bruma wrote:> Hi,
>
> I''m using following rule in /etc/shorewall/rules
> REJECT:ULOG:P2P loc net ipp2p:all ipp2p
>
> iptables -L :
That command is completely useless. Please don''t post its output on
this
list. If you want to show netfilter rules, either use "iptables -L -n
-v" or
"shorewall show".
> Chain loc2net (1 references)
> target prot opt source destination
> ACCEPT all -- anywhere anywhere state
> RELATED,ESTABLISHED
> ULOG all -- anywhere anywhere ipp2p
> v0.8.2 --ipp2p ULOG copy_range 0 nlgroup 1 prefix
> `Shorewall:loc2net:REJECT:P2P'' queue_threshold 1
> reject all -- anywhere anywhere ipp2p
> v0.8.2 --ipp2p
> ACCEPT all -- anywhere anywhere
>
> but ipp2p traffic is not rejected. Why? Am I doing something wrong?
> There are also no records of P2P in ULOG log files.
If you *really* want to do that then move the rule to the ESTABLISHED
section of the rules file.
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@shorewall.net
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/