I've read the docs, I've experimented, and I've looked at everything I know to 
look at, and I know I'm going to feel REALLY silly when I get the answer, but 
right now I'm stuck.

I have these lines in the rules file:
SECTION NEW
FTP/ACCEPT      net     fw
SSH/ACCEPT      net     fw
Web/ACCEPT      net     fw
NTP/ACCEPT      net     fw
ACCEPT  fw      fw      tcp     3306 # which I shouldn't need
ACCEPT  net     fw      tcp     3306 #ditto
DNAT            fw      net:216.115.115.250:3307        tcp     3306    -

Policy: 
fw      net     ACCEPT
net     all     DROP    info
all     all     REJECT  info

Zones:
fw      firewall
net     ipv4

telnet'ing to 111.111.111.111 prot 3307 works just fine.  But when I try to 
telnet to port localhost 3306, I get a timeout.  No messages in the logs, and 
netstat on the remote machine shows nothing.

Why obvious, simple, easy thing am I missing?

Thank you!

j

-- 
Joshua Kugler                           
Lead System Admin -- Senior Programmer
http://www.eeinternet.com
PGP Key: http://pgp.mit.edu/  ID 0xDB26D7CE
PO Box 80086 -- Fairbanks, AK 99708 -- Ph: 907-456-5581 Fax: 907-456-3111

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to