LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Shorewall .....rules or tos? (https://www.linuxquestions.org/questions/linux-security-4/shorewall-rules-or-tos-337336/)

matthewa 06-26-2005 12:16 PM

Shorewall .....rules or tos?
 
Im having some trouble connecting to the internet after starting shorewall. As a matter of fact when I fire shorewall up I cant connect to the internet at all! Here is my default policy file and my question will follow afterwards:

#SOURCE DEST POLICY LOG LIMIT:BURST
# LEVEL
loc net ACCEPT
net all DROP info
all all REJECT info


My question is........This is the default policy setup for Shorewall which seems to block all incoming traffic. So, do I need to create a rule now or do I need to create a Type Of Service (tos) to allow things through like the internet?

win32sux 06-26-2005 12:52 PM

i would assume the shorewall script is smart enough to know that if you set the INPUT policy to DROP it would need to allow packets with states of ESTABLISHED or RELATED to come through in order for you to be able to properly connect to the internet...

does shorewall have a log file which you can look at to see what is getting blocked when you attempt to access the internet??

matthewa 06-26-2005 01:12 PM

Wow!That was a mouthful........I got it! Actually, all I had to do was to change the first source line to "firewall". Alls well.........thanks

win32sux 06-26-2005 01:57 PM

hehe... cool, man... let us know if there's anything else... :)



All times are GMT -5. The time now is 07:17 AM.