On 10/23/10 9:41 PM, Dr John wrote:
> /etc/shorewall/nat is empty (assuming you meant 'nat' and not 'net')
> 
> /etc/shorewall.masq:
> 
>       eth0                    192.168.0.0/22
> 

Okay -- the problem is that you have a second iptables configuration
tool installed on your system. That tool is starting after Shorewall and
is inserting it's own set of rules ahead of those generated by
Shorewall. 'shorewall restart' re-establishes the correct ruleset.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to