Laurent Blin wrote: > >>> Here is my new masq file: >>> >>> ############################################################################### >>> >>> #INTERFACE SUBNET ADDRESS PROTO PORT(S) >>> IPSEC >>> #LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE >>> eth2 eth0 >>> eth2 10.44.40.0/24 >>> eth2 192.9.0.0/16 >>> >>> Shorewall has been restarted. But it still doesn't work. Ping from >>> remote LAN to internet still failes >>> Yet, I still can't see any log on the firewall when I attempt to access >>> internet from the remote lan >>> >>> Any idea or any conf or log I could use? >>> >> Might want to move those new rules above >> #LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE >> >> retest, if still not working please have a look at: >> >> http://www.shorewall.net/support.htm#Guidelines > > Hello, > > Still not better. > See attached dump file > > I try to access from 10.44.40.105 to www.google.fr - (209.85.229.147)
In your original post, you reported that: > Default route from 10.44.40.105 is 192.9.200.200 192.9.200.200 is the IP address of eth0 on the firewall so that default route is not possible unless the router at 192.9.200.100 is doing Proxy ARP. I would think that the default route at 10.44.40.105 is rather via 10.44.40.250. Try pinging 62.160.136.185 (IP address of eth2) from 10.44.40.105. I suspect that won't work and indicates that the default route in the router at 192.9.200.100 is not through 192.9.200.200. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
