Am 27.04.2014 00:12, schrieb Michael Kress:
>
> After boot up (i.e. starting up S24openvpn and S28shorewall) it doesn't
> work right away.
> The first pings get dropped, but with no logging. (DROP counter on tun1
> goes up though).
>
> Then comes the fun part:
> I restart shorewall again and then I get a martian:
> Apr 27 00:53:55 halgw kernel: martian source 192.168.0.11 from
> 192.168.0.1, on dev eth1
> Apr 27 00:53:55 halgw kernel: ll header:
> ff:ff:ff:ff:ff:ff:00:xx:xx:xx:xx:xx:08:06
>
> And from that moment on it works!
>

tested that a bit more ...

WITHOUT shorewall:
==================
The openvpn connection itself is fine - it would stay up and reconnect 
as needed.

WITH shorewall:
===============
Once the connection is up, it's fine with the above effect (martian). 
After a while, the connection drops and cannot reconnect.
 From that moment, the two counters "TX dropped" and "Tx bytes" go up.
I can work around that by :
shorewall clear
ip route flush cache
sleep 2
shorewall start

During the sleep phase, openvpn makes a reconnect and in most cases it 
works again.
How can I debug and stabilze that?

Regards
Michael


------------------------------------------------------------------------------
Start Your Social Network Today - Download eXo Platform
Build your Enterprise Intranet with eXo Platform Software
Java Based Open Source Intranet - Social, Extensible, Cloud Ready
Get Started Now And Turn Your Intranet Into A Collaboration Platform
http://p.sf.net/sfu/ExoPlatform
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to