search for: int2al

...to network behind D-Link DI-804HV VPN router who is on dynamic IP address. For this I am using dyndns.org alias on DI804 side. Shorewall is stopping all packets comming from DI804 whey trying to establish tunnel. Log on Shorewall machine looks like this: Jan 16 18:31:35 FIREWALL kernel: Shorewall:INT2all:DROP:IN=Internet_Interface OUT= MAC=***** SRC=DI804_IP DST=Firewall_IP LEN=116 TOS=0x00 PREC=0x00 TTL=60 ID=191 PROTO=UDP SPT=500 DPT=500 LEN=96 Multiple IPSEC tunnels are active on Shorewall machine with all kinds of equipment on other side (software and hardware VPN devices) but all of them hav...

...hernet segment so all MAC addresses used in verification must belong to devices physically connected to one of the LANs to which your firewall is connected", but still I get info about MAC addresses on Internet adapter as well in syslog, for example: Apr 15 14:20:11 FIREWALL kernel: Shorewall:int2all:DROP:IN=ethXX OUT= MAC=00:04:75:a0:5e:f2:00:0d:ed:8a:ca:80:08:00 SRC=68.88.14.151 DST=my.internet.fixed.ip LEN=48 TOS=0x00 PREC=0x00 TTL=107 ID=21260 DF PROTO=TCP SPT=3794 DPT=17300 WINDOW=16384 RES=0x00 SYN URGP=0 MAC info is logged for some rule viloations, not all. Is it up to ISP? IPSEC unfor...