I'm working on following & understanding the flow of packets across all of *this*.
when I exec telnet from an external host, I see at CLIENT tcpdump -i tun1 11:32:16.532625 IP E.E.E.E.54277 > 192.168.1.2.smtp: Flags [S], seq 1312623728, win 32768, options [mss 1308,nop,wscale 3,sackOK,nop,nop,nop,nop,TS val 1 ecr 0], length 0 (repeats) tcpdump -i eth1 (empty) and at SMTP tcpdump -i eth0 (empty) So the packets get as far as the CLIENT's VPN tunnel endpoint, but not out the CLIENT's eth1 and thus not to the SMTP server. ------------------------------------------------------------------------------ Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of code with a free copy of Black Duck Code Sight - the same software that powers the world's largest code search on Ohloh, the Black Duck Open Hub! Try it now. http://p.sf.net/sfu/bds _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users