Thanks Tom for your fast answer ! Le 20/03/2013 01:07, Tom Eastep a écrit : > On 03/19/2013 05:40 AM, [email protected] wrote: >> Hello all, >> >> Running version 4.4.6 > That was released over 3 years ago. You should consider an upgrade. It will become 4.4.26 as soon as the server will be OK. > >> A resume of what I would like to archieve: >> ip xxx.xxx.xxx.xxx (fixed) -> eth0 -> apache on localhost tcp 9000 >> ip yyy.yyy.yyy.yyy (fixed) -> eth0 -> eth1 -> apache on 192.168.1.100 >> tcp 9000 >> >> Basically ip xxx.xxx.xxx.xxx goes the Apache on localhost (ok): >> ACCEPT net:xxx.xxx.xxx.xxx $FW tcp 9000 >> >> I would like traffic from IP yyy.yyy.yyy.yyy to be routed to another server. >> >> I have tried DNAT but it doesn't forward to the second server: >> DNAT net:yyy.yyy.yyy.yyy loc:192.168.1.100:9000 tcp 9000 >> > That rule looks correct, so something else is going on in your > configuration. With that rule in place, please capture the output of > 'shorewall dump' and forward it as a compressed attachment. You may send > it to me privately, if you like. > > Thanks, > -Tom > I feel ashamed : it turned out I hadn't written net.ipv4.ip_forward = 1 permanently and rebooted the server. The rule is OK now, thanks again !
Nicolas ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_mar _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
