[Shorewall-users] Access through gateway

Klaus Pieper
2002-10-08T19:19:26Z

Hi,

I have a host that is connected with a pointopoint interface through a
gateway on eth1:

fw/192.168.1.1 <-- eth1:192.168.1.0/25 -->  gw/192.168.1.2
/192.168.1.130 < -- ptp --> lx390/192.168.1.129

lx390 is defined on fw with route add -host 192.168.1.129 gw 192.168.1.2.
All hosts on eth1 use .1 as default gw.

lx390 can connect to hosts on the internet and the eth1 network, but
connections from eth1 (except the gateway .2) are blocked.

Oct  8 21:05:00 harpo kernel: Shorewall:FORWARD:REJECT:IN=eth1 OUT=eth1
SRC=192.168.1.3 DST=192.168.1.129 LEN=48 TOS=0x00 PREC=0x00 TTL=127
ID=19200 DF PROTO=TCP SPT=1031 DPT=139 WINDOW=8192 RES=0x00 SYN URGP=0
Oct  8 21:06:30 harpo kernel: Shorewall:FORWARD:REJECT:IN=eth1 OUT=eth1
SRC=192.168.1.105 DST=192.168.1.129 LEN=60 TOS=0x10 PREC=0x00 TTL=63
ID=37539 DF PROTO=TCP SPT=32768 DPT=23 WINDOW=5840 RES=0x00 CWR ECE SYN
URGP=0

How can I define a FORWARD rule 192.168.1.0/25 -> 192.168.1.129?

Thanks in advance
Klaus Pieper


/etc/shorewall/hosts
loc     eth1:192.168.1.0/25
loc     eth1:192.168.1.129

/etc/shorewall/masq
ppp0    192.168.1.0/25
ppp0    192.168.1.129
ippp0   eth1