Re: MASQ nightmare - 99% solved

Tom Eastep
Fri, 29 Feb 2008 15:33:33 -0000

> Two doubts:
> 1) Every shorewall restart load these two modules again. How can I
> configure Shorewall to not load them ?

If you are running Shorewall 4.0.6 or later, simply list them in the
DONT_LOAD variable in shorewall.conf.

	DONT_LOAD="nf_nat_h323,nf_conntrack_h323"

> 2) Why, even without masq entries, some devices got NATed (modules
problem?) ?

I assume that is the behavior of nf_nat_h323.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key