diff --git a/Shorewall/shorewall.conf b/Shorewall/shorewall.conf index 26bdd05d7..e9fd168b3 100755 --- a/Shorewall/shorewall.conf +++ b/Shorewall/shorewall.conf @@ -716,16 +716,7 @@ RFC1918_STRICT=No # chains. When forwarding a packet from an interface with MAC verification # to a bridge interface, that doesn't work. # -# These problems can be worked around by setting MACLIST_TABLE=mangle which -# will cause Mac verification to occur out of the PREROUTING chain. Because -# REJECT isn't available in that environment, you may not specify -# MACLIST_DISPOSITION=REJECT with MACLIST_TABLE=mangle. - -MACLIST_TABLE=filter - - -# -# These problems can be worked around by setting MACLIST_TABLE=mangle which +# This problem can be worked around by setting MACLIST_TABLE=mangle which # will cause Mac verification to occur out of the PREROUTING chain. Because # REJECT isn't available in that environment, you may not specify # MACLIST_DISPOSITION=REJECT with MACLIST_TABLE=mangle. @@ -821,7 +812,7 @@ BLACKLIST_DISPOSITION=DROP # empty (MACLIST_DISPOSITION="") then REJECT is assumed # -MACLIST_DISPOSITION=DROP +MACLIST_DISPOSITION=REJECT # # TCP FLAGS Disposition