[Shorewall-users] Debian packages for 5.1.8.1 - now available

2017-11-20 Thread Roberto C . Sánchez
After far too long a delay, I have resumed packaging Shorewall for Debian. I have just uploaded packages for 5.1.8.1 to Debian unstable. They should shortly be available from https://packages.debian.org If you are not a user of Debian Sid, you can download the packages and install them using 'dpk

Re: [Shorewall-users] DNAT Not Working

2017-11-20 Thread Tom Eastep
On 11/19/2017 01:01 PM, Colony.three via Shorewall-users wrote: > Hello, I can not get DNAT to work to save my life. > > All machines are CentOS7 KVM virtual machines, one the > internet-connected router, and the other in the DMZ. > > I've gone through the docs and there seem to be two methods of

Re: [Shorewall-users] DNAT Not Working

2017-11-20 Thread Colony.three via Shorewall-users
> Are you sure this isn't working. I can connect to the firewall's > external IP on port 80 and I get the Quantum Equities web site. > > -Tom > > ___ Hm, that's odd. My remote OpenStack instance is CentOS Minimal so no GUI. I have to use curl to test,

Re: [Shorewall-users] DNAT Not Working

2017-11-20 Thread Tom Eastep
On 11/20/2017 09:27 AM, Colony.three via Shorewall-users wrote: > >> Are you sure this isn't working. I can connect to the firewall's >> external IP on port 80 and I get the Quantum Equities web site. >> >> -Tom >> >> >> ___ >> > > Hm, t

Re: [Shorewall-users] DNAT Not Working

2017-11-20 Thread Colony.three via Shorewall-users
> On 11/20/2017 09:27 AM, Colony.three via Shorewall-users wrote: > >>> Are you sure this isn't working. I can connect to the firewall's >>> external IP on port 80 and I get the Quantum Equities web site. >>> >>> -Tom >>> >>> ___ >> >> Hm, that's odd. My

Re: [Shorewall-users] DNAT Not Working

2017-11-20 Thread Tom Eastep
On 11/20/2017 10:40 AM, Colony.three via Shorewall-users wrote: > > By the mighty Hammer Of Thor, it works.  I don't understand why my > remote curl or nc attempts didn't work. > > When using:  Web(DNAT)    loc   dmz   -     - -   50.35.109.212 > ... is that last 50.35.109.212 necessary?

Re: [Shorewall-users] DNAT Not Working

2017-11-20 Thread Colony.three via Shorewall-users
>> If necessary, can I somehow enter it here as a system variable? >> You can use ð0. >> >> -Tom Holy cow, this saves all kinds of scripted checks and saves! Thanks for all your help Tom.-- Check out the vibrant tech com

Re: [Shorewall-users] DNAT Not Working

2017-11-20 Thread Tom Eastep
On 11/20/2017 11:30 AM, Colony.three via Shorewall-users wrote: >>> If necessary, can I somehow enter it here as a system variable? >> >> >> You can use ð0. >> >> -Tom > > Holy cow, this saves all kinds of scripted checks and saves! > > Thanks for all your help Tom. > You're most welcom