Hello, I am using shorewall+openvpn to bridge 2networks and it works ok. On the left-hand network I have a SIP-server and on the right hand SIP-Phone( 172.16.22.75). This SIP-phone cannot connecto to the SIP-Server(172.16.22.247).
On the right-hand firewall(172.16.0.1) I see the correct UDP requests invoking tcpdump -i br0 dst host 172.16.22.247 IP 172.16.22.75.sip > 172.16.22.247.sip: SIP, length: 522 IP 172.16.22.75.sip > 172.16.22.247.sip: SIP, length: 522 left-hand firewall (172.16.0.2) 17:21:59.810074 IP 172.16.0.1.sip > 172.16.22.247.sip: SIP, length: 521 17:22:03.809799 IP 172.16.0.1.sip > 172.16.22.247.sip: SIP, length: 521 looks like left-hand firewall ist not getting the packet from the correct source? doing a Ping from right-side client(172.16.126.8) to a machine on the left-hand-client(172.16.99.2) results in this which looks correct right-side-firewall tcpdump -i br0 dst host 172.16.99.2 IP 172.16.128.8 > 172.16.99.2: ICMP echo request, id 57101... IP 172.16.128.8 > 172.16.99.2: ICMP echo request, id 57101... left-side firewall tcpdump -i br0 dst host 172.16.99.2 IP 172.16.128.8 > 172.16.99.2: ICMP echo request, id 57101... IP 172.16.128.8 > 172.16.99.2: ICMP echo request, id 57101... any idea where I should look at or potential mistake I am making? kind regards claus ------------------------------------------------------------------------------ The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
