Shorewall users - Dec 2003 - Re: [Shorewall-newbies] Re: Shorewall-newbies Digest; Problems with blacklist and nat !

Hello,

I have forwarded this to the shorewall-users list.
You will find better support for this obscure problem there.

Regards,

Alex Martin
http://www.rettc.com

Cristian Valentin Barean wrote:
>         Hello !
>     My name is Barean Cristian, and I have a network of  35 users, on a
> Linux Mandrake 9.2 server.
>     As I was adding more users in my network, I found a problem with the
> maclist. From n  ip-macs in the maclist, shorewall is processing only n-1.
> And the nat address to address does''n work, or at list I
coudn''t make it
> work.
> 
>      Thanks!
> 
>        Cristian Barean
> 
> _______________________________________________
> Shorewall-newbies mailing list
> Post: Shorewall-newbies@lists.shorewall.net
> Subscribe/Unsubscribe:
https://lists.shorewall.net/mailman/listinfo/shorewall-newbies
> Support: http://www.shorewall.net/support.htm
> FAQ: http://www.shorewall.net/FAQ.htm
_______________________________________________
Shorewall-users mailing list
Post: Shorewall-users@lists.shorewall.net
Subscribe/Unsubscribe:
https://lists.shorewall.net/mailman/listinfo/shorewall-users
Support: http://www.shorewall.net/support.htm
FAQ: http://www.shorewall.net/FAQ.htm

On Sun, 2003-12-07 at 01:30, Alex Martin wrote:
> Hello,
> 
> I have forwarded this to the shorewall-users list.
> You will find better support for this obscure problem there.
> 
> Regards,
> 
> Alex Martin
> http://www.rettc.com
> 
> Cristian Valentin Barean wrote:
> >         Hello !
> >     My name is Barean Cristian, and I have a network of  35 users, on
a
> > Linux Mandrake 9.2 server.
> >     As I was adding more users in my network, I found a problem with
the
> > maclist. From n  ip-macs in the maclist, shorewall is processing only
n-1.
Sounds like the last line in the maclist file isn''t terminated with a
<newline> character.
> > And the nat address to address does''n work, or at list I
coudn''t make it
> > work.
Evidence please. /etc/shorewall/maclist DOES WORK! -- I use it myself.

Please post as text attachments your /etc/shorewall/maclist file along
with "shorewall show" output for the maclist chains that you think
don''t
match that file.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net

On Sun, 2003-12-07 at 08:18, Tom Eastep wrote:
>  have a network of  35 users, on a
> > > Linux Mandrake 9.2 server.
> > >     As I was adding more users in my network, I found a problem
with the
> > > maclist. From n  ip-macs in the maclist, shorewall is processing
only n-1.
> 
> Sounds like the last line in the maclist file isn''t terminated
with a
> <newline> character.
Those comment lines that end each of the configuration files are there
for a reason.
> 
> > > And the nat address to address does''n work, or at list I
coudn''t make it
> > > work.
> 
> Evidence please. /etc/shorewall/maclist DOES WORK! -- I use it myself.
> 
I just re-read this and noticed that the OP switched from maclist to nat
(doesn''t say which form of nat). All forms of NAT work in Shorewall so
you are doing something wrong. Again, please give us some details;
complaining that "it doesn''t work" may get you sympathy but
it
definitely won''t get your problem solved.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net