search for: werkowski

...d destination port 1? (I was unable to get any clarity from Google...) --------- May 27 11:01:47 ykrgw kernel: Shorewall:loc2net:DROP:IN=eth0 OUT=eth1 SRC=192.168.3.3 DST=166.84.151.198 LEN=84 TOS=0x00 PREC=0x00 TTL=127 ID=37008 PROTO=UDP SPT=137 DPT=1 LEN=64 ---------- Thanks in advance. Jim Werkowski jwerkowski@attglobal.net

...rnel hacker here.) (I have installed both OpenSwan 2.2 and 1.5 using the RPM for the EL kernels. I get ipsec working in both versions, but can''t sort out the masquerade and routing problems.) Thanks in advance for info you have on this. Links to helpful docs are much appreciated. Jim Werkowski

Hi all -- I would like to set up a script that would add and drop DNAT rules while Shorewall is running. I don''t see a /sbin/shorewall command that would do it. So, it seems to me the script could edit /etc/shorewall/rules to insert or remove the DNAT rules as needed, then execute a /sbin/shorewall restart command. Does anyone see a reason not to do that, or see a way to do it