Bonjour,


----- Adel.Scott <[email protected]> a écrit :
> Bonjour,
> 
> Après une mise à jour Leap 15.5 vers 15.6 j'ai de nouveau un souci de 
> partage de connexion internet sur les machines du réseau local.
> 
>   * Le serveur se connecte aux autres machines et à internet
>   * Les autres machines "ping" le serveur et se "ping" entre elles.
>   * par contre lorsque je tente un ping free.fr sur une machineà la fin
>     de la ligne le ping affiche "Paquet filtré"
> 
> J'ai exécute en root :
> 
> yast routing ip-forwarding on

l'ip-forwarding necessite un reboot.


> firewall-cmd --zone=external --add-masquerade --permanent
> firewall-cmd --reload
> 
> J'utilise les zones external et internal
> 
> Je ne comprend pas ce qui cloche, merci de votre aide.

Le journal de filtrage indiquera peut-etre quelque chose ?

Guillaume

> 
> Jeff
> 
> abyss:/home/jeffr #firewall-cmd --list-all-zones block  target: 
> %%REJECT%%  ingress-priority: 0  egress-priority: 0 
>   icmp-block-inversion: no  interfaces:  sources:  services:  ports: 
>   protocols:  forward: yes  masquerade: no  forward-ports: 
>   source-ports:  icmp-blocks:  rich rules: dmz  target: default 
>   ingress-priority: 0  egress-priority: 0  icmp-block-inversion: no 
>   interfaces:  sources:  services: ssh  ports:  protocols:  forward: yes 
>   masquerade: no  forward-ports:  source-ports:  icmp-blocks:  rich 
> rules: docker (active)  target: ACCEPT  ingress-priority: 0 
>   egress-priority: 0  icmp-block-inversion: no  interfaces: docker0 
>   sources:  services:  ports:  protocols:  forward: no  masquerade: no 
>   forward-ports:  source-ports:  icmp-blocks:  rich rules: drop  target: 
> DROP  ingress-priority: 0  egress-priority: 0  icmp-block-inversion: no 
>   interfaces:  sources:  services:  ports:  protocols:  forward: yes 
>   masquerade: no  forward-ports:  source-ports:  icmp-blocks:  rich 
> rules: external (active)  target: default  ingress-priority: 0 
>   egress-priority: 0  icmp-block-inversion: no  interfaces: eth1 
>   sources:  services: apache2 apache2-ssl dhcp dns samba ssh vsftpd 
>   ports:  protocols:  forward: no  masquerade: yes  forward-ports: 
>   source-ports:  icmp-blocks:  rich rules: home  target: default 
>   ingress-priority: 0  egress-priority: 0  icmp-block-inversion: no 
>   interfaces:  sources:  services: dhcpv6-client mdns samba-client ssh 
>   ports:  protocols:  forward: yes  masquerade: no  forward-ports: 
>   source-ports:  icmp-blocks:  rich rules: internal (active)  target: 
> default  ingress-priority: 0  egress-priority: 0  icmp-block-inversion: 
> no  interfaces: eth0  sources:  services: apache2 apache2-ssl dhcp 
> dhcpv6-client ftp http https mdns mysql nfs nfs3 ntp pulseaudio samba 
> samba-client samba-dc smtp squid ssh vsftpd  ports: 9100/tcp 9100/udp 
> 9100/sctp 9100/dccp 2049/tcp 111/tcp 2049/udp 111/udp 631/tcp 631/udp 
>   protocols:  forward: no  masquerade: no  forward-ports:  source-ports: 
>   icmp-blocks:  rich rules: nm-shared  target: ACCEPT  ingress-priority: 
> 0  egress-priority: 0  icmp-block-inversion: no  interfaces:  sources: 
>   services: dhcp ssh  ports:  protocols: icmp ipv6-icmp  forward: no 
>   masquerade: no  forward-ports:  source-ports:  icmp-blocks:  rich 
> rules:        rule priority="32767" reject public (default, active) 
>   target: default  ingress-priority: 0  egress-priority: 0 
>   icmp-block-inversion: no  interfaces:  sources:  services: 
> dhcpv6-client  ports:  protocols:  forward: no  masquerade: no 
>   forward-ports:  source-ports:  icmp-blocks:  rich rules: trusted 
>   target: ACCEPT  ingress-priority: 0  egress-priority: 0 
>   icmp-block-inversion: no  interfaces:  sources:  services:  ports: 
>   protocols:  forward: yes  masquerade: no  forward-ports: 
>   source-ports:  icmp-blocks:  rich rules: work  target: default 
>   ingress-priority: 0  egress-priority: 0  icmp-block-inversion: no 
>   interfaces:  sources:  services: dhcpv6-client ssh  ports:  protocols: 
>   forward: yes  masquerade: no  forward-ports:  source-ports: 
>   icmp-blocks:  rich rules: abyss:/home/jeffr #

Reply via email to