Re: Proxyarp

Tom Eastep
Thu, 27 Sep 2007 22:59:27 -0000

>> The only thing I notice now, is that on a reboot of the firewall, the
>> rules dont seem to apply, I get ton of REJECT packets for example (in
>> the shorewall log), when I try to ping the host from the firewall.
>> However if I simply do a "shorewall restart" then everything
works
>> again. I''m working on that one..
>
> The order of operations in Shorewall is that providers are established
> before Proxy ARP routes are added. So you will always have to restart at
> least once after boot to get the proxy arp routes copied into the provider
> routing tables.
>
> That''s why I recommended adding those routes as part of bringing
up the DMZ
> interface rather than having Shorewall do it.

Please disregard the above drivel -- Proxy ARP is established before
providers (at least in Shorewall 4.0).