I''m sure this is something stupid I''m missing, but it''s fairly urgent- Fedora Core 5, Shorewall 3.27 (previously 3.25). Everything has been working fine for months. Yesterday I picked up a windows virus and after getting it cleaned up, I wanted to blacklist the IP address of the site it came from (85.12.25.105). I set both my interfaces (eth0 and eth1) to blacklist and put the ip address in /etc/shorewall/blacklist (leaving protocol & port blank, I want to block all & all). restarted shorewall (I can never remember which variation on restart does what, so I just restart it) and tried to ping the blacklisted site - and it worked. What did I forget to do? Thanks! Mike0 -- If you''re not confused, you''re not trying hard enough. -- Please note - Due to the intense volume of spam, we have installed site-wide spam filters at catherders.com. If email from you bounces, try non-HTML, non-encoded, non-attachments, ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net''s Techsay panel and you''ll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> > What did I forget to do? >Nothing. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net''s Techsay panel and you''ll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
Tom Eastep wrote:>> What did I forget to do? >> > > Nothing.I''ve added FAQ 63 regarding this issue. See http://www1.shorewall.net/FAQ.htm#faq63 -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net''s Techsay panel and you''ll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV