Hello, I am trying to exactly replicate the two interface setup (http://www.shorewall.net/two-interface.htm). I use the same naming convention, the only difference is that eth0 is the loc interface and eth1 the net one. Connectivity from loc to fw works. Same for fw to loc. Connectivity from fw to net works (traffic is dropped from net to fw except for ssh, all this works fine).
I cannot manage to have traffic going from loc to net. I of course read the documentation, faq and troubleshooting. I tried: - to set /proc/sys/net/ipv4/ip_forward to 1 and have IP_FORWARDING=Keep - to set /proc/sys/net/ipv4/ip_forward to 0 and have IP_FORWARDING=On - to set /proc/sys/net/ipv4/ip_forward to 1 and have IP_FORWARDING=On (for the sake of completeness) In /etc/shorewall/masq I tried: - eth1 eth0 - eth1 192.168.0.0/24 82.232.201.239 5 (I have a fixed public IP and eventually want to do SNAT) - eth1 192.168.0.0/24 The log does not show any packets when trying to initiate the traffic from loc to an Internet IP. I spend a few hours last night trying to figure out how to deal with this problem but I am helpless. I apologize if I missed something obvious but I really have no idea what that could be :) Thank you in advance for any pointers, Wojtek
status.txt.gz
Description: GNU Zip compressed data
------------------------------------------------------------------------------ Get a FREE DOWNLOAD! and learn more about uberSVN rich system, user administration capabilities and model configuration. Take the hassle out of deploying and managing Subversion and the tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
