I have had cases where Shorewall did not properly set ip forwarding to true, even though IP_FORWARDING=On was set in the config file. I never bothered to investigated, I just put
echo 1 > /proc/sys/net/ipv4/ip_forward in my /etc/rc.local file and called it a day. But this was an old version of Shorewall. What version are you using? j On Thursday, October 13, 2011, Carina V. Barca elucidated thus: > I don't know if the email lost, that's why I send it again. > Sorry if I send this twice. > From: [email protected] > To: [email protected] > Subject: Re: [Shorewall-users] No internet in local net with > shorewall Date: Wed, 12 Oct 2011 11:45:42 +0000 > > > > > > > > > I'm sorry, here it goes just like faq 15. > I must add that I can ping 8.8.8.8 or www.google.com, but I can't > navigate. > > Regardss > > --Archivo adjunto de mensaje reenviado-- > From: [email protected] > To: c > Date: Tue, 11 Oct 2011 12:02:04 -0700 > Subject: Re: [Shorewall-users] No internet in local net with > shorewall > > On Tue, 2011-10-11 at 18:50 +0000, Carina V. Barca wrote: > > Tom: thanks for the answer. > > I attach what you asked.. > > But you clearly didn't read FAQ 15. Point number 4: > > Forwarding is not enabled (This is often the problem for > Debian users). Enter this command: > > cat /proc/sys/net/ipv4/ip_forward > > If the value displayed is 0 (zero) then set IP_FORWARDING=On > in /etc/shorewall/shorewall.conf and restart Shorewall. > > >From the output of 'shorewall dump' that you posted (which is > >created > > from the above command): > > /proc/sys/net/ipv4/ip_forward = 0 > > -Tom -- Joshua Kugler Part-Time System Admin/Programmer http://www.eeinternet.com - Fairbanks, AK PGP Key: http://pgp.mit.edu/ ID 0x73B13B6A ------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data and makes sense of it. Business sense. IT sense. Common sense. http://p.sf.net/sfu/splunk-d2d-oct _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
