Re: Shorewall 4.06 + DNAT + Problem with internalrouting

Tom Eastep
2008-08-05T13:53:06Z

Gianni Socionovo wrote:

> Hello Tom, obviously I obfuscated for the public mailing list the real IP
> nu
>  mbers of Shorewall configuration.

If it is not a routing problem then you have mistyped the IP address of the
server in your DNAT rules. You are forwarding the traffic to an address that
has no route out of eth1. The dump that you sent me privately confirms that.

Type ''ip route ls'' and see for yourself.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key