shorewall-users April 2012 archive
Main Archive Page > Month Archives  > shorewall-users archives
shorewall-users: Re: [Shorewall-users] DNAT ignoring rate-limit

Re: [Shorewall-users] DNAT ignoring rate-limit

From: Pau Beltrán <spekdrum_at_nospam>
Date: Mon Apr 30 2012 - 17:32:36 GMT
To: Shorewall Users <shorewall-users@lists.sourceforge.net>

Yes, it is from the same IP (192.168.2.4).

2012/4/30 Tom Eastep <teastep@shorewall.net>:
> On 04/30/2012 08:10 AM, Pau Beltrán wrote:
>> Thank you Tom for the reply.
>> Here you have my shorewall dump.
>>
>> If it helps:
>> - First I tried this configuration with Shorewall 4.4.11.6 and then I
>> upgraded to 4.5.0.3 looking to solve this problem.
>> - I'm testing from another subnet outside the firewall, acting as
>> "net" zone (192.168.1.0/24) I guess that will not be a problem.
>> - I'm sure its bypassing the rate-limit I set because "shorewall hits"
>> reports no hit with high rate connection tries.
>
> And this high connection rate is from a single IP address, correct?
>
> -Tom
> --
> Tom Eastep        \ When I die, I want to go like my Grandfather who
> Shoreline,         \ died peacefully in his sleep. Not screaming like
> Washington, USA     \ all of the passengers in his car
> http://shorewall.net \________________________________________________
>
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users