Re: Proxyarp

Tom Eastep
Thu, 27 Sep 2007 18:42:33 -0000

J M wrote:

>
> However if I come in from the internet to the web site, I see nothing,
> and if I look in the log I see this:
>
> Shorewall:FORWARD:REJECT: IN=eth1 OUT=eth1 MAC=00  SRC=x.x.x.x
> DST=198.162.214.243 LEN=60 TOS=00 PREC=0x00 TTL=59 ID=44361 CE DF
> PROTO=TCP SPT=14259 DPT=80 SEQ=2177425409
>
> If I ping I see a similar rejection.
>
> What surprises me here, is that IN and OUT are both eth1   and thats the
> obvious reason it is being REJECTed.
>
>
> Why do I get eth1 on both IN and OUT?

Your routing is screwed up.

If you need further help, please submit a shorewall dump collected as
described at http://www.shorewall.net/support.htm#Guidelines