On 4/25/2014 2:17 AM, Stéphane Pinchaux wrote: > Dear users, > > I'm trying to route a public IP to a virtual machine in a virtual network : > >> ☁ Server host ☁ = eth0 => Server = guestbr0 => Virtual machine. > > With: > >> Server's eth0: static server's IP >> Server's guestbr0: static 192.168.200.1 (virtual bridge, not connected to >> eth0) >> VM's eth0: static VM's IP > > The VM's IP is routed on the server's IP. > I have set up routes on both server, I can ping the VM from the host and vice > versa. > > But... > A ping from VM to external IP doesn't work: tcpdump let me see the echo > requests on all ports, but the echo reply can be seen only on the server's > eth0. > A ping from an external connection to the VM's IP doesn't work anymore, but I > can see the echo requests on the server's eth0. > > > > Some related details : > > OS : debian wheezy > > shorewall.conf > >> IP_FORWARDING=On > > zones > >> net ipv4 >> gest ipv4 > > interfaces > >> net eth0 routefilter,logmartians,routeback,sourceroute=1 >> guest guestbr0 bridge,dhcp,routeback,logmartians,routefilter > > policy > >> guest all ACCEPT >> $FW all ACCEPT >> net guest ACCEPT > > > Does anybody know what’s wrong? >
Please: - 'shorewall reset' (that resets the Netfilter packet and byte counters) - Repeat your ping test - 'shorewall dump > dump.txt'. If the 'dump' command produces errors, correct those so that we have a full dump - Send the dump.txt file and tell us the IP address you were pinging from and the IP address you were trying to ping. Thanks, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Start Your Social Network Today - Download eXo Platform Build your Enterprise Intranet with eXo Platform Software Java Based Open Source Intranet - Social, Extensible, Cloud Ready Get Started Now And Turn Your Intranet Into A Collaboration Platform http://p.sf.net/sfu/ExoPlatform
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
