will trillich wrote:
> 
> [EMAIL PROTECTED] ipmasq -v

I haven't got ipmasq - is it a seperate package? Should I have it?

> /sbin/ipchains -A input -j DENY -s 0.0.0.0/0 -d 0.0.0.0/0 -l
> /sbin/ipchains -A output -j DENY -s 0.0.0.0/0 -d 0.0.0.0/0 -l
> /sbin/ipchains -A forward -j DENY -s 0.0.0.0/0 -d 0.0.0.0/0 -l

This being output from ipmasaq, I guess it may not be the same syntax as
what goes in, but if it is - is there any point in specifying "-s
0.0.0.0/0 -d 0.0.0.0/0"? Doesn't that just mean any source or
destination, which is the same as not specifying any at all?

Anyway - given that all your DENY rules are logged, have you checked the
logs to find out why the packets are denied (by which rule)?

Also, apologies for sending my previous response direct rather than to
the list. I'm subscribed to too many lists with different policies ...

Richard

-- 
I'm currently looking for work; see my Curriculum Vitae here:
http://homepages.paradise.net.nz/~rhector/cv.html

Reply via email to