[Shorewall-users] Rule in error?

[Chris M. <ma...@ma...>]

I don't understand why I would see this in the logs when the rules explicity
allow DNS queries from the net.

eth0 is external, eth2 is dmz.

Nov 24 07:49:39 artemis kernel: Shorewall:all2all:REJECT:IN=eth2 OUT=eth0
SRC=216.152.168.66 DST=216.152.168.116 LEN=62 TOS=0x00 PREC=0x00 TTL=63 ID=0
DF PROTO=UDP SPT=53 DPT=1026 LEN=42


# DMZ to Net
#
ACCEPT          dmz       net           udp     domain
ACCEPT          dmz       net           tcp     domain

#
# Net to DMZ -- "typical web server stuff"
#
ACCEPT          net       dmz           tcp     domain
ACCEPT          net       dmz           udp     domain




Chris Mason
ma...@ma...
Box 340, The Valley, Anguilla, British West Indies
Tel: 264 497 5670 Fax: 264 497 8463
Take a virtual tour of the island
http://www.anguillaguide.com/ The Anguilla Guide
Find your perfect rental villa www.mycaribbean.com
Talk to me in real time with Instant Messenger: mas...@ho...
or ICQ 118159388
Signature F331 8AD1 36FB B3B0 DF9F  D95B 8024 D1EA 7450 D50C