Shorewall users - Mar 2006 - Re: Shorewall-users digest, Vol 1 #696 - 7 msgs

>
>
>  -----Original Message-----
> From:   Starwatcher [mailto:starwatcher22@adelphia.net]
> Sent:   Fri Mar 03 17:32:02 2006
> To:     shorewall-users@lists.sourceforge.net
> Subject:        [Shorewall-users] Hello All
>
> Hello Listers,
> I am getting the following error in my logs:
>
> 17:11:02 firewall kernel: Shorewall:FORWARD:DROP:IN=eth0 OUT=eth0
> SRC=<default gateway> .1 DST=ETH0 Addy  LEN=334 TOS=0x06 PREC=0x00
> TTL=15 ID=0 PROTO=UDP SPT=67 DPT=68 LEN=314
>
I was more concerned with the FORWARD:DROP rule. I know the 67-68 
pertains to DHCP.

Kev

Starwatcher wrote:
> ...
>> 17:11:02 firewall kernel: Shorewall:FORWARD:DROP:IN=eth0 OUT=eth0
>> SRC=<default gateway> .1 DST=ETH0 Addy  LEN=334 TOS=0x06
PREC=0x00
>> TTL=15 ID=0 PROTO=UDP SPT=67 DPT=68 LEN=314
>>
> 
> I was more concerned with the FORWARD:DROP rule. I know the 67-68
> pertains to DHCP.
It means you probably haven''t defined your hosts correctly, and
Shorewall doesn''t know which zone it relates to.  Carefully check the
interfaces and IP addresses referenced in the message and try to work
out why it''s not in the right place.

FAQ 17 has some more details: http://www.shorewall.net/FAQ.htm#faq17

-- 
Paul
<http://paulgear.webhop.net>
--
Did you know?  If you receive a virus warning from a friend and not
through a virus software vendor, it''s likely to be a hoax.  See
<http://gear.dyndns.org:81/features/virus_hoaxes> for more info.