Hi, News from Marc Heuse concerning the questions about SuSEfirewall 4.0. He's on vacation - I hope he'll be back soon.

Hi folks,

I'm currently on a trip in england and cant access my suse account. Anyone who has got a problem with SuSEfirewall 4.0 - known to me is only the reverse masquerading bug - please send a private email to marc@suse.de with the following information:

try tcpdump and see if packets are forwarded to the internal network, and if answer packets arrive from the internal network. Set FW_LOG_DENY_ALL to yes and note down corresponding entries if they are logged by filterrules. Send me all this information plus the FW_FORWARD_MASQ_* config lines.

This is weird because it worked for the people I asked. *sigh* I hope only few people are affected.

Greets, Marc <marc@suse.de> SuSE Security Team

Thanks, Roman. -- - - | Roman Drahtmüller <draht@suse.de> // "Caution: Cape does | SuSE GmbH - Security Phone: // not enable user to fly." | Nürnberg, Germany +49-911-740530 // (Batman Costume warning label) | - -