Gaetano Guerriero wrote: > Greetings, > I have a firewall with two internet connection: > /etc/shorewall/providers > #NAME NUMBER MARK DUPLICATE INTERFACE > GATEWAY OPTIONS COPY > TISCALI 1 256 main eth2 > 217.133.234.182 track eth0,eth1 > INFO1 2 512 main eth3 > 192.168.50.2 - eth0,eth1 > LAN_TRANSPARENT_PROXY 14 1024 - eth1 > 192.168.0.205 loose > > I use the ip on eth2 to do DNAT on some host in the LAN, but the response > doesn't go through eth2, since the default provider is on eth3: > /etc/shorewall/route_rules: > eth1 - INFO1 26002 > >>From my understanding, using the option "track" on eth2 should make return on >>eth2 > the connections that arrive on eth2 and are DNATted on the hosts on the lan. > Since that doesn't happen, my question is if this depends on a wrong setup, > or if > it shouldn't work anyway since I'm still using route_rules instead of tcrules. > Besides, in the MultiSP howto is recommended to use shorewall 4.2, while I'm > still > shorewall 4.0.
It should work. > > This setup worked in shorewall 3.2, now as I work-around I'm forcing every > host who > receive DNAT connection to exit always through eth2. Unfortunately, there isn't enough information here to really help you. Please forward the output of "shorewall dump" collected as described at http://www.shorewall.net/support.htm#Guidelines. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
