Help: internet access and mac problem

muiz
Fri, 17 Jul 2009 14:38:54 -0000

Daer all,
  I''m using Shorewall-3.2.8, and it works fine before, but now i face a
pboblem:
     Some ip client IP can access internet, but some cannot!  the following is
masq file:
---------------------------------------------------
#INTERFACE              SUBNET          ADDRESS         PROTO   PORT(S) IPSEC
eth1                    192.168.1.0/27
eth1                    192.168.1.67
eth1                    192.168.1.72
eth1                    192.168.1.75
eth1                    192.168.1.76
eth1                    192.168.1.78
eth1                    192.168.1.84
eth1                    192.168.1.139
eth1                    192.168.1.140
eth1                    192.168.1.153
eth1                    192.168.1.160
eth1                    192.168.1.161
eth1                    192.168.1.188
eth1                    192.168.1.253
eth1                    192.168.1.69    -               tcp     25,110
eth1                    192.168.1.70    -               tcp     25,110
eth1                    192.168.1.71    -               tcp     25,110
eth1                    192.168.1.81    -               tcp     25,110
eth1                    192.168.1.83    -               tcp     25,110
eth1                    192.168.1.86    -               tcp     25,110
eth1                    192.168.1.87    -               tcp     25,110
eth1                    192.168.1.94    -               tcp     25,110
eth1                    192.168.1.90    -               tcp     25,110
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE

The address 192.168.1.140 can access internet before, but now it cannot! Why?
Another question:
   I want to use MAC address to instead of IP address, it''s easy to do
this?

----------------------------------------------------------------------------------
I tried this:
modified masq file as:
#INTERFACE              SUBNET          ADDRESS         PROTO   PORT(S) IPSEC
eth1                    192.168.1.0/27
eth1                    192.168.1.139
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE
and then update the client computer''s ip to 192.168.1.139. and it can
access internet!

Then change masq to :
#INTERFACE              SUBNET          ADDRESS         PROTO   PORT(S) IPSEC
eth1                    192.168.1.0/27
eth1                    192.168.1.140
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE
then restart the shorewall,
and also update the client computer''s ip to 192.168.1.140, but it can
NOT access internet!

Why?


Thanks very much, guys!

(shorewall dump is attached)



200万种商品,最低价格,疯狂诱惑你