#6 Not matching OUT rules when from is not ANY

[Anonymous]

My host has 2NICs, and I want to allow only certain
things OUT on one of the NICs and leave the other NIC
is un-restricted.

The unrestricted NIC is 192.168.4.10 with subnet mask
255.255.255.0. This is working, using the
rule "localnet1"

The restricted NIC is 192.168.101.100, and I want to
ALLOW only access to any other port 80. I try this via
rule "net2web", but this rule is never matched.

Excerpt of my rules:

localnet1: ALLOW * * FROM SELF to 192.168.4.0/24
NOLOG
net2web: ALLOW * * FROM 192.168.101.10 to ANY:80

My default gateway is 192.168.101.1, so all external
traffic attempts to go out NIC2. But the output from the
debug on all attempts is:
DENY [default] TCP OUT 192.168.101.100:2276
207.68.173.254:80

So it seems that I'm not matching any rules, since the
line starts with DENY [default]. I've tried many different
things for the from part, but I only get a match when I
use SELF, where SELF=0.0.0.0/0.

[I think this is related to bug # 1176529, but worse. I am
not using application rules]

Thanks for your time. I'm impressed with this program.
It seems to have enough flexibility and it is running very
well on my old, slow equipment.

kent.loving@excite.com

[Nobody/Anonymous]

Logged In: NO

Sorry about typo in my description. The net2web rule should
read:

net2web: ALLOW * * FROM 192.168.101.100 to ANY:80

[Giancarlo Giesa]

Logged In: YES
user_id=1816274
Originator: NO

i have the same problem, if yo found the solution, can you contact me at giancarlogiesa@gmail.com