Simon Purdy wrote:

> I am trying to set up a bridging firewall using Ubuntu 7.04.
> 
> My setup is as follows. I have eth0 (net) and eth1 (dmz) set up as a
> bridge (br0) with eth2 (loc) running natted on br0. I have got this
> setup working back when physdev match was in the kernel.
>  
> I have the bridge working so I can ping from 82.69.192.105 (dmz) to
> 82.69.192.109 (fw) and 82.69.192.110 (wan), the firewall can also ping
> 105 and 110 however on starting shorewall, pinging 109 and 110 from 105
> result in Destination host unreachable result (same happens pinging 105
> and 110 from 109).

a) Your dmz zone is empty.
b) You have no loc zone at all.
c) You haven't specified the 'routeback' option on br0.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to