Re: Shorewall 4.06 + DNAT + Problem with internalrouting

Gianni Socionovo
2008-08-05T14:49:18Z

Sorry you were right, it was a routing problem, when I restarted the
machine one static route to join one of the subnets didn''t grow up. Now
I fixed the problem and DNAT work fine.

thank you for the suggests.
_________________________________________________
*/Gianni Socionovo/*
/E-Business Manager/
MEP S.p.A.
Via Papa Giovanni XXIII, 49
61045 Pergola (PU)
ITALY
/email: giannisocionovo@mepsaws.it <mailto:giannisocionovo@mepsaws.it>/
/Web Page: http://www.mepsaws.com/
Tel. +39 0721 737262
Fax. +39 0721 734533
------------------------------------------------------------------------

Le informazioni contenute nella presente comunicazione e i relativi
allegati possono essere riservate e sono, comunque, destinate
esclusivamente alle persone o alla Società sopraindicate. La diffusione,
distribuzione e/o copiatura del documento trasmesso da parte di
qualsiasi soggetto diverso dal destinatario è proibita, sia ai sensi
dell''art. 616 c.p. , che ai sensi del D.Lgs. n. 196/2003. Se avete
ricevuto questo messaggio per errore, vi preghiamo di distruggerlo e di
informare il mittente.

The information in this e-mail is confidential and may also be legally
privileged. It is intended for the addressee only. Unauthorized
recipients are required to maintain confidentiality. If you have
received this e-mail in error please notify us immediately, destroy any
copies. Any use, dissemination, forwarding, printing or copying of this
e-mail is prohibited in accordance with art. 616 of the Penal Code and
Legislative Decree N° 196 of 2003.


Tom Eastep ha scritto:
> Gianni Socionovo wrote:
>
>> Hello Tom, obviously I obfuscated for the public mailing list the
>> real IP
>> nu
>>  mbers of Shorewall configuration.
>
> If it is not a routing problem then you have mistyped the IP address
> of the server in your DNAT rules. You are forwarding the traffic to an
> address that has no route out of eth1. The dump that you sent me
> privately confirms that.
>
> Type ''ip route ls'' and see for yourself.
>
> -Tom