On 5/29/21 12:54 PM, Tim Evans wrote:
On 5/4/21 8:33 AM, Jouk Jansen wrote:
Hi All,

I'm using one of my Fedora machines as a router between 2 networks. The two network devices on the machine are called enp0s25 and tun0. On F33 it worked as expected. However, after an upgrade to F34 It looks like it does not work
anymore.

Jouk, have you resolved this?  Anyone else seen it?

Wanting to upgrade my F33 router/NAT/firewall system.

This thread having fallen silent, I decided to go ahead and try my own upgrade today.

I think my network setup is less complex than the OP's, with just one internal and one external network, so my experience may or may not address the OP's situation. My router/firewall/NAT machine sits between internal and external networks.

[root@kestrel ~]# firewall-cmd --list-all --zone=external
external (active)
  target: default
  icmp-block-inversion: no
  interfaces: enp3s1
  sources:
  services: ssh
  ports:
  protocols:
  forward: no
  masquerade: yes
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:

[root@kestrel ~]# firewall-cmd --list-all --zone=internal
internal (active)
  target: default
  icmp-block-inversion: no
  interfaces: enp2s0
  sources:
  services: dhcpv6-client mdns samba-client ssh
  ports:
  protocols:
  forward: no
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:

[root@kestrel ~]# cat /proc/sys/net/ipv4/ip_forward
1

That having been said, my in-place upgrade went without incident, and routing is working the same afterwards as it was before.


--
Tim Evans                       |5 Chestnut Court
443-394-3864                    |Owings Mills, MD 21117
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to