search for: rejeced

This is a minor release of Shorewall. Problems Corrected: 1) TCP connection requests rejected out of the common chain are now properly rejected with TCP RST; previously, some of these requests were rejeced with an ICMP port-unreachable response. 2) ''traceroute -I'' from behind the firewall previously timed out on the first hop (e.g., to the firewall). This has been worked around. New Features: 1) Where an entry in the/etc/shorewall/hosts file specifies a particular host or n...

A recent request to provide a way to block access to certain websites (ba= nner=20 ads) led me to an idea. a) A new directory /etc/shorewall/lists b) In this directory, are files containing lists of IP addresses and/or=20 subnets c) a new JUMP rule: =09JUMP:list1=09loc=09net=09tcp=09http d) By default, matching in the list would be by destination address and i= f a=20 match was found, the

Hey guys I''ve been beating my head on this for a few hours. Maybe it is just a stupid configuration error you can point me at. First here is a small diagram of what I am trying to configure: http://6bit.com/img/netdiag.png Currently I only have Shorewall running on the host on the right of the diagram until I can get this working then I''ll add it to the other host as well.