Re: [Shorewall-users] SNAT/masquerading problem -- FIXED

2007-12-28 Thread Tom Eastep
Rich Wales wrote: > OK, I finally managed to figure out what was going haywire in my Xen > configuration. It turns out that if you have a routed Xen setup and > are using a non-default network interface in dom0 (i.e., something > other than eth0), you need to explicitly pass the interface name (vi

Re: [Shorewall-users] SNAT/masquerading problem -- FIXED

2007-12-28 Thread Rich Wales
OK, I finally managed to figure out what was going haywire in my Xen configuration. It turns out that if you have a routed Xen setup and are using a non-default network interface in dom0 (i.e., something other than eth0), you need to explicitly pass the interface name (via a netdev= parameter) to

Re: [Shorewall-users] SNAT/masquerading problem

2007-12-28 Thread Rich Wales
Hi, Tom -- Replying to: > As I point out in the XenMyWay-Routed doc, the 'out of the box' routed > domU configuration _will not_ connect to the network (it can connect to > the dom0). You can correct that problem by doing this: > > echo 1 > /proc/sys/net/ipv4/conf//proxy_arp > > Note that Shor

Re: [Shorewall-users] SNAT/masquerading problem

2007-12-28 Thread Tom Eastep
Rich Wales wrote: > Tom Eastep wrote: > > (I tried imitating the "Xen My > Way-Routed" example in the Shorewall documentation, but for some reason > it simply won't work for me -- the domU stubbornly refuses to connect to > the network and flatly will not start up.) > As I point out in the XenMy

Re: [Shorewall-users] SNAT/masquerading problem

2007-12-27 Thread Rich Wales
Tom Eastep wrote: > The IP configuration on this box looks really messed up -- a combination > of Xen routed and Xen bridged configurations. . . . I would clean up > the Xen configuration first so that you know the paths that packets are > taking through the box. Thanks. I've been having strange

Re: [Shorewall-users] SNAT/masquerading problem

2007-12-27 Thread Tom Eastep
Rich Wales wrote: > Any suggestions as to how I can get SNAT working would be gratefully > appreciated. Thanks. The IP configuration on this box looks really messed up -- a combination of Xen routed and Xen bridged configurations. I had understood from previous posts that you were attempting to

[Shorewall-users] SNAT/masquerading problem

2007-12-26 Thread Rich Wales
I'm still trying to get Shorewall working properly on a new Xen system. My current problem is that SNAT doesn't seem to work. When I connect out from behind my new firewall to another host, the source IP address is supposed to be SNAT'ed to the address of my firewall, but this isn't happening. T