Re: [Shorewall-users] trouble with shorewall on Mandriva 2006 (2nd)

[Gary E. T. <te...@qu...>]

Thanks for the tip.. Don't know where I got that from...

But, I did add:

DNAT net loc:192.168.1.2 tcp 21
DNAT net loc:192.168.1.2 tcp 80

to the /etc/shorewall/rules

I get no errors when I restart shorewall, this is good...

I see this in the output of shorewall check:

Validating rules file...
   Rule "DNAT net loc:192.168.1.2 tcp 21    " checked.
   Rule "DNAT net loc:192.168.1.2 tcp 80    " checked.
Validating Actions...
...
Masqueraded Networks and Hosts:
   To 0.0.0.0/0 (all) from 192.168.1.0/255.255.255.0 through eth0
   To 0.0.0.0/0 (all) from 192.168.0.0/255.255.255.0 through eth0
Validating /etc/shorewall/tcdevices...

Looks good!!!

However, nothing gets past the firewall and to the host 192.168.1.2

And I don't see any mention of it in the logs. Almost as if there isn't a 
rule.

Any ideas?

also, why is it when I add:

loc    eth1:192.168.1.0/24

to /etc/shorewall/hosts I get this error message:

Error: Invalid zone definition for zone loc

Thanks again for your help!!

----- Original Message ----- 
From: "Tom Eastep" <te...@sh...>
To: <sho...@li...>
Cc: "Gary E. Terry" <te...@qu...>
Sent: Thursday, December 08, 2005 3:17 PM
Subject: Re: [Shorewall-users] trouble with shorewall on Mandriva 2006 (2nd)