-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 06/20/2016 10:08 PM, Thomas Schneider wrote: > Hello! > > > I have the following network architecture with > > - 2 ISP > > - 1 separate router (Fritz!Box) > > - Shorewall running on Proxmox VE server > > > I can only access clients in subnet LAN (10.0.0.0/24) and DMZ > (10.1.0.0/24) from server 192.168.178.10 where Shorewall is > running. > > From any other server in subnet 192.168.178.0/24 the connection, > e.g. ssh, fails without any error message displayed. > > > On the router I have configured 2 static routes: > > - network 10.0.0.0 / subnet mask 255.255.255.0 / gateway > 192.168.178.10 > > - network 10.1.0.0 / subnet mask 255.255.255.0 / gateway > 192.168.178.10 > > > How can I troubleshoot this issue? >
When you say 'the router', do you mean the Shorewall system or on the router that is the default router for 192.168.178.0/24? If the latter, then you need to be sure that ICMP redirects are enabled on that router and that the hosts in 192.168.178.0/24 are configured to accept those redirects. If you mean that those routes are configured on the Shorewall box, then you need to add them on the other router because that is where connections to the 10.x.x.x LANs are being sent. - -Tom - -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJXap4GAAoJEJbms/JCOk0QASwP/2z8zqzEf4XeAirXHpkRp5XN prdWaQ9Mte5PxRnkaujxGDpBMyGF6VWcfD/wzRMMpEk4w8MzGbu6oOs4tmnIy7CD cirJ3Iyrjjb0PfMWpPH/6/qp9tHIMayfMh9MyCIdf9Gs/f9fBYFP0drD28/VkF5f bcpObPn2Q59HpcIO3TccvwPpdhsMkY/9DTBJ8mh6NOwtjj3KJEMeo71FqLNjuWKb K+YLyDqluWt+bYlHSyObad37z1nvGdU6/K2vN1OjpoTrdyNl++T8CgjMYpqKSQUV Zfljn8DRI8SG/FUYKAts+Xy493g9EYP7yWqi8fYgvrQng+u+a44S7wA64qZaKQvH G0GA0G58RyfglyhIJAEprizWWRrlBNbKzrZb+l5muomp6Xeb0AHvEVM9EuBduQdf tuIzJeXOl0rCi5xQXqpgtUD15QuCT5eVPEgIKg4C/bxIpWtVCVNA0RM2l3BIhx3v 7C/7Vy6FCQOWqSq6z2UHofjzt82He7oSmYtAEiNiZyY0Sne++MZbv+sL/mC41Ui0 8EW4WzG3sYYGOGuO2XXkaHLIVV7YYqTQPxKMSIhKAadZpLrDNVXNLYdfvrYSVYyd yoJhbfrhXSYHhcSiAO29lPsuEl0eYubnopwA1oflA/SrJQkTeg7AOUIMuUEenIVH Djiz0IWcYc1FXkwPAWjT =XcBf -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
