[Shorewall-users] Shorewall overlapping zone problem

Tom Eastep
Wed, 29 May 2002 13:04:50 -0000

On Wed, 29 May 2002, Alain Degreffe wrote:

>
> Hi,
>
>
> I have a serious problem with shorewall 1.2.6:
>
>
> I have a loc type zone and a free zone ( some computers in the loc zone )
with
> full access to all zones. (defined with host file )
>
>
> I have added :
>
>
> free all  ACCEPT
>
>
> BUT Shorewall isolate my "free" subzone in the FORWARD and OUTPUT
CHAIN.
> "free" is able to connect anything BUT the reverse path is
blocked due to the
> fact that this stub zone do not follow the parent zone''s rules. (I
mean
> ZoneX -> loc ACCEPT is not applied to my sub zone "free" )
>
>
>
> Each other zone is blocked by rules !!! but loc is able to do more
>
>

What is the order of ''free'' and ''loc'' in
your /etc/shorewall/zones file?

-Tom