Paolo Nesti Poggi wrote: > I'm wondering if masquerading might be the problem and I hope that some of > you guys can see from the dump if shorewall is really working correctly as I > suppose now. If this is true I will have to look elsewhere to find the cause > of the problem. And that might be still a bigger trouble for me, so actually > I'm hoping I've missed something in Shorewall configuration or that you are > able to point me in the right direction.
The IP address that you have in the ADDRESS column of /etc/shorewall/masq (84.63.114.214) is not an address of any interface on your firewall. Also: a) You appear to need the 'dhcp' option on eth2. b) Why are you using outgoing SNAT on the Proxy ARPed public IP addresses in your DMZ? -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
