Re: [Shorewall-users] FAQ 2b ...

2011-02-26 Thread Paolo Andretta
On Sat, 26 Feb 2011, Tom Eastep wrote: Ok, Changed in: vmbr0 192.168.109.0/241.2.3.109 vmbr0 192.168.110.0/241.2.3.110 vmbr0 192.168.108.0/241.2.3.108 vmbr9 192.168.109.0/241.2.3.109 <<< NEW

Re: [Shorewall-users] FAQ 2b ...

2011-02-26 Thread Tom Eastep
On 2/26/11 3:56 AM, Paolo Andretta wrote: > On Fri, 25 Feb 2011, Tom Eastep wrote: > >>> Ok, Changed in: >>> >>> vmbr0 192.168.109.0/241.2.3.109 >>> vmbr0 192.168.110.0/241.2.3.110 >>> vmbr0 192.168.108.0/241.2.3.108 >>> >>> vmbr9 192

Re: [Shorewall-users] FAQ 2b ...

2011-02-26 Thread Paolo Andretta
On Fri, 25 Feb 2011, Tom Eastep wrote: >> Ok, Changed in: >> >> vmbr0 192.168.109.0/241.2.3.109 >> vmbr0 192.168.110.0/241.2.3.110 >> vmbr0 192.168.108.0/241.2.3.108 >> >> vmbr9 192.168.109.0/241.2.3.109<<< NEW Attempt > >

Re: [Shorewall-users] FAQ 2b ...

2011-02-25 Thread Tom Eastep
On 2/25/11 12:18 PM, Paolo Andretta wrote: > On Fri, 25 Feb 2011, Tom Eastep wrote: > > Ok, Changed in: > > vmbr0 192.168.109.0/241.2.3.109 > vmbr0 192.168.110.0/241.2.3.110 > vmbr0 192.168.108.0/241.2.3.108 > > vmbr9 192.168.109.0

Re: [Shorewall-users] FAQ 2b ...

2011-02-25 Thread Paolo Andretta
On Fri, 25 Feb 2011, Tom Eastep wrote: >>> Apparently you have since it doesn't work. But until you show us what >>> you have done, we can't tell you what you are missing. >>> >>> Things to check: >>> >>> a) That you have set 'routeback' on the internal firewall interface. >>> b) That you have add

Re: [Shorewall-users] FAQ 2b ...

2011-02-25 Thread Tom Eastep
On 2/25/11 11:30 AM, Paolo Andretta wrote: > On Thu, 24 Feb 2011, Tom Eastep wrote: > Would something roughly as documented here: http://www.shorewall.net/FAQ.htm#faq2 help? >>> >>> As in the subject and in my explanation (my english is poor but hope >>> unsterstandable), I read Faq 2 an

Re: [Shorewall-users] FAQ 2b ...

2011-02-25 Thread Paolo Andretta
On Thu, 24 Feb 2011, Tom Eastep wrote: >>> Would something roughly as documented here: >>> http://www.shorewall.net/FAQ.htm#faq2 help? >> >> As in the subject and in my explanation (my english is poor but hope >> unsterstandable), I read Faq 2 and related docs. I missed something? > > Apparently y

Re: [Shorewall-users] FAQ 2b ...

2011-02-24 Thread Dominic Benson
On 24 Feb 2011, at 19:37, Tom Eastep wrote: > On 2/24/11 11:22 AM, Paolo Andretta wrote: >> >>> Would something roughly as documented here: >>> http://www.shorewall.net/FAQ.htm#faq2 help? >> >> As in the subject and in my explanation (my english is poor but hope >> unsterstandable), I re

Re: [Shorewall-users] FAQ 2b ...

2011-02-24 Thread Tom Eastep
On 2/24/11 11:22 AM, Paolo Andretta wrote: > >>> >> Would something roughly as documented here: >> http://www.shorewall.net/FAQ.htm#faq2 help? > > As in the subject and in my explanation (my english is poor but hope > unsterstandable), I read Faq 2 and related docs. I missed something? > Appare

Re: [Shorewall-users] FAQ 2b ...

2011-02-24 Thread Paolo Andretta
On Wed, 23 Feb 2011, Tom Eastep wrote: . . . The firewall box is a ProxMox VE and the server is a KVM based VM in the same ProxMox box. Any hints? >>> >>> Put an entry for the server in its own /etc/hosts file. >> >> I currently put entries like: >> >> 192.168.a.b www.my

Re: [Shorewall-users] FAQ 2b ...

2011-02-24 Thread Paolo Andretta
On Wed, 23 Feb 2011, Dominic Benson wrote: I have a server in my DMZ. I configured it with a DNAT rule and added the IP to the /etc/shorewall/masq so it is acccessible from the Internet and it is see with its public IP. No problem on this. If I try to connect to www.mydoma

Re: [Shorewall-users] FAQ 2b ...

2011-02-23 Thread Dominic Benson
On 23/02/11 16:56, Paolo Andretta wrote: > On Wed, 23 Feb 2011, Tom Eastep wrote: > > >>> I have a server in my DMZ. >>> I configured it with a DNAT rule and added the IP to the >>> /etc/shorewall/masq so it is acccessible from the Internet and it is see >>> with its public IP. No problem on th

Re: [Shorewall-users] FAQ 2b ...

2011-02-23 Thread Tom Eastep
On 2/23/11 8:56 AM, Paolo Andretta wrote: > On Wed, 23 Feb 2011, Tom Eastep wrote: > >>> I have a server in my DMZ. >>> I configured it with a DNAT rule and added the IP to the >>> /etc/shorewall/masq so it is acccessible from the Internet and it is see >>> with its public IP. No problem on this.

Re: [Shorewall-users] FAQ 2b ...

2011-02-23 Thread Paolo Andretta
On Wed, 23 Feb 2011, Tom Eastep wrote: >> I have a server in my DMZ. >> I configured it with a DNAT rule and added the IP to the >> /etc/shorewall/masq so it is acccessible from the Internet and it is see >> with its public IP. No problem on this. >> If I try to connect to www.mydomain.com from th

Re: [Shorewall-users] FAQ 2b ...

2011-02-23 Thread Tom Eastep
On 2/23/11 5:33 AM, Paolo Andretta wrote: > > I have a server in my DMZ. > I configured it with a DNAT rule and added the IP to the > /etc/shorewall/masq so it is acccessible from the Internet and it is see > with its public IP. No problem on this. > If I try to connect to www.mydomain.com from

[Shorewall-users] FAQ 2b ...

2011-02-23 Thread Paolo Andretta
I have a server in my DMZ. I configured it with a DNAT rule and added the IP to the /etc/shorewall/masq so it is acccessible from the Internet and it is see with its public IP. No problem on this. If I try to connect to www.mydomain.com from the server itself, it doesn't work. I have IP_FORWARD