[Shorewall-users] Opportunistic encryption

Tom Eastep
Thu, 31 Oct 2002 23:10:18 -0000

--On Thursday, October 31, 2002 10:20:54 AM -0600 Homer Parker
>
> 	That got rid of all the errors in the log files... But, I could still not
> transfer any data, to an OE site or not.. Which is the same result I just
> got using the rules on their page... So, I guess I''m fighting
multiple
> problems :(
>

If stopping Shorewall got rid of FreeS/Wan error messages and you
aren''t
seeing any Shorewall messages in your log then the affected packets must be
being silently dropped or rejected -- Shorewall can do that in one of
several places:

a) common and icmpdef chains
b) newnotsyn chain (if LOGNEWNOTSYN="" or if the log level
isn''t routed by
syslogd)
c) blacklst chain
d) man1918 and rfc1918 chains
e) rules file
f) a REJECT or DROP policy that doesn''t specify a log level or that
specifies a log level that isn''t routed by syslogd

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net