-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 01/15/2017 06:43 AM, Graumann, Johannes wrote: > ... > >> You have enabled ping to/from the 'fw' zone and from the 'usr' >> zone to the other zones only. If ping is failing from the 'usr' >> zone to one of the other local zones, then please submit another >> dump collected as described in the support guidelines. Namely: >> >> - - 'shorewall clear' - - perform the failing ping - - take the >> dump - - when you submit the dump, tell us the source IP and >> destination IP of the failing test. > > As I indeed am trying to ping from a usr IP (10.10.1.5) to an IP in > strg (10.10.4.3) and it fails, I did as Tom proposed and attach the > dump. > > Any help is highly appreciated. > > Note that the dump opperation throuw an error: > > shorewall dump > ping_dump.txt /sbin/shorewall: 859: [: > ping_dump.txt: unexpected operator >
Yes -- that is an old bug that is now fixed. Unfortunately, I gave you incorrect instructions; I mean to have you 'shorewall reset' rather than 'shorewall clear. That having been said, if it didn't work with 'shorewall clear' then there is something wrong with your routing. Can all of the subnets access the internet with shorewall started? - -Tom - -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJYe6pMAAoJEJbms/JCOk0QaN4P/3GorykPnfS/JXRvOKEOuliR W2z7P2T8nnUyRwFXdcGu0G5NhXiyqGBIeo3txNNOsFoF2Q/5PutBw9ObVoHDQp1s l1/v/UcFmsqddqOFciVQzElrLNMSRY5WP8M5LQoFxO9P6H+kADYnZehvZbCOynWm dwaZ8AO1nNMizVzJutJ2nTpzxt6Igxm0dwvudsLd84Qc3yfz2hlUGYF1Kudvat3/ tIQNjXeYC0CdFAHfhc6hCvfGc95YyNRFzqAAyuoO6LU8K0zSLYQu3XQQvb1gEFTS DCTXA8v26jLw6U80x/ZpqED83VFO2XoZdxi2a8OgV6CyzM243mT+jGt/TmGjd1tI FJkJZXIjIcty99yij5OjztbPLmPtnS5G5+BUKWg/uohaKrO2DJQkhZ6geUSwn1kX WXAh3rBg8aPE4VVZAPggfhERG1TznT98I9CJBDmYvmP1xMu6X4eLrM10uXxQdLXP 1qBRPtN+IX77us1c1+xRzh2GwIxAj8hlAZe7jnGepbKBn0istdts6EZ13cXGJ2K5 fJ837u+xDYm2q4bLjiExINUYCBUAn9O/ASvFoV+qvC377VHJW24nM8e+MyfLxnRB srYIha9aNeiYCCOdohGRh2CtrQv8KtCXfGECC95z6/Rdny2lWKP5uaq2ZAfDWVxf 0Tpk9CIxXScrWdS+2+XZ =p4eE -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one year of Intel Parallel Studio XE. Training and support from Colfax. Order your platform today. http://sdm.link/xeonphi _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
