shorewall problem

sanjibgupta · 11-09-2005, 03:55 AM

i have installed shorewall program on my redhat enterprise linux. it has 2 cards eth0 and eth1 both live ip. Two more single machine neworks are added to eth1 which in turns masquareds some pc . I am able to ping the machines of eth1 from added network pc but unable to ping from the machien which are having local ip. But the local ip can go to the internet and ping eth0 and outside the eth1 network
Please help me to solve this problem

sanjibgupta

Jerre Cope · 11-09-2005, 10:38 PM

check your policy and your rules file to be sure you have the ports open you want. These files are very well commented. You may be missing a line like:

Code:

#       Allow Ping To And From Firewall
#
ACCEPT          loc             fw              icmp    8
ACCEPT          fw              loc             icmp    8

You don't particularly want folks pinging your firewall, even from the inside.

Don't neglect to reference the shorewall website. The documentation and diagrams are first-class!

manchox · 12-02-2006, 06:24 PM

if you copied your configuration would he/she know better than this happening?