Re: shorewall configuration

17 msg	insert text onto a PDF
6 msg	Still can't play audio CD's
6 msg	Firefox 2.0.0.5
4 msg	Summer laptop overheat
5 msg	Hotswapable Drive

shorewall configuration
\ Aleksey V. Kunitskiy (24 Jul 2007)
. \ Uwe Thiem (24 Jul 2007)
. . \ Aleksey V. Kunitskiy (24 Jul 2007)

3 msg	xine audio skips
2 msg	Can't restart apache2
16 msg	boot error
4 msg	recipe for managing multiple network/system set...
10 msg	Need to add gd and mysql to PHP.
2 msg	ufed and USE flags
4 msg	Garmin gps acting as a mouse!!!
1 msg	einit?
3 msg	What is portage trying to tell me?
1 msg	zd1211rw(Was:Re: upgrade kernel)
7 msg	DVD Drive Question
6 msg	Notebook/laptop recommendations?
9 msg	Tkinter, where ?
2 msg	sann-find-scanner can't find my scanner

Subject:	Re: shorewall configuration
Group:	Gentoo-user
From:	Aleksey V. Kunitskiy
Date:	24 Jul 2007

On Tuesday 24 July 2007 17:01, Uwe Thiem wrote:
> I think your trouble starts here. Did you try to put any NAT rule into
> policy? That would be wrong. It belongs to "nat". Would you show us your
> policy file (only the rules in there, *not* all the comments)?
>
> Uwe

I've found where the problem is.

Note the following error:

iptables: No chain/target/match by that name
ERROR: Command "/sbin/iptables -A FORWARD -m state --state
ESTABLISHED,RELATED -j ACCEPT" Failed

In 99% cases it's because one of features is missed in the kernel
configuration. I've turned on 2 modules in kernel and it works.

Anyway, thanks!

--
best regards,
Aleksey V. Kunitskiy
my public GPG/PGP key: http://www.alexey-kv.org.ua/pubkey.asc