Just a note if anyone else has this issue. I was testing shorewall with Debian Stretch and ran into an issue with NFLOG and the --nflog-range parameter. The shorewall version in Stretch is 5.0.15.6. however the nflog-size change is not done until 5.1.
My fix was to change the logging parameters from LOG="NFLOG(1,0,1)" LOGBL="NFLOG(2,0,1):bl" ... to LOG="NFLOG(1,,)" LOGBL="NFLOG(2,,):bl" ... since I was using the defaults for the other parameters. Wayne ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users