Precedence: list
MIME-Version: 1.0
In-Reply-To: <CAGG_d8CMDHr4DnoSz2AEe3s99Cyv+Q4wYActSvC_G36HXbx91g@mail.gmail.com>
References: <1334300016.25030.15.camel@df1844j>
	<20120413221535.16060469@alpinelinux.org>
	<CAGG_d8CMDHr4DnoSz2AEe3s99Cyv+Q4wYActSvC_G36HXbx91g@mail.gmail.com>
Date: Mon, 16 Apr 2012 08:08:36 +0200
Message-ID: <CAGG_d8BUZGQp7RAn548CrqfQs+N982zk8Pkdkn19HsTWTUja0g@mail.gmail.com>
Subject: Re: [alpine-devel] edge 120403: bug in netfilter?
From: Leonardo Arena <rnalrd@gmail.com>
To: Natanael Copa <ncopa@alpinelinux.org>
Cc: Alpine-devel <alpine-devel@lists.alpinelinux.org>
Content-Type: text/plain; charset=ISO-8859-1

On Sat, Apr 14, 2012 at 8:22 AM, Leonardo Arena <rnalrd@gmail.com> wrote:
> On Fri, Apr 13, 2012 at 10:15 PM, Natanael Copa <ncopa@alpinelinux.org> wrote:
>> On Fri, 13 Apr 2012 08:53:36 +0200
>>> Anybody noticed the same issue, or am I missing something obvious?
>>
>> Did you add the interface to any zone?
>
> Yes, of course. Zones, Interfaces and Policy are fully configured.
> Doesn't look like it's a Shorewall issue, as I was able to reproduce
> it with iptables only.

"iptables -L E2fw -vn shows that the ACCEPT rule isn't matched (0 pkts).
I can observe the same behaviour with the following rule too:

ACCEPT		inet:$MYIP	fw		udp	514

Incoming syslog packets aren't matched by the rule. It seems that they
are dropped early.
All dropped packets are logged via "info" but I don't see any dropped
packet in busybox syslog.

- leonardo


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---