I'm working on following & understanding the flow of packets across all of 
*this*.

when I exec telnet from an external host, I see at CLIENT

  tcpdump -i tun1
    11:32:16.532625 IP E.E.E.E.54277 > 192.168.1.2.smtp: Flags [S], seq 
1312623728, win 32768, options [mss 1308,nop,wscale 3,sackOK,nop,nop,nop,nop,TS 
val 1 ecr 0], length 0
    (repeats)

  tcpdump -i eth1 
    (empty)

and at SMTP

  tcpdump -i eth0
    (empty)

So the packets get as far as the CLIENT's VPN tunnel endpoint, but not out the 
CLIENT's eth1 and thus not to the SMTP server.

------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to