Shorewall users - Dec 2007 - blocking

As i can see, if i use Shorewall tools for blocking client
traffic ('blacklist' file, 'shorewall drop') it has effect only
for new connections but existed don't blocks. Can i with Shorewall
stop ALL traffic for definite clients?

    Alex
        



-----------
IRR.BY ('Из рук в руки – Онлайн') – крупнейший в Беларуси 
сайт частных объявлений. http://irr.by

-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

alex wrote:
>     As i can see, if i use Shorewall tools for blocking client
> traffic (''blacklist'' file, ''shorewall
drop'') it has effect only
> for new connections but existed don''t blocks. Can i with Shorewall
> stop ALL traffic for definite clients?
	man shorewall.conf

and look for BLACKLISTNEWONLY. Or add a DROP/REJECT rule in the ESTABLISHED
section of the rules file.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key



-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4