[Shorewall-users] masq rules for LVS

2012-10-23 Thread Kristoffer Egefelt
Hi, I need some special masq rules to allow internal servers to resolve public IP's which are loadbalanced by LVS - the rule are: iptables -t nat -A POSTROUTING -m ipvs --vaddr /32 --vport 80 -j SNAT --to-source Also I need to enable: echo 1 > /proc/sys/net/ipv4/vs/conntrack Currently I do

[Shorewall-users] SNAT problem...

2008-10-14 Thread Kristoffer Egefelt
Hi, I'd like to have local servers connect to the firewall external ip and have the traffic routed back to the local network. It works manually, but I can't figure out how to make this work through shorewall: This works: iptables -t nat -A POSTROUTING -d 10.10.5.242 -s 10.10.0.0/16 -p tcp -

Re: [Shorewall-users] SNAT problem...

2008-10-16 Thread Kristoffer Egefelt
> Kristoffer Egefelt wrote: >> Hi, >> >> I'd like to have local servers connect to the firewall external ip >> and >> have the traffic routed back to the local network. It works manually, >> but I can't figure out how to make this work through sho

Re: [Shorewall-users] SNAT problem...

2008-10-17 Thread Kristoffer Egefelt
It works with v4.2 :) Thanks Kristoffer >> Is it possible to refer the "cust:[EMAIL PROTECTED]" in the masq file >> without having to specify seperate entries in the interfaces, zone and >> policy files? >> >> What I mean is if I add: >> >> vlan5 vlan5 detect routeback >> >> to the interf