Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-08 Thread Huy Bui
Thank you for your help, Tom. I'll ask the people on the LEAF project how to fix this. Thank you again, Huy On 8 May 2018 at 00:46, Tom Eastep wrote: > On 05/07/2018 02:51 PM, Huy Bui wrote: > > Hi, > > The 1st command executed OK. > > The 2nd executed with the error iptables: No chain/target/ma

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-07 Thread Tom Eastep
On 05/07/2018 02:51 PM, Huy Bui wrote: > Hi, > The 1st command executed OK.  > The 2nd executed with the error iptables: No chain/target/match by that name Then you have a broken iptables or kernel - this is not a Shorewall problem. I'm guessing that libipt_SNAT.so (part of the iptables package) i

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-07 Thread Huy Bui
Hi, The 1st command executed OK. The 2nd executed with the error iptables: No chain/target/match by that name Huy On 7 May 2018 at 16:49, Tom Eastep wrote: > On 05/07/2018 12:05 AM, Huy Bui wrote: > > Hi Tom, > > Here the debug output > > Thank you, > > What happens when you execute these two

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-07 Thread Tom Eastep
On 05/07/2018 12:05 AM, Huy Bui wrote: > Hi Tom, > Here the debug output > Thank you, What happens when you execute these two commands: iptables -t nat -N foo iptables -t nat -A foo -s 192.168.1.0/24 -p 6 --dport 25 -j SNAT --to-source 192.168.0.253 If those two commands execute without error,

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-07 Thread Huy Bui
Hi Tom, Here the debug output Thank you, Huy On 6 May 2018 at 16:12, Tom Eastep wrote: > On 05/05/2018 03:41 PM, Huy Bui wrote: > > Hi > > Here's the trace file. > > Thank you, > > What output do you get from 'shorewall debug start'? > > Thanks, > -Tom > -- > Tom Eastep\ Q: What do you

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-06 Thread Tom Eastep
On 05/05/2018 03:41 PM, Huy Bui wrote: > Hi > Here's the trace file. > Thank you, What output do you get from 'shorewall debug start'? Thanks, -Tom -- Tom Eastep\ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-05 Thread Huy Bui
Hi Here's the trace file. Thank you, Huy On 5 May 2018 at 19:00, Tom Eastep wrote: > On 05/05/2018 10:50 AM, Tom Eastep wrote: > > On 05/05/2018 09:44 AM, Huy Bui wrote: > >> I replace {$VARDIR} with /var/lib/shorewall/ and executed > >> /usr/share/shorewall/shorewallrc > >> sh -x /var/lib/

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-05 Thread Tom Eastep
On 05/05/2018 10:50 AM, Tom Eastep wrote: > On 05/05/2018 09:44 AM, Huy Bui wrote: >> I replace {$VARDIR} with /var/lib/shorewall/ and executed  >>  /usr/share/shorewall/shorewallrc >>     sh -x /var/lib/shorewall/firewall reload > trace 2>&1 >> >> Still have the same single line of Permission deni

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-05 Thread Tom Eastep
On 05/05/2018 09:44 AM, Huy Bui wrote: > I replace {$VARDIR} with /var/lib/shorewall/ and executed  >  /usr/share/shorewall/shorewallrc >     sh -x /var/lib/shorewall/firewall reload > trace 2>&1 > > Still have the same single line of Permission denied as before. > Regards, Try simply sh -x

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-05 Thread Huy Bui
I replace {$VARDIR} with /var/lib/shorewall/ and executed /usr/share/shorewall/shorewallrc sh -x /var/lib/shorewall/firewall reload > trace 2>&1 Still have the same single line of Permission denied as before. Regards, Huy On 5 May 2018 at 17:18, Tom Eastep wrote: > On 05/05/2018 09:14 AM,

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-05 Thread Tom Eastep
On 05/05/2018 09:14 AM, Huy Bui wrote: > Hi Tom > The trace file just have one line so I paste it here instead of > attaching the file > > -sh: /usr/share/shorewall/shorewallrc: Permission denied > > By the way I did logon as root so don't know why Permission is dennied Then just look in the fil

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-05 Thread Huy Bui
Hi Tom The trace file just have one line so I paste it here instead of attaching the file -sh: /usr/share/shorewall/shorewallrc: Permission denied By the way I did logon as root so don't know why Permission is dennied Thanks Huy On 5 May 2018 at 16:43, Tom Eastep wrote: > On 05/05/2018 03:02 A

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-05 Thread Tom Eastep
On 05/05/2018 03:02 AM, Huy Bui wrote: > Hi Tom, > There's nothing in the syslog except the following 2 lines: > > Shorewall Stopped > ERROR:Shorewall start failed > > I didn't see anything in the trace file that I attached in the original > post to help me find the problem > Thanks > With ext_

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-05 Thread Huy Bui
Hi Tom, There's nothing in the syslog except the following 2 lines: Shorewall Stopped ERROR:Shorewall start failed I didn't see anything in the trace file that I attached in the original post to help me find the problem Thanks Huy On 4 May 2018 at 16:19, Tom Eastep wrote: > On 05/04/2018 05:08

Re: [Shorewall-users] SNAT problem 5.1.12.3

2018-05-04 Thread Tom Eastep
On 05/04/2018 05:08 AM, Huy Bui wrote: > Hi > I am trying to set up SNAT so that smtp traffic from my dmz will have a > source of a certain ip address and the rest can use the default on eth0 > However I keep getting the error  > > Preparing iptables-restore input... > Running /sbin/iptables-resto

Re: [Shorewall-users] SNAT problem...

2008-10-17 Thread Kristoffer Egefelt
It works with v4.2 :) Thanks Kristoffer >> Is it possible to refer the "cust:[EMAIL PROTECTED]" in the masq file >> without having to specify seperate entries in the interfaces, zone and >> policy files? >> >> What I mean is if I add: >> >> vlan5 vlan5 detect routeback >> >> to the interf

Re: [Shorewall-users] SNAT problem...

2008-10-16 Thread Tom Eastep
Kristoffer Egefelt wrote: > > Is it possible to refer the "cust:[EMAIL PROTECTED]" in the masq file > without having to specify seperate entries in the interfaces, zone and > policy files? > > What I mean is if I add: > > vlan5 vlan5 detect routeback > > to the interfaces file - then I

Re: [Shorewall-users] SNAT problem...

2008-10-16 Thread Kristoffer Egefelt
> Kristoffer Egefelt wrote: >> Hi, >> >> I'd like to have local servers connect to the firewall external ip >> and >> have the traffic routed back to the local network. It works manually, >> but I can't figure out how to make this work through shorewall: >> >> *This works:* >> iptables -t nat -A

Re: [Shorewall-users] SNAT problem...

2008-10-14 Thread Tom Eastep
Robert K Coffman Jr. -Info From Data Corp. wrote: > This, I believe, is Shorewall FAQ 2. Very true, -Tom -- Tom Eastep\ The ultimate result of shielding men from the Shoreline, \ effects of folly is to fill the world with fools. Washington, USA \

Re: [Shorewall-users] SNAT problem...

2008-10-14 Thread Tom Eastep
Kristoffer Egefelt wrote: > Hi, > > I'd like to have local servers connect to the firewall external ip and > have the traffic routed back to the local network. It works manually, > but I can't figure out how to make this work through shorewall: > > *This works:* > iptables -t nat -A POSTROUTING -

Re: [Shorewall-users] SNAT problem...

2008-10-14 Thread Robert K Coffman Jr. -Info From Data Corp.
This, I believe, is Shorewall FAQ 2. - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two t