-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2/20/20 8:54 AM, Stijn De Weirdt wrote: > hi all, > > > i am trying to setup a multiisp setup similar to the basic setup in > the documentation. > > however, when sending packets from the local network to the > internet using snat (or masq), the returning packets never make it > back to the local network. (tcpdump on external eth1 show per > outgoing packet one returning with dst the public ip and than one > translated packet with src the ping target and dest the correct > local ip; so i guess the snat part worked, but somehow the packet > is arrived (and nothing is logged)) > > my current guess is that some interfaces option is missing, but > i'm clueless. > > i've simplified the config to using only one interface (so single > entry in the provider) to produce my problem. > > i'm running shorewall 5.1.10, i'll paste the simplified configs > below. > > any hints how to debug further are welocme >
For this type of problem, we really need to see the output of 'shorewall dump' collected as described at https://shorewall.org/support.htm#Guidelines Thanks, - -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster Shoreline, \ with an international standard? Washington, USA \ A: Someone who makes you an offer you http://shorewall.org \ can't understand \________________________________________ -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIzBAEBCgAdFiEEFNMNR63CLO6yqbL8luaz8kI6TRAFAl5O8acACgkQluaz8kI6 TRBo8A//b3y3GEaWYcQa19jwfo+GFLdMuZkVG3744MKCQbUSL4v7Y4+zYmJ3bOiv qBjAK6qhF6vxfu7NUzQFM034A9+v2znqBBI6kdglaelNkFhu9G0QzwmNSHAva9X4 b7l4ttdkyQA8mhyrjPzVd6GuR3w4WMDir+yZQQGJk61x/WykDQQGUiqbeAtoyZgN rwMr/9NpIXtxbC4mknZ5IFZMn/nOUVzfLscIeGMB3m9UvfnvFmqjLXnjNOkuaDmi V0U1+rXA1/ciIyGrjIw36ChtXCRKHenG+oPWBtcN1PYnQ7ypJoTN+RpEyOLlhdpz 1rkdJdNkXqztDqcgWdkNBFe6QS13rswgx++bnyrrMNJKeFJSDPxUspANE0lnIjzR Kcw9WSe2KwnKh3YgIalengej6msWNwXUXAIE1jCwqrrS0wH1YgmQZjMYoZU8Q8KO JB209+lbeV5PX+Q8MHqR5XjYPXLRzFHrrOg17iHHwJx8t4clsl33At9e0bQlQnWg lk+wdbm3VXwMdp88/MT5wKEJHWzVq56pi/xv/4+fNRsofpNA4vi7fhZMu0bDavo9 2Rz/eKhR36l5t7t0Wx/DxiLEDy9CWhBzzWHms66ZGQ9CkL3eDqnI2slXNme6WIta usdo+2VMcoCLvgFqFeWxEWZqQ4S8ODCKnMDUsi49wHMY1zXeKWY= =vfdu -----END PGP SIGNATURE----- _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
