Thanks, here's `shorewall dump`. On Wed, Aug 19, 2009 at 06:37:55AM -0700, Tom Eastep wrote: > Gaetano Guerriero wrote: > > Greetings, > > I have a firewall with two internet connection: > > /etc/shorewall/providers > > #NAME NUMBER MARK DUPLICATE INTERFACE > > GATEWAY OPTIONS COPY > > TISCALI 1 256 main eth2 > > 217.133.234.182 track eth0,eth1 > > INFO1 2 512 main eth3 > > 192.168.50.2 - eth0,eth1 > > LAN_TRANSPARENT_PROXY 14 1024 - eth1 > > 192.168.0.205 loose > > > > I use the ip on eth2 to do DNAT on some host in the LAN, but the response > > doesn't go through eth2, since the default provider is on eth3: > > /etc/shorewall/route_rules: > > eth1 - INFO1 > > 26002 > > > >>From my understanding, using the option "track" on eth2 should make return > >>on eth2 > > the connections that arrive on eth2 and are DNATted on the hosts on the lan. > > Since that doesn't happen, my question is if this depends on a wrong setup, > > or if > > it shouldn't work anyway since I'm still using route_rules instead of > > tcrules. > > Besides, in the MultiSP howto is recommended to use shorewall 4.2, while > > I'm still > > shorewall 4.0. > > It should work. > > > > > This setup worked in shorewall 3.2, now as I work-around I'm forcing every > > host who > > receive DNAT connection to exit always through eth2. > > Unfortunately, there isn't enough information here to really help you. > Please forward the output of "shorewall dump" collected as described at > http://www.shorewall.net/support.htm#Guidelines. > > -Tom > -- > Tom Eastep \ When I die, I want to go like my Grandfather who > Shoreline, \ died peacefully in his sleep. Not screaming like > Washington, USA \ all of the passengers in his car > http://shorewall.net \________________________________________________ >
> ------------------------------------------------------------------------------ > Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day > trial. Simplify your report design, integration and deployment - and focus on > what you do best, core application coding. Discover what's new with > Crystal Reports now. http://p.sf.net/sfu/bobj-july > _______________________________________________ > Shorewall-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/shorewall-users
shorewall.dump.bz2
Description: Binary data
------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
