On 08/21/2012 10:21 AM, Laurent CARON wrote: > Hi, > > I'm having quite a bit of trouble managing to get Shorewall playing nice > (see below) with OSPF over GRE over IPSec tunnels. > > Purpose: > Running OSPF over an IPSec tunnel (thus adding GRE). > > I did set up my ipsec tunnel, the GRE and OSPF bits are all happily > running, ruling out any major mistake in config on this end. > > As soon as I start shorewall I start to see martian packets going > through the GRE tunnel having source address the public IP of the source > system. > > > Here is the setup: > Endpoint A Endpoint B > Info > Version 4.5.5.3-1~bpo60+1 4.5.5.3-1~bpo60+1 > Node Name FRC VTY > Public IP 1.2.3.4 9.8.7.6 > IPSec IP 172.31.254.11 172.31.254.4 > Loopback 172.31.255.11 172.31.255.4 > GRE tunnel 10.254.1.2 10.254.1.1
Can we see the output of 'shorewall dump' with Shorewall started please? -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
