On 1/9/19 1:25 PM, C. Cook wrote:
> I guess I don't understand the concept of SNATting, or whether I in fact
> need it. Seems like it's the reverse of DNAT, for going -out-.
>
> I have a KVM VM which is a WireGuard server. It's working fine with the
> tunnel VPN going out. But I also want all the other machines in the LAN
> to send their unknown web references out the tunnel as well.
>
> Seems like I need to set the LAN machines so their gateway is the WG
> server. And it seems like I need to set up dnsmasq and chrony so the WG
> server can use the special DNS server of my VPN provider and share that
> with the LAN.
>
> Now I -thought- that allowing in rules, source traffic from zone
> net{LANIP}, to zone outWG would do it, but LAN traffic doesn't go out.
> I think I'm missing something in the snat file, and maybe rules.
>
> Any suggestions?
> Not without the output of 'shorewall dump' -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
