Adam Niedzwiedzki wrote:
Hi guys,

Ok I went to masq the LVS interface and realised I "think" I have an issue..

This machine IS my router AS well as my firewall and my load balancer...

Internet -- eth0 - router/firewall - eth1 --- internal lan
                                |
                        eth2 LVS-NAT setup

Hence eth0 is connected to my upstream,
eth1 isn't masq'd it's routed and eth2 is my LVS NIC (which is handled by
LVS) (which I want to masq)

I'm sure I've missed something simple.

/etc/shorewall/masq
#INTERFACE              SUBNET          ADDRESS         PROTO   PORT(S)
IPSEC
eth1                    eth2
  ----

Wrong interface.


*snipped* setup files..
/etc/shorewall/zones
fw      firewall
net     ipv4
loc     ipv4
lvs     ipv4

/etc/shorewall/interfaces
net     eth0            detect
  ------------

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to