWAPvcf/SDVv2oHpORCoJTEGxfl1ElY96t 4gOCiDaAEBOgzo/DMAnTLhD2dmObBWKIRSrGfkdqOdWD+J0x0GLuGpyIC4P/Fmu4 0mrOjXvIVDXiydD77ZH2duB0BWZO6Pcwj4v3shJ3HCoPmeWOT/69RGBo1BWwSPM0 KEqGmB3YMYgqkD8deppIyrb+EX2xAmKrweE5QIGkVj9KBAil3xCmJnaQQ8C/riqt +lZ8Cx64gZnOIK1qrjxhop+glLFAGgyr6gnIDkAXfGYg9skqT1iGThIE72naG3Ky 6AvgVKvO+u7l2PQ3o4I6FMs8R43tm73OTKRN4hcVLeZ2WkadNtyQ/pHy6/UwJkwR yS+PIOy3zHcaH5l+3J3n7o45NRyS1QkjS+4pP7Wqo/rJEV4k7AF7FQWiFcF06bFj Kn0vPx7kdII3OHfpQitl2n1YLPLmr/gwoMlqr9nDG/bRINrd3JsOPsQnyKiNsyKx VogTSxHiLL3QHIAqTg1CeV9kxnE4GwNHmbEDRtvE6QfPkddR0nAx79JQNUOepEMr rLuIBnG0kobDaCdPVnDb =15uX -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
