Re: [Shorewall-users] A question on rules simplification

[Eduardo F. <du...@ic...>]

Tom Eastep wrote on 16/12/2004 13:39:24:

> On Thu, 2004-12-16 at 16:25 +0100, Bob Alexander wrote:
> 
> > 
> > I grepped for 113 and ident in the iptables -L output and decided I 
> > needed to add an explicit rule for it.
> > 
> 
> Also, I would recommend using "shorewall status" rather than 'iptables
> -L'.
> 
> > 
> > Ciao from an uncommonly grey, dull, wet Rome - Italy
> 
> Regards from typically grey, dull, wet Seattle :-)
> 
> -Tom
To understand all the settings of rules in shorewall, I usually go from 
the INPUT chain and start examining every chain called (net2fw, loc2fw 
etc). And then I go down on all the chains called etc etc.  After that, I 
make the same thing with OUTPUT and FORWARD.  If it could be done in an 
interactive way, that would be wonderfull. 
hummmm, Maybe in the next holidays...

- and I couldn't resist:
tchau from a typically blue, sunny and hot Rio de Janeiro...

________________________
Eduardo Ferreira
Icatu Holding S.A.
Supervisor de TI
(5521) 3804-8606