Paul Howarth wrote: > On Sat, 2006-04-08 at 10:43 +0100, Kevin Browne wrote: >> Have you edited /etc/shorewall/shorewall.conf to set the line STARTUP=1, >> this enables shorewall to start on boot. > > You also need to "chkconfig shorewall on", and if you don't have > "chkconfig iptables off", that could interfere with shorewall. Thanks very much, that probably is the solution. I did have shorewall chkconfig-ed on, but I also had iptables on. I'll try turning it off. But I don't recall ever reading that one should turn off iptables if running shorewall? I assumed shorewall ran on top of iptables. In fact I always run "iptables -L" after re-booting, to make sure I am (relatively) safe. Incidentally, there has been a slight change in the behaviour of iptables - I guess after installing some update. It pauses now for a second or so when it mentions each local LAN, presumably while it checks that the LAN is accessible. I don't think it used to do this. -- Timothy Murphy e-mail (<80k only): tim /at/ birdsnest.maths.tcd.ie tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland
