Shorewall users - Oct 2013 - Explicit rule for NATted traffic ?

Hello,

  When using a default policy of DROP, should there be a rule declared
explicitly for a defined static NAT ?  In other words, is it normal to see NAT
traffic pass along when there is no rule that explicitly allows it ?

Fred.


------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk

That is normal.

 

Tom

teastep@shorewall.net <mailto:teastep@shorewall.net> 

http://www.shorewall.net <http://www.shorewall.net/> 

 

From: Fred Maillou [mailto:frederriffic@yahoo.ca] 
Sent: Friday, October 18, 2013 12:15 PM
To: shorewall-users@lists.sourceforge.net
Subject: [Shorewall-users] Explicit rule for NATted traffic ?

 

Hello,

 

  When using a default policy of DROP, should there be a rule declared
explicitly for a defined static NAT ?  In other words, is it normal to see
NAT traffic pass along when there is no rule that explicitly allows it ?

 

Fred.



------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk