Re: [Shorewall-users] Problem FORWARD VPN IPSEC

[Tom E. <te...@sh...>]

On 12/1/10 10:19 AM, Orlandinei Vujanski wrote:
> Not thinking about ipsec, but only in error. How can I resolve this
> error FORWARD local network to the Internet?

See shorewall FAQ 17. When traffic is dropped in the FORWARD, INPUT or
OUTPUT chain, it means that either the source IP or the destination IP
is not in any defined zone (see the output of 'shorewall show zones').
Note that this can be a result of an IPSEC tunnel being configured on
the Shorewall box and the forwarded traffic having gone through the tunnel!

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________