Pál Csányi wrote:
> 2007/8/2, Andrew Suffield <[EMAIL PROTECTED]>:
>>  On Thu, Aug 02, 2007 at 11:24:16AM +0200, P?l Cs?nyi wrote:
>>> DNAT:debug   net   loc:192.168.1.10-192.168.1.98   tcp   smtp
>> Lay off the crack. I can't imagine what you expected that to
>> accomplish.
> 
> OK
> Now the rules are:
> SECTION NEW
> ACCEPT       pptp  fw                              icmp
> ACCEPT       fw    net                             tcp   smtp
> DNAT         net   loc:192.168.1.100               tcp   80

Didn't you want port 25 there rather than 80?

> DROP         net   fw                              udp   1026:1029
> 
> The port 25 is still closed from the internet. :(
> 
> Any advices?
> 

If you have further problems, please see the DNAT debugging tips in
Shorewall FAQs 1a and 1b.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to