"In 10 years I have never had a problem". That kept echoing in my head so I 
went back through policies, rules, interfaces etc knowing that there is nothing 
wrong with the software but yet there's nothing wrong with my setup either and 
the light went on. The customer never changed their rules to allow the trmsrv 
ip's through their firewall. Duh! Seems obvious and the first thing to check 
but the duh moment is explainable but I won't bore you with the details. Thanks 
Tom and I'm so sorry to trash your inbox with this.

-----Original Message-----
From: Tom Eastep [mailto:[email protected]] 
Sent: Saturday, April 21, 2012 10:53 PM
To: [email protected]
Subject: Re: [Shorewall-users] masqueraded ono-to-one nat???

On 4/21/12 8:03 PM, Bert wrote:
> Agh! I didn't think of that. So that skewed my test through whatsmyip 
> but the issue is still the same. Also I tested another machine in the 
> LAN with the software and it works fine as it is not natted but it is 
> masquaraded through a dansguardian/squid transparent proxy as the two 
> servers are. Oh, the software in question uses https so it bypasses 
> the DG/squid but to be sure I removed them out of the rules and I get 
> same result. Shorewall dump was included in original but I attached to 
> this one as well.
> 
> One other thing while I got your attention Tom, I'm a big fan of 
> Shorewall and have been using it for almost 10 years and I don't think 
> I have ever had an issue with it. Great piece of work.

Thanks.

One question - what are the IP addresses of the terminal servers?

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________


--
This message was scanned by ESVA and is believed to be clean.


------------------------------------------------------------------------------
For Developers, A Lot Can Happen In A Second.
Boundary is the first to Know...and Tell You.
Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
http://p.sf.net/sfu/Boundary-d2dvs2
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to