Re: Multiple Providers and Local Network

Tom Eastep
Fri, 26 Aug 2005 00:16:35 -0000

Jonathan Gnagy wrote:
> My first question is
> this, do the SNAT and DNAT entries in the shorewall config files do
> what''s necessary elsewhere in the system to make the routing from
the
> local subnet to the Internet work?  If it does, then I must have my
> config files done wrong, but I get no errors on shorewall''s
startup.  If
> it doesn''t, can anyone point me in the right direction?

Jonathan,

The first thing you need to do is re-read
http://www.shorewall.net/support.htm and submit a proper problem report.

And while you are waiting for our response, here''s a couple of things
you need to look at:

a) The Shorewall .deb does not enable IP forwarding by default. You need
to set IP_FORWARDING=Yes in shorewall.conf. This is made clear in the
QuickStart Guides but you may have missed it.

b) I recommend that you [re-]read
http://www.shorewall.net/Shorewall_and_Routing.html to fully understand
the relationship between Shorewall configuration and routing. It will
also point the way to getting your multiple ISP connections working.

c) If you "shorewall clear", can you then SSH from the local net to
the
firewall?

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key