[Shorewall-users] How to drop established connection

Tom Eastep
Fri, 13 Dec 2002 15:44:36 -0000

--On Friday, December 13, 2002 02:46:31 PM +0100 Remco Barendse
<shorewall@barendse.to> wrote:

> From what I saw earlier on this list I think it''s not possible.
>
> As a dirty hack you could :
> bring down your public interface, stop shorewall, bring up your interface
> again and restart shorewall
>
> The downside is that your server will be unavailable for a couple of
> seconds.....
>

Another approach is to stop Shorewall and unload all of the netfilter
modules then start Shorewall. NetFilter provides no other way to do this.

-Tom
--
Tom Eastep   \ Shorewall - iptables made easy
Shoreline,    \ http://shorewall.sf.net
Washington USA \ teastep@shorewall.net