On Mon, Mar 05, 2001 at 04:59:35PM +0200, Arto Huusko wrote:
> 
> [...]
> 
> Now, the above set up doesn't work for some reason. With the above,
> everything works from the external (ne3) interface as supposed.
> I can connect to SSH port on 10.0.0.2 and to nothing else anywhere.
> And traffic to the internet from the firewall and boxes behind it
> works just fine. But I can't use SSH on the firewall from inside.
> Note the line below "!MARK!". Clearly that should override
> the two lines above (because of keep state). But it doesn't. Setting

And what happen if you put this line before the 2 lines above ?

--
Manuel Bouyer <bouyer@antioche.eu.org>
--