search for: eth1_in

...L RATE USER/ # PORT PORT(S) DEST LIMIT GROUP DNAT net loc:192.168.1.2 tcp 25 - 200.200.200.250 when i list nat rules with iptables i got this Chain eth1_in (1 references) pkts bytes target prot opt in out source destination 0 0 DNAT all -- * * 0.0.0.0/0 200.200.200.250 to:192.168.1.2 Chain net_dnat (1 references) pkts bytes target prot opt in out source de...

...lst'' /tmp/iptables.save :blacklst - [0:0] [0:0] -A blacklst -m mac --mac-source 00:04:E2:83:7C:75 -j LOG --log-prefix "Shorewall:blacklst:DROP:" --log-level 7 [0:0] -A blacklst -m mac --mac-source 00:04:E2:83:7C:75 -j DROP [1260:97713] -A eth1_fwd -j blacklst [1086:255521] -A eth1_in -j blacklst the blacklst rull has not bee triggered but the log entries continue :( I thought I had a handle on this stuff but I guess that is what I get for thinking. There is obviously something I am missing here but I am stumped ohyeah, [root@fumcbafw shorewall]# lsmod |grep mac ipt_mac...

...at I have done, I ran tcpdump to make sure packets are reaching server which they are. There is no shorewall items in logfile to show block. I then did shorewall dump, which shows the iptables counts. The thing that looks funny is the packets are going to net2loc and eth1_fwd, instead of net2fw and eth1_in. Attached is my shorewall dump. Thanks, Brian

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi everybody, this is my first post here, i''ve just syubscribed and i woud like to ask a question. i''m running shorewall latest version with mrtg and rrdtool, with the perl shorewall-stats.pl for reporting. the problem is that the pearl gets the stats by the shorewall show command and it''s human readeable bytes form, so

I have searched your FAQ''s and read the documentation on your site as well as googling. I am not able to figure this out. If you have any ideas can you please help. I am using the linux-ha failover with redundant firewalls. As part of the function of the linux-ha software consists a service called heartbeat which is a connection from each failover node through a serial cable or ethernet.

...OP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 79 12869 eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 5 1015 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 7 361 tunl_in all -- tunl+ * 0.0.0.0/0 0.0.0.0/0 0 0 common all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/...

...OP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 310 15500 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 16820 7400K eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 332 45305 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 3726 828K tunl_in all -- tunl+ * 0.0.0.0/0 0.0.0.0/0 0 0 common all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/...

...in INPUT (policy DROP 9 packets, 1024 bytes) pkts bytes target prot opt in out source destination 592 34399 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 DROP !icmp -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 299K 333M eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 490K 69M eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 12739 5222K eth2_in all -- eth2 * 0.0.0.0/0 0.0.0.0/0 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0 0 0...

...in out source destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 DROP !icmp -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 65 8740 eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 1747 1175K eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 eth2_in all -- eth2 * 0.0.0.0/0 0.0.0.0/0 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0...

...in INPUT (policy DROP 9 packets, 1024 bytes) pkts bytes target prot opt in out source destination 592 34399 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 DROP !icmp -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 299K 333M eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 490K 69M eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 12739 5222K eth2_in all -- eth2 * 0.0.0.0/0 0.0.0.0/0 0 0 Drop all -- * * 0.0.0.0/0 0.0.0.0/0 0 0...

...OP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 11 1181 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 common all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:'...

Hello, We are using shorewall-3.0.7-1, I was tried the video conference server doesn''t via shorewall that was no problem, can I upgrade shorewall version to fix this problem ? our boss need use video conference this few days, so this is emergency. Thx ~~ --------------------------------- Yahoo! 網上安全攻略，教你如何防範黑客! 了解更多

Hi everybody I have a Problem with Masquerading from my local net (loc) to my VPN (loc2). I can reach every Service from loc2 in loc, but I can''t get reach any service from loc in loc2. Has somebody an Idea where my mistake is ? Without shorewall, it was working. Thanks for helping Lars Technical Information : Shorewall 2.0.13 Suse 9.0 *177.177.77.X The first 3 Counts are changed

...t opt in out source destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 xenbr0_in all -- xenbr0 * 0.0.0.0/0 0.0.0.0/0 0 0 eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 97 6100 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 xenbr0_fwd all -- xe...

...0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 DROP !icmp -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 63 8700 eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 602 38984 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:'...

...0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 DROP !icmp -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 6 312 eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 0 0 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 common all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:'...

...29 3189 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 DROP !icmp -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 27 1831 ppp0_in all -- ppp0 * 0.0.0.0/0 0.0.0.0/0 1 236 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 137 10528 eth2_in all -- eth2 * 0.0.0.0/0 0.0.0.0/0 0 0 common all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0...

...ers reset Sun May 29 07:43:39 CEST 2005 Chain INPUT (policy DROP 5 packets, 244 bytes) pkts bytes target prot opt in out source destination 410 42869 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 397 240K ppp0_in all -- ppp0 * 0.0.0.0/0 0.0.0.0/0 32 2116 eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 482 260K eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:'' 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in ou...

...e destination 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 DROP !icmp -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 988 75519 eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 4 968 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 235 21620 eth2_in all -- eth2 * 0.0.0.0/0 0.0.0.0/0 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0...

...* 0.0.0.0/0 0.0.0.0/0 350 40966 accounting all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 DROP !icmp -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 160 14446 eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0 0 0 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0 189 26286 eth2_in all -- eth2 * 0.0.0.0/0 0.0.0.0/0 0 0 eth3_in all -- eth3 * 0.0.0.0/0 0.0.0.0/0 0 0 Reject all -- * * 0.0.0.0/0 0.0.0.0/0 0...