On 5/12/19 9:19 AM, John Hill wrote:
> Thanks You Tom
> Thanks again for Shorewall. 
> 

You're most welcome.

You can eliminate this problem as follows.

Suppose that your current DNAT rule is:

DNAT:NFLOG(xxx) net loc:192.168.0.4:22  tcp 1022 -      70.90.191.124

You can rewrite this rule as:

DNAT-             net loc:192.168.0.4:22 tcp 1022 -     70.90.191.124
ACCEPT:NFLOG(yyy) net loc:192.168.0.4:22 tcp 22   -     70.90.191.124

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to