Shorewall users - Mar 2007 - joining two bridged DMZ with a VPN

Hi list,

I''m trying to set up a VPN beetween two DMZ that serve public adresses.
Here is my config:
I got two range of public IPs in two distinct ipv4 classes, at two
different places. I want these DMZ to be joined over a VPN, so that each
machine in DMZ A can join DMZ B without any restriction.
I set up openvpn accordingly, and i can reach :
* DMZ B & NAT B from NAT A
* DMZ A & NAT A from NAT B

But: cannot reach DMZ A from DMZ B nor DMZ B from DMZ A.

This begins to be rather complicated, and i cannot see anything within
the logs (i log ACCEPT AND REJECT)

So if somebody can give me any clue that may allow me to seek further,
would be great, THANKS


my network map:

                   NAT A                  NAT B
                      |                      |
DMZ A <--> Shor. bridge <--> Internet <--> Shor. bridge
<---> DMZ B
                      |                      |
                 OpenVPN Client      OpenVPN Server
                      +----------------------+-------RoadWarrior
                                                   OpenVPN Client


                             




-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net''s Techsay panel and you''ll get the chance
to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

On 3/29/07, Tristan DEFERT <tristan.d@alphamosa.fr>
wrote:
> But: cannot reach DMZ A from DMZ B nor DMZ B from DMZ A.
Under normal setup of DMZ, outgoing connection from the DMZ are
blocked. That''s the point of the DMZ right? How is your DMZ rule
setup?
> So if somebody can give me any clue that may allow me to seek further,
> would be great, THANKS
Your ASCII-art is screwed up. Couldn''t understand it.

Can you please provide a shorewall dump according to
www.shorewall.net/troubleshoot.htm

Prasanna.

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net''s Techsay panel and you''ll get the chance
to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV