More info, where can be see, in the count pakts, how to i can connect to the
80 port but not is establised the conection.
shorewall show nat
Shorewall 4.4.6 NAT Table at Smooth-Sec - Mon Jul 25 16:52:07 CEST 2011
Counters reset Mon Jul 25 16:43:25 CEST 2011
Chain PREROUTING (policy ACCEPT 97 packets, 5481 bytes)
pkts bytes target prot opt in out source
destination
105 5865 dnat all -- * * 0.0.0.0/0
0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 39 packets, 2244 bytes)
pkts bytes target prot opt in out source
destination
73 3546 eth0_masq all -- * eth0 0.0.0.0/0
0.0.0.0/0
0 0 eth1_masq all -- * eth1 0.0.0.0/0
0.0.0.0/0
Chain OUTPUT (policy ACCEPT 31 packets, 1860 bytes)
pkts bytes target prot opt in out source
destination
Chain dnat (1 references)
pkts bytes target prot opt in out source
destination
30 1846 net_dnat all -- eth0 * 0.0.0.0/0
0.0.0.0/0
0 0 net_dnat all -- eth1 * 0.0.0.0/0
0.0.0.0/0
Chain eth0_masq (1 references)
pkts bytes target prot opt in out source
destination
73 3546 SNAT all -- * * 0.0.0.0/0
0.0.0.0/0 to:80.33.201.196
Chain eth1_masq (1 references)
pkts bytes target prot opt in out source
destination
0 0 SNAT all -- * * 192.168.4.0/22
0.0.0.0/0 to:80.37.147.212
Chain net_dnat (2 references)
pkts bytes target prot opt in out source
destination
0 0 DNAT tcp -- eth0 * 0.0.0.0/0
8x.xx.1x7.xx2 tcp dpt:80 to:192.168.0.252
8 384 DNAT tcp -- eth0 * 0.0.0.0/0
8y.yy.2y1.yy6
tcp dpt:80 to:192.168.0.252
2011/7/25 Jose Maria Iranzo <joi...@gmail.com>
>
> I attach to this mail my shorewall dump.
>
>
>
> 2011/7/25 Jose Maria Iranzo <joi...@gmail.com>
>
>>
>> Yes,
>>
>> is 192.168.0.250
>>
>> 2011/7/25 Tom Eastep <teas...@shorewall.net>
>>
>>> On Mon, 2011-07-25 at 14:57 +0200, Jose Maria Iranzo wrote:
>>>
>>> > I can not connect from an external web server ip that is in the DMZ.
>>> > Both the firewall and the web server receives but does not end the
>>> > connection to be established. The connection appears on the client as
>>> > "RCV_SYNC."
>>> >
>>>
>>> Sounds like the default gateway on the server is set incorrectly.
>>>
>>> -Tom
>>> --
>>> Tom Eastep \ When I die, I want to go like my Grandfather who
>>> Shoreline, \ died peacefully in his sleep. Not screaming like
>>> Washington, USA \ all of the passengers in his car
>>> http://shorewall.net \________________________________________________
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Storage Efficiency Calculator
>>> This modeling tool is based on patent-pending intellectual property that
>>> has been used successfully in hundreds of IBM storage optimization
>>> engage-
>>> ments, worldwide. Store less, Store more with what you own, Move data to
>>> the right place. Try It Now!
>>> http://www.accelacomm.com/jaw/sfnl/114/51427378/
>>> _______________________________________________
>>> Shorewall-users mailing list
>>> Shorewall-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>>>
>>>
>>
>>
>> --
>> Un saludo .
>>
>>
>> ---------------------------------------------------------------------------------------------------------------
>> Jose María Iranzo Marín -------- joi...@gmail.com
>>
>> ---------------------------------------------------------------------------------------------------------------
>>
>
>
>
> --
> Un saludo .
>
>
> ---------------------------------------------------------------------------------------------------------------
> Jose María Iranzo Marín -------- joi...@gmail.com
>
> ---------------------------------------------------------------------------------------------------------------
>
--
Un saludo .
---------------------------------------------------------------------------------------------------------------
Jose María Iranzo Marín -------- joi...@gmail.com
---------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------
Storage Efficiency Calculator
This modeling tool is based on patent-pending intellectual property that
has been used successfully in hundreds of IBM storage optimization engage-
ments, worldwide. Store less, Store more with what you own, Move data to
the right place. Try It Now! http://www.accelacomm.com/jaw/sfnl/114/51427378/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users
