________________________________ From: Vieri Di Paola via Shorewall-users <[email protected]> > > # tcpdump -nni enp6s0 icmp
I think I just found a solution, but I still need to understand why. I had to add proxyarp=1 to the wan interface in "interfaces". Pings to wan hosts started working. Funny thing is that if I set proxyarp=0 and restart shorewall the pings still work. They stop working only if I reboot the kernel (waiting doesn't seem to make the pings fail either - there doesn't seem to be a timeout or similar). Resetting proxyarp=1 and restarting shorewall works as expected. I still have to understand why this interface requires proxyarp, and the other interfaces don't. Thanks, Vieri ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
