On 05/20/2013 12:13 PM, Tom Eastep wrote: > On 05/20/2013 11:06 AM, rblake3 wrote: > >> Thank you for your reply. I had a feeling both of the commands would >> not help, but I was being hopeful. At least now I'm certain of what the >> SOURCE ADDRESS implies (binding to a specific IP on an interface). >> >> Please see attached shorewall dump. Any assistance would be greatly >> appreciated. > > Having looked at the dump, I'm lost as to what problem you are trying to > solve.
I do, however, see one obvious IP configuration error:
3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
state UP qlen 1000
inet 10.2.0.1/24 brd 10.2.0.255 scope global eth0 <=========
inet 10.2.0.254/24 brd 10.2.0.255 scope global secondary eth0:3
default via 69.161.96.1 dev eth1
69.161.96.0/24 dev eth1 proto kernel scope link src 69.161.96.69
127.0.0.0/8 dev lo scope link
169.254.0.0/16 dev eth0 scope link
10.1.0.0/24 via 10.2.0.1 dev eth0 <=========
10.2.0.0/24 dev eth0 proto kernel scope link src 10.2.0.1
One of the two marked lines is clearly wrong.
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ AlienVault Unified Security Management (USM) platform delivers complete security visibility with the essential security capabilities. Easily and efficiently configure, manage, and operate all of your security controls from a single console and one unified framework. Download a free trial. http://p.sf.net/sfu/alienvault_d2d
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
