Thanks for the Support Tom.
Removing "TEST=hw001:180.233.129.6" from /etc/shorewall/params has solved my
original issue.
/etc/shorewall/rules
DNAT:info inet:58.108.209.135 hw001:10.240.1.7:8000 tcp
8000 80 180.233.128.7
Now updates iptables correctly:
0 0 log6 tcp -- * * 58.108.209.135
180.233.128. 7 [goto] tcp spt:80 dpt:8000
Kind regards,
Trent O'Callaghan
Network Manager
www.nearmap.com
-----Original Message-----
From: Trent O'Callaghan [mailto:[email protected]]
Sent: Friday, 19 February 2010 1:17 PM
To: 'Tom Eastep'
Cc: 'Shorewall Users'
Subject: RE: [Shorewall-users] DNAT src inet:58.108.209.135 rule failling to
appear in iptables (version 4.4.6-1)
Hi Tom,
The issue with --test is because I had been doing some testing and left
configured:
params:TEST=hw001:180.233.129.6
man Shorewall-params could be updated to list key words not to be used or
expand on the use UPPER_CASE to also use Numerals to ensure uniqueness?
Kind regards,
Trent O'Callaghan
Network Manager
www.nearmap.com
-----Original Message-----
From: Tom Eastep [mailto:[email protected]]
Sent: Friday, 19 February 2010 10:22 AM
To: [email protected]
Cc: 'Shorewall Users'
Subject: Re: [Shorewall-users] DNAT src inet:58.108.209.135 rule failling to
appear in iptables (version 4.4.6-1)
Trent O'Callaghan wrote:
> Hi Tom,
>
> No, there is no associated ERROR in either kern.log or daemon.log or
> in any other /var/log/*.log file.
Then:
sh -x /sbin/shorewall restart 2> trace
and look at the trace file; if you can't understand why the command is
failing, then post the trace file to the list as an attachment.
Thanks,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
