On Mon, Sep 13, 2021 at 05:57:50AM -0400, Dave via Shorewall-users wrote:
> My firewall/router is a basic two-interfaces setup running shorewall
> 5.2.8 on RHEL 8.4 (actually Rocky 8.4).

Send its configuration or shorewall dump:
https://shorewall.org/support.htm

> I need to route packets to and from another subnet via an OpenVPN
> server running on the local subnet.
> 
> I used "ip route add" to add two static routes on the firewall/router,
> "ip route add 192.168.1.0/24 via 10.11.12.30" and "ip route add
> 10.8.0.0/24 via 10.11.12.30".

> I don't think packets with destinations
> on the 192.168.1.0 subnet are being routed to the openvpn server at
> 10.11.12.30.

Check with tcpdump.

> There must be shorewall configuration that needs to be
> done, but after hours of searching and trial and error, I have been
> unable to figure it out.

Is the interface added to "interfaces" ?
Are logs showing packets dropped ?

-- 
Justin


_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to