From: Tom E. <te...@sh...> - 2004-06-21 21:49:01
|
Andrew Allen wrote: > > by packet basis." > > Does what's said hold true? Can shorewall support this rather than state > matching, or is it not recommended? > > >>> Looks like there is no state match support in the kernel -- Shorewall >>> won't run without it. Shorewall hasn't changed since my previous post -- Shorewall still won't run without state match (and never will). See http://shorewall.net/kernel.htm for Shorewall's kernel requirements. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ te...@sh... |