[Shorewall-users] dnat or forwarding in a vserver environment

2008-04-20 Thread mess-mate
Hi, i'm still here with my vserver problems :( I've got access to internet working from the guest and the host. So i'd routed the dynamic ip to the vserver-host in the dmz zone as this: DNAT$FW dmz:192.168.20.1 tcp 80 - $ETH0_IP and it woks perfectly but i want to get my

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-20 Thread Martin Leben
mess-mate wrote: > So i'd routed the dynamic ip to the vserver-host in the dmz zone as this: > > DNAT$FW dmz:192.168.20.1 tcp 80 - $ETH0_IP > > and it woks perfectly but i want to get my webpage in the vserver-guest now, > > 192.168.30.1 = the guest and 192.168.20.1 = the

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-20 Thread Tom Eastep
Martin Leben wrote: If you have more questions about vserver networking, I am sure that you would get better help on a mailing list or forum about vserver where the vserver experts hang out, than you get on this list. Remember, this is a list about the Shoreline Firewall (a.k.a. shorewall),

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-21 Thread mess-mate
Tom Eastep wrote: > Martin Leben wrote: > >> >> If you have more questions about vserver networking, I am sure that >> you would get better help on a mailing list or forum about vserver >> where the vserver experts hang out, than you get on this list. >> Remember, this is a list about the Shorelin

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-21 Thread Tom Eastep
mess-mate wrote: No, i tryed it And given that you are unwilling to give us the details, we will be unable to help you further. You _have_ to do that on the router. So the problem is on your Vserver. You seem determined to run Shorewall on the host (for some unknown reason). I assume

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-21 Thread mess-mate
Martin Leben wrote: > mess-mate wrote: > >> So i'd routed the dynamic ip to the vserver-host in the dmz zone as this: >> >> DNAT$FW dmz:192.168.20.1 tcp 80 - $ETH0_IP >> >> and it woks perfectly but i want to get my webpage in the vserver-guest now, >> >> 192.168.30.1 = t

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-21 Thread Tom Eastep
mess-mate wrote: In addition of my previous post; the vserver people said _'there is no DNAT:thing '_ So the only i can think is that the vserver-host have to dnat, do it ? The vserver people have told you not to DNAT so you think you should DNAT? That's twice, one's from the router/firewall

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-21 Thread mess-mate
Martin Leben wrote: > mess-mate wrote: > >> So i'd routed the dynamic ip to the vserver-host in the dmz zone as this: >> >> DNAT$FW dmz:192.168.20.1 tcp 80 - $ETH0_IP >> >> and it woks perfectly but i want to get my webpage in the vserver-guest now, >> >> 192.168.30.1 = t

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-21 Thread Martin Leben
mess-mate wrote: > In addition of my previous post; > the vserver people said _'there is no DNAT:thing '_ > So the only i can think is that the vserver-host have to dnat, do it ? > That's twice, one's from the router/firewall and now again. And this > with an $ETH0_IP ! Hi, Please re-read what I

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-21 Thread Martin Leben
Martin Leben wrote: > mess-mate wrote: >> In addition of my previous post; >> the vserver people said _'there is no DNAT:thing '_ >> So the only i can think is that the vserver-host have to dnat, do it ? >> That's twice, one's from the router/firewall and now again. And this >> with an $ETH0_IP ! >

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-22 Thread mess-mate
Martin Leben wrote: > Martin Leben wrote: > >> mess-mate wrote: >> >>> In addition of my previous post; >>> the vserver people said _'there is no DNAT:thing '_ >>> So the only i can think is that the vserver-host have to dnat, do it ? >>> That's twice, one's from the router/firewall and no

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-22 Thread Martin Leben
mess-mate wrote: > Thanks Martin, i didn't consider yoy as 'a big talker' :) > But as a helpfull person. :-) You're welcome. Actually I did it more to make sure that what I said was true than anything else. > For any raesen i don't know my ISP considered some shorewal messages as > spam ? > ( m

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-22 Thread Jerry Vonau
I had sent this early this morning, but it never made it to the list. It's not the first time my ISP has ate my email. I wonder how many of my resumes didn't get delivered, might explain a couple of things As a PS to the below mail: 1) Or go with what Martin suggested, use an ip address on 20

Re: [Shorewall-users] dnat or forwarding in a vserver environment

2008-04-22 Thread Jerry Vonau
mess-mate wrote: > Tom Eastep wrote: > >> Martin Leben wrote: >> >>> If you have more questions about vserver networking, I am sure that >>> you would get better help on a mailing list or forum about vserver >>> where the vserver experts hang out, than you get on this list. >>> Remember, this is a