Hi,

I am running Beta 3 for Bering-uClibc 3.1.1 with ppp/pppoe.  I am using dnsmasq 
with ppp/pppoe.  I am able to connect to fw and the net when I use a static IP 
address and get the upstream nameservers via resolv-file=/etc/ppp/resolv.conf

I am having trouble using dnsmasq as dhcpd server.  The DHCP server is enabled. 
 When I change my network connection to use DHCP on my pc, I cannot access fw 
or the net with a browser.  I am unable to ping the fw.  The Shorewall 
interfaces and rules files are below.

#
# Shorewall version 3.4 - Interfaces File
#
# For information about entries in this file, type "man shorewall-interfaces"
#
# For additional information, see
# http://www.shorewall.net/3.0/Documentation.htm#Interfaces
#
###############################################################################
#ZONE    INTERFACE    BROADCAST    OPTIONS
net    ppp0             -
loc    eth1             detect          
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

#
# Shorewall version 3.4 - Rules File
#
# For information on the settings in this file, type "man shorewall-rules"
#
# See http://www.shorewall.net/3.0/Documentation.htm#Rules for additional 
information.
#
#############################################################################################################
#ACTION    SOURCE        DEST        PROTO    DEST    SOURCE        ORIGINAL    
RATE        USER/    MARK
#                        PORT    PORT(S)        DEST        LIMIT        GROUP
#SECTION ESTABLISHED
#SECTION RELATED
SECTION NEW
#      Accept DNS connections from the firewall to the network
#      and from the local network to the firewall (in case dnsmasq is running)
DNS/ACCEPT   fw          net
DNS/ACCEPT   loc         fw
ACCEPT       loc         fw       udp      67,68

#      Accept SSH connections from the local network for administration
#
# SSH/ACCEPT   loc         fw

#      Allow Ping to Firewall and from Firewall
#
Ping/ACCEPT  net         fw
Ping/ACCEPT  loc         fw
Ping/ACCEPT  fw         net
Ping/ACCEPT  fw         loc

#      Allow traceroute from firewall
#
Trcrt/ACCEPT fw          net

#      Allow local network to access weblet/webconf
#
Web/ACCEPT   loc        fw
# timeserver (allow syncing with time servers (default: pool.ntp.org))
NTP/ACCEPT         fw       net
# timeserver (allow LAN clients to sync with the time service on the router)
# NTP/ACCEPT         loc    fw
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

I followed the directions found here: 
http://leaf.sourceforge.net/doc/buci-dnsmasq3.html

I suspect that I have not correctly configured Shorewall to use dhcpd.

Thanks in advance for your help.

Matt

------------------------------------------------------------------------------

------------------------------------------------------------------------
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Reply via email to