uhmmmm.... dont work.
some idea!?
thx
Enviado desde Samsung Mobile
-------- Mensaje original --------
De: Tom Eastep
Fecha:15/04/2014 11:42 (GMT-04:00)
A: [email protected]
Asunto: Re: [Shorewall-users] one to nat help
On 4/14/2014 2:44 PM, Rodrigo Cortes wrote:
> i have some address into wan interface like:
>
>
> eth1:0 ip_wan0
> eth1:1 ip_wan1
> eth1:2 ip_wan3
> eth1:3 ip_wan3
>
> in this case put this into nat file:
>
> ip_wan0 eth1:0 ip_local0 no no
> ip_wan1 eth1:1 ip_local1 no no
> ip_wan2 eth1:2 ip_local2 no no
> ip_wan3 eth1:3 ip_local3 no no
>
> and into rules file:
>
> HTTP(ACCEPT) wan lan:ip_local0
> HTTP(ACCEPT) wan lan:ip_local1
> HTTP(ACCEPT) wan lan:ip_local1
> HTTP(ACCEPT) wan lan:ip_local1
Shouldn' that be:
HTTP(ACCEPT) wan lan:ip_local0
HTTP(ACCEPT) wan lan:ip_local1
HTTP(ACCEPT) wan lan:ip_local2
HTTP(ACCEPT) wan lan:ip_local3
>
> This work, but dont work when from lan try o access IP into wan
> interface line ip_wan0, into interface put this:
>
>
> lan eth0 routeback
> wan eth1 nosmurfs,routefilter,tcpflags
>
> eth1 is wan interface
>
> some missing!?
> or some is wrong!?
>
> i try with yes into nat option all interface and nothing.
With 'Yes' in the 'ALL INTERFACES' column, it should work if your
lan->lan policy is ACCEPT (which is the default).
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/NeoTech
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
