Re: MASQ nightmare - 99% solved

Simon Hobson
Fri, 29 Feb 2008 15:40:27 -0000

>When I noticed that WITHOUT any masqs some devices still registered
>with NATed IP, I went further and discovered:
>- 2 Netfilter modules are loaded by default in Fedora 8
>--- nf_nat_h323
>--- nf_conntrack_h323
>
>Unloading (modprobe -r) then, just like a Magic, everything back to
>normal operations. My masq entries worked as should be.
>
>Two doubts:
>1) Every shorewall restart load these two modules again. How can I
>configure Shorewall to not load them ?


IIRC, you copy the modules file from /usr/share/shorewall to
/etc/shorewall, then comment out or delete those entries from the
copy.