Re: [Shorewall-users] No traffic from DMZ

2008-10-14 Thread Leif Bergman
On Sun, Oct 12, 2008 at 7:09 PM, Tom Eastep [EMAIL PROTECTED] wrote: Leif Bergman wrote: Hi all I have a fw with 5 zones: eth0: green - the inside eth1: blue - wifi eth2: orang - dmz eth3: red - internet Traffic from green to red and orange works, trafic from orang

Re: [Shorewall-users] Open all from one machine....

2008-10-14 Thread Gilberto Nunes
Hi Thank you for your response Carlos... I follow your instruction, but I can't get any result... I change the port 46010 in your instruction to 6346 and 17107, both tcp and udp, I make changes on rules file at /etc/shorewall. However nothing happen... But, I do thia change on rules: ACCEPT

Re: [Shorewall-users] Open all from one machine....

2008-10-14 Thread Fabio Correa
Hi I think with this rules you are allowing traffic from loc to net from port 1024 Fabio R Correa. 2008/10/14 Gilberto Nunes [EMAIL PROTECTED] Hi Thank you for your response Carlos... I follow your instruction, but I can't get any result... I change the port 46010 in your

Re: [Shorewall-users] Open all from one machine....

2008-10-14 Thread Gilberto Nunes
Hi May be... But I put this: ACCEPT loc:172.18.0.100net tcp 1024: ACCEPT loc:172.18.0.100net udp 1024: And work properly for me... Em Ter, 2008-10-14 às 14:16 -0300, Fabio Correa escreveu: Hi I think with this rules you are

Re: [Shorewall-users] Open all from one machine....

2008-10-14 Thread Tom Eastep
Gilberto Nunes wrote: Hi May be... But I put this: ACCEPT loc:172.18.0.100net tcp 1024: ACCEPT loc:172.18.0.100net udp 1024: And work properly for me... With any setup based on the

Re: [Shorewall-users] Open all from one machine....

2008-10-14 Thread Jerry Vonau
Gilberto Nunes wrote: Hi May be... But I put this: ACCEPT loc:172.18.0.100net tcp 1024: ACCEPT loc:172.18.0.100net udp 1024: And work properly for me... Think you have a default policy of DROP or REJECT for traffic from loc

[Shorewall-users] SNAT problem...

2008-10-14 Thread Kristoffer Egefelt
Hi, I'd like to have local servers connect to the firewall external ip and have the traffic routed back to the local network. It works manually, but I can't figure out how to make this work through shorewall: This works: iptables -t nat -A POSTROUTING -d 10.10.5.242 -s 10.10.0.0/16 -p tcp

Re: [Shorewall-users] Open all from one machine....

2008-10-14 Thread Gilberto Nunes
Hi again After I send the last mail. I alter the rules file again, to this: ACCEPT loc:172.18.0.100net tcp 1024: ACCEPT loc:172.18.0.100net udp 1024: And I get connect to one IP of lan... That is what I need Thanks again... Em

Re: [Shorewall-users] SNAT problem...

2008-10-14 Thread Robert K Coffman Jr. -Info From Data Corp.
This, I believe, is Shorewall FAQ 2. - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two

Re: [Shorewall-users] SNAT problem...

2008-10-14 Thread Tom Eastep
Kristoffer Egefelt wrote: Hi, I'd like to have local servers connect to the firewall external ip and have the traffic routed back to the local network. It works manually, but I can't figure out how to make this work through shorewall: *This works:* iptables -t nat -A POSTROUTING -d

Re: [Shorewall-users] SNAT problem...

2008-10-14 Thread Tom Eastep
Robert K Coffman Jr. -Info From Data Corp. wrote: This, I believe, is Shorewall FAQ 2. Very true, -Tom -- Tom Eastep\ The ultimate result of shielding men from the Shoreline, \ effects of folly is to fill the world with fools. Washington, USA \

Re: [Shorewall-users] No traffic from DMZ

2008-10-14 Thread Tom Eastep
Leif Bergman wrote: On Sun, Oct 12, 2008 at 7:09 PM, Tom Eastep [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Leif Bergman wrote: Hi all I have a fw with 5 zones: eth0: green - the inside eth1: blue - wifi eth2: orang - dmz