Re: [Vserver] Shorewall problems

From: Laurent Vallar - aka Val <val_at_zbla.net>
Date: Mon 20 Nov 2006 - 19:29:50 GMT
Message-ID: <20061120192950.GA8324@zbla.net>

On Mon,Nov,20,2006, Dusan Vejnovic wrote:
> [...]
> > Why do you add UDP rules for WWW (80/443), WWW proxy (3128) and SSH
> > (22) ?
> > All of these protocols are TCP ones...
>
> I add udp rules because they are defined in /etc/service file.
>

Hum, well... Simply remove the spotted UDP rules, believe me :)

> > [...]
> > Please add ":info" to web vserver related DNAT rules and verify
> > logs (using grep and filtering on vserver IP) there is no DROP according
> > to your policy file (net -> dmz).
> >
> > Try to replace :
> >
> > DNAT net dmz:192.168.0.35 tcp 80
> > DNAT net dmz:192.168.0.35 tcp 443
> >
> > With :
> >
> > DNAT:info net dmz:192.168.0.35 tcp 80 - 89.x.x.x
> > DNAT:info net dmz:192.168.0.35 tcp 443 - 89.x.x.x
> >

Did you tried the two ? Is there any log in (before and after) ?

Regards,
Val.

-- 
 .''`.
: :' : Laurent Vallar - aka Val - Network & System Staff Engineer
`. `'  GPG Key: 1024D/C4F38417 - http://www.zbla.net
  `-
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Mon Nov 20 19:50:39 2006
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Mon 20 Nov 2006 - 19:50:44 GMT by hypermail 2.1.8