Re: [Shorewall-users] packet leak before SNAT was in place

[Tom E. <te...@sh...>]

Tom Eastep wrote:
> Brian J. Murrell wrote:
> 
>> I wonder if anything can be done to mitigate this?  Even if one were to
>> simply do:
> 
> Sure -- same solution that has always been available. Start Shorewall 
> before you start networking.
> 
> Of course you can't use any of Shorewall's features that rely on 
> detecting the current network configuration...
> 

And, of course, you can't use traffic shaping or Multi-ISP. But then that's 
another reason why we're having the other discussion about separating 
Shorewall from routing and traffic shaping.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ te...@sh...
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key