-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Tibbs, Richard wrote: > Hello List... > I have a problem that I can't figure out. > I have several DNATs to my server in the internal side. > Many of you should be able to see www.oakcitynet.com my website, since I > can see on this PC. > > However, the server cannot see the internet. > > I have done several tests , using Shorewall 3.4.1 > shorewall reset > <shorewall counters reset> > shorewall show nat > chain eth0_masq > 0 0 masquerade all 192.168.1.0/24 0.0.0.0/0 > Chain net_dnat pkts bytes > DNAT TCP dpt:80 (web server) 1 48 (my req to www.oakcitynet.com) > DNAT TCP dpt:143 (IMAP) 0 0 > DNAT TCP dpt:25 (SMTP) 3 144 > DNAT TCP dpt:53 DNS 0 0 > DNAT UDP dpt:53 DNS 1 71 > > finally, shorewall show zones > fw (firewall) > VPN1 (ipv4) ipsec+:0.0.0.0/0 > vpn2 (ipv4) tun+:0.0.0.0/0 > net (ipv4) eth0:0.0.0.0/0 (eth0 is the external interface) > loc (ipv4) eth1:0.0.0.0/0 eth1 definitely the internal lan. > > I can ping the firewall, and default gw (216.12.x.y) and the DNS from > ntelos from the server. > > Any body have an idea what is happening here? >
Did you resolve this? If not, we need a better problem report ("the server cannot see the internet" is void of useful content). Please see http://www.shorewall.net/support.htm#Guidelines for Shorewall problem reporting information. Thanks, - -Tom - -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFG1KjAO/MAbZfjDLIRAhX+AKCFubwXv3XOaW5tKCZNsyAAPiGi9wCgsD2e JiPYd+Uq3JL0EuZefofrtPE= =lS9T -----END PGP SIGNATURE----- ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/