Johannes Graumann wrote: > Tom Eastep <teastep <at> shorewall.net> writes: > >> Tom Eastep wrote: >>> Johannes Graumann wrote: >>>> Tom Eastep wrote: >>>>> Then the output of "shorewall dump" (compressed) would be helpful. >>>> Attached. Thanks for your time! >>>> >>> /proc >>> ... >>> /proc/sys/net/ipv4/ip_forward = 0 >>> >>> >>> Looks like you need to check IP_FORWARDING again. >> And be sure that something else in the Etch configuration isn't resetting >> forwarding. See if the above turns to '1' after a '/sbin/shorewall restart'; >> if so, it could be that it's being reset by another reboot step. > > So here it is: >> reboot > >> grep IP_FORWARD /etc/shorewall/shorewall.conf > IP_FORWARDING=Yes
Valid values for IP_FORWARDING are 'On', 'Off' and 'Keep'. A bit of a 4.0.0 change snuck in and is allowing 'Yes' and 'No' as well -- but those are acting as 'Keep'. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
