I attempted an install of a Bering-uClibc Firewall version 2.2.2 last night, but the installation failed due to an apparent routing problem.
The company I set this up for has 4 offices. The central office is the termination point for the T1 lines to the other three offices. They terminate into a Cisco router at the central office with central office IP of 10.1.1.1. The Leaf router has three interfaces: Net (to cable modem for internet access) eth0 Loc (central office) eth1 Cisco (link to other three offices) eth2 All offices are using RFC1918 addresses. To let the Leaf router know how to get to the remote offices, I added this to the shorewall init file: Ip route add 10.1.10.0 via 10.1.1.1 dev eth2 Ip route add 10.1.20.0 via 10.1.1.1 dev eth2 Ip route add 10.1.30.0 via 10.1.1.1 dev eth2 I also in Shorewall policy added Cisco loc accept Loc cisco accept When installed, from Leaf I could ping the remote routers, as well as devices on the remote networks, and the local office was able to ping Leaf or any interface on the Leaf box. However, from the central office, I was unable to ping to either the Cisco or any of the remote routers or devices, nor were the remote devices able to access anything on the central office network. "Shorewall clear" had no effect. I reviewed my shorewall and network configuration several times, and I've come to the conclusion that I have a routing problem. But I can't figure out why. 24.123.47.72/30 dev eth0 proto kernel scope link src 24.123.47.74 (internet) 10.1.30.0 via 10.1.1.1 dev eth2 10.1.10.0 via 10.1.1.1 dev eth2 10.1.20.0 via 10.1.1.1 dev eth2 10.1.1.0/24 dev eth2 proto kernel scope link src 10.1.1.2 (cisco) 10.1.2.0/24 dev eth1 proto kernel scope link src 10.1.2.1 (central office) If necessary or helpful, I can submit a full Shorewall problem report. Thanks in advance! - Bob Coffman ------------------------------------------------------- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42" plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ------------------------------------------------------------------------ leaf-user mailing list: [email protected] https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
