RE: Shorewall and selective access

Tom Eastep
2004-12-19T20:14:20Z

On Sun, 2004-12-19 at 12:10 -0800, Tom Eastep wrote:
> On Sun, 2004-12-19 at 12:02 -0800, Tom Eastep wrote:
> > On Sun, 2004-12-19 at 14:54 -0500, Greg Shepherd wrote:
> > > I modified the address to include the !. I missed that detail.
> > >
> > > Here is the shorewall status file you requests.
> > >
> > > The public interface is currently 192.168.1.80. Later, this will
change to a
> > > public address when it is deployed.
> >
> > You have no adm->fw policy and you have no adm->loc rules so I
don''t
>
> I of course meant "...no adm->fw rules...". What I think you
want is to
> replace your ''adm->net CONTINUE'' policy with:
>
> ADM	all	ACCEPT

BTW -- all of this is covered at