________________________________ From: Tom Eastep <[email protected]> > > there is no evidence in the dump that your rule was present.
Here's part of the output of shorewall -vv check: Checking /etc/shorewall/snat... [...] Snat record "SNAT(10.215.144.92) 172.16.0.2 enp11s0" Checked However, the following yields nothing after a shorewall restart: # grep -i snat /var/lib/shorewall/firewall | grep enp11s0 So I was wondering if I was being bitten again by the AUTOMAKE issue I experienced lately on another system. On gw1: # grep AUTOMAKE /etc/shorewall/shorewall.conf AUTOMAKE=Yes Changed it to No, and now: # grep -i snat /var/lib/shorewall/firewall | grep enp11s0 -A POSTROUTING -o enp11s0 -s 172.16.0.2 -j SNAT --to-source 10.215.144.92 Finally, I successfully ping'ed fw2 from gw1 as source addr. 10.215.144.92. Sorry about that. From now on, I'll try to remember to always check that AUTOMAKE is disabled. Thanks, Vieri ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
