Shorewall users - Jul 2002 - Problem with Proxy ARP?

Hello,
I have installed redhat 7.2 kernel 2.4.9-31 , shorewall 1.3.5a. The machine 
has two NIC''s eth0 has public IP address and eth1 has 10.0.0.1.

I am trying to use proxy ARP to firewall a number of public servers in a 
DMZ, I have setup the firewall as per the documentation but I cannot connect 
to the Internet from the DMZ machines.

When pinging an external IP from a DMZ machine, tcpdump shows the packet 
entering eth1, leaving eth0 then a reply entering eth0 with the destination 
address set to the DMZ machine address. The problem is that the packet never 
leaves eth1 to get to the DMZ machine.

I have checked the firewall logs and there is no record of any packets being 
rejected or dropped, even though all the log level is set to info. The 
routing table also apears to be correct with the DMZ machine having a table 
entry for eth1.

Can anyone please shed some light on what may be the cause of my problems?

Regards,
Shane


_________________________________________________________________
MSN Photos is the easiest way to share and print your photos: 
http://photos.msn.com/support/worldwide.aspx

On Mon, 29 Jul 2002, Shane Ayerst wrote:
> 
> Hello,
> I have installed redhat 7.2 kernel 2.4.9-31 , shorewall 1.3.5a. The machine
> has two NIC''s eth0 has public IP address and eth1 has 10.0.0.1.
> 
> I am trying to use proxy ARP to firewall a number of public servers in a 
> DMZ, I have setup the firewall as per the documentation but I cannot
connect
> to the Internet from the DMZ machines.
> 
> When pinging an external IP from a DMZ machine, tcpdump shows the packet 
> entering eth1, leaving eth0 then a reply entering eth0 with the destination
> address set to the DMZ machine address. The problem is that the packet
never
> leaves eth1 to get to the DMZ machine.
> 
What do you have in the "HAVE ROUTE" column in
/etc/shorewall/proxyarp?

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net