Thanks for your reply. I am using Shorewall 4.4.11.6 and IP forwarding is
set to 1 already:

/proc/sys/net/ipv4/ip_forward = 1
Also for DNS resolution I had added following rules:

###Next 4 Lines for DNS Resolution####
ACCEPT     loc       $FW                udp       53
ACCEPT     loc       $FW                tcp       53
ACCEPT     $FW       net                udp       53
ACCEPT     $FW       net                tcp       53

Is there any limitation to add rules in /etc/shorewall/rules file ?

Regards,
Yogesh

On Fri, Oct 14, 2011 at 2:42 AM, Carina V. Barca <[email protected]>wrote:

>
> I don't know if the email lost, that's why I send it again.
> Sorry if I send this twice.
>  ------------------------------
> From: [email protected]
> To: [email protected]
> Subject: Re: [Shorewall-users] No internet in local net with shorewall
> Date: Wed, 12 Oct 2011 11:45:42 +0000
>
> I'm sorry, here it goes just like faq 15.
> I must add that I can ping 8.8.8.8 or www.google.com, but I can't
> navigate.
>
> Regardss
>
> --Archivo adjunto de mensaje reenviado--
> From: [email protected]
> To: c
> Date: Tue, 11 Oct 2011 12:02:04 -0700
> Subject: Re: [Shorewall-users] No internet in local net with shorewall
>
> On Tue, 2011-10-11 at 18:50 +0000, Carina V. Barca wrote:
> >
> > Tom: thanks for the answer.
> > I attach what you asked..
>
> But you clearly didn't read FAQ 15. Point number 4:
>
>         Forwarding is not enabled (This is often the problem for Debian
>
>         users). Enter this command:
>
>         cat /proc/sys/net/ipv4/ip_forward
>
>         If the value displayed is 0 (zero) then set IP_FORWARDING=On
>         in /etc/shorewall/shorewall.conf and restart Shorewall.
>
>
> From the output of 'shorewall dump' that you posted (which is created
> from the above command):
>
>          /proc/sys/net/ipv4/ip_forward = 0
>
> -Tom
> --
> Tom Eastep        \ When I die, I want to go like my Grandfather who
>
> Shoreline,         \ died peacefully in his sleep. Not screaming like
> Washington, USA     \ all of the passengers in his car
> http://shorewall.net \________________________________________________
>
>
>
> ------------------------------------------------------------------------------
> All the data continuously generated in your IT infrastructure contains a
> definitive record of customers, application performance, security
> threats, fraudulent activity and more. Splunk takes this data and makes
> sense of it. Business sense. IT sense. Common sense.
> http://p.sf.net/sfu/splunk-d2d-oct
> _______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
>


-- 
Best Regards,
Yogesh Phatak.
Email ID : [email protected]
Cell : + 91 98233 00724
http://picasaweb.google.com/yoogesh

-----------------------------
Before you start some work, always ask yourself three questions - Why am I
doing it, What the results might be and Will I be successful. Only when you
think deeply
and find satisfactory answers to these questions, go ahead.
-----------------------------
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to