shorewall ESTABLISHED connections
Hello,
I use ubuntu 8.04 LTS at various sites as the main router/firewall, and it works very well - has done for years, since ubuntu 6.x - I use shorewall/squid/dansguardian.
Sometimes, I need to block unwanted outbound traffic, and so I edit /etc/shorewall/rules - but when reloading shorewall, those new rules only apply to new connections, not established connections.
I've tried putting a DROP line in the ESTABLISHED section, but it fails.
I'm also uncertain whether shorewall does, or indeed can, control established connections directly or not.
Whatever, I need to find a way to either drop all connections on a shorewall reload (a messy way... not my preference) or find out how to apply new rules to established connections.
Right now, I'd have to reboot my ubuntu box to kill all connections; Somewhat of an overkill!!!!
Thanks in advance for any assistance
SS
Kubuntu 17.04 64bit on a Toshiba C55-B5170 with SSD & 12GB Ram
Ubuntu Server 17.04 64bit, plus various VirtualBox ubuntus for testing stuff out on.....
Bookmarks