Hallo, I setup a Bridged Firewall but when I start shorewall is not yet possible access to Internet from the firewall machine. Everything else is working fine and the traffic through the bridge is OK. When I stop Shorewall the firewall machine go on internet without any problem. Thank''s ____________________ Fabio Razzolini WOW s.r.l. 0586 635607 razzolini@wow.it ____________________
Did you set STARTUP_ENABLED to YES? It is better for you to show us the configuration files of your Shorewall. On 1/13/06, Fabio Razzolini <razzolini@wow.it> wrote:> Hallo, > > I setup a Bridged Firewall but when I start shorewall is not yet possible > access to Internet from the firewall machine. > Everything else is working fine and the traffic through the bridge is OK. > When I stop Shorewall the firewall machine go on internet without any > problem. > > Thank''s > > ____________________ > > Fabio Razzolini > WOW s.r.l. > 0586 635607 > razzolini@wow.it > ____________________ > > > > >-- Regards, Wong Chee Chun Network Engineer Softmy Co. Ltd (http://www.softmy.com) ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
On Thursday 12 January 2006 08:06, Fabio Razzolini wrote:> Hallo, > > I setup a Bridged Firewall but when I start shorewall is not yet possible > access to Internet from the firewall machine. > Everything else is working fine and the traffic through the bridge is OK. > When I stop Shorewall the firewall machine go on internet without any > problem.I see two things odd about your configuration: a) You have silly fw->net ACCEPT rules (your fw->all policy is ACCEPT). b) You are masquerading out of br0 -- that''s silly for a bridge and I don''t know what the consequences might be. Your firewall rules are NOT blocking any fw->net traffic. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
Thanks for replying.
My goal is to access to Internet from the firewall machine when shorewall
(bridging) is up, but is not working.
Here configuration files
/etc/shorewall/policy
[]......
#SOURCE DEST POLICY LOGLEVEL
fw all ACCEPT
loc net ACCEPT
net all DROP info
# #
# # THE FOLLOWING POLICY MUST BE LAST
# #
all all REJECT info
#
........[]
/etc/shorewall/rules
[]....
#SECTION ESTABLISHED
#SECTION RELATED
SECTION NEW
#
ACCEPT $FW net tcp 53,80
ACCEPT $FW net udp 53
ACCEPT loc net tcp 53,80
ACCEPT net $FW tcp 22,80,25,53
ACCEPT net $FW udp 53
ACCEPT net loc tcp 80,5900
...[]
/etc/shorewall/interfaces
[]....
##################################################################
#ZONE INTERFACE BROADCAST OPTIONS
- br0 82.119.193.255
...[]
/etc/shorewall/hosts
[]....
#ZONE HOST(S) OPTIONS
net br0:eth0
loc br0:eth1
#LAST LINE -- ADD
...[]
STARTUP_ENABLED is set to yes
Thank''s
-----Messaggio originale-----
Da: shorewall-users-admin@lists.sourceforge.net
[mailto:shorewall-users-admin@lists.sourceforge.net] Per conto di Wong Chee
Chun
Inviato: giovedì 12 gennaio 2006 17.48
A: shorewall-users@lists.sourceforge.net
Oggetto: Re: [Shorewall-users] Connection problem
Did you set STARTUP_ENABLED to YES? It is better for you to show us
the configuration files of your Shorewall.
On 1/13/06, Fabio Razzolini <razzolini@wow.it>
wrote:> Hallo,
>
> I setup a Bridged Firewall but when I start shorewall is not yet possible
> access to Internet from the firewall machine.
> Everything else is working fine and the traffic through the bridge is OK.
> When I stop Shorewall the firewall machine go on internet without any
> problem.
>
> Thank''s
>
> ____________________
>
> Fabio Razzolini
> WOW s.r.l.
> 0586 635607
> razzolini@wow.it
> ____________________
>
>
>
>
>
--
Regards,
Wong Chee Chun
Network Engineer
Softmy Co. Ltd
(http://www.softmy.com)
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37&alloc_id865&op=ick
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37&alloc_id865&op=click