I'm still struggling with forwarding SMTP traffic across a VPN and into my LAN. After a week+, I still can't get this working :-/
Monkeying aaround, I screwed up the VPN, too. That's been fixed for me, and I'm restarting with a working VPN setup, SERVER (shorewall) eth0: S.S.S.S 192.168.0.1 tun1: 10.0.0.1 | | | CLIENT (shorewall) eth0: C.C.C.C tun1: 10.0.0.2 eth1: 192.168.1.1 | | | SMTP eth0: 192.168.1.2 Connecting from SERVER's shell to the SMTP works, telnet 192.168.1.2 25 Trying 192.168.1.2... Connected to 192.168.1.2. Escape character is '^]'. 220 smtp.mydomain.com ESMTP But I can't to get to SMTP from 'outside'. From an external shell, telnet S.S.S.S 25 Trying S.S.S.S... telnet: Unable to connect to remote host: Connection timed out The SERVER shorewall has /zones fw firewall net ipv4 vpn1 ipv4 loc loopback /interfaces net eth0 tcpflags,nosmurfs,routefilter=1,sourceroute=0 vpn1 tun+ - loc lo /rules DNAT net $FW:192.168.1.2 tcp 25 - S.S.S.S ACCEPT net vpn1:192.168.1.2 tcp 25 and the CLIENT shorewall has /zones fw firewall net ipv4 lan ipv4 loc loopback vpn1 ipv4 /interfaces net eth0 tcpflags,nosmurfs,logmartians=1,routefilter=1,sourceroute=0 lan eth1 routefilter=1 vpn1 tun+ - loc lo /rules ACCEPT vpn1 lan:192.168.1.2 tcp 25 /masq eth0 192.168.1.2 S.S.S.S tcp 25 I'm well aware that my setup does not work, and that it's probably flat out wrong. I'm just posting the state it's in right now. There is no "why" as to what I'm doing. I don't know anymore and am reduced to just changing & trying things randomly. I'd appreciate a hand -- getting this working and understanding what's going on. What shorewall configs do I need so that `telnet S.S.S.S 25` from the external net will get a response from SMTP ? ------------------------------------------------------------------------------ Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of code with a free copy of Black Duck Code Sight - the same software that powers the world's largest code search on Ohloh, the Black Duck Open Hub! Try it now. http://p.sf.net/sfu/bds _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users