RH 7.2 + Shorewall

[Verwijderd]

Na aanleiding van:

[topic=508666/1/500]
en
http://gathering.tweakers.net/forum/list_message/13880626#13880626

ben ik aan het kijken geweest op Shorewall

Nadat ik, zoals vermeld in op pagina's van Shorewall de interfaces, zones, rules en masq files heb aangepast aan mijn setup kan ik niet pingen vanuit mijn client naar het internet.

[b]Set-up:[/b]

eth0 IP: 10.0.0.150 verbonden met ADSL Modem (IP: 10.0.0.138)
eth1 IP: 192.168.1.1 interne Lan (192.168.1.* scope)

interfaces

code:

#ZONE  INTERFACE BROADCAST OPTIONS
net eth0 detect noping
loc eth1 detect routestopped
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

zones

code:

#ZONE DISPLAY  COMMENTS
net Net  Internet
loc Local  Local networks
dmz DMZ  Demilitarized zone
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

masq

code:

#INTERFACE     SUBNET  ADDRESS
eth0   192.168.0.0/24
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE

rules

code:

#ACTION  SOURCE  DEST    PROTO DEST    SOURCE    ORIGINAL
#                      PORT    PORT(S)    DEST
ACCEPT loc net icmp echo-request
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

[igmar]

Na aanleiding van:

[b]Set-up:[/b]

eth0 IP: 10.0.0.150 verbonden met ADSL Modem (IP: 10.0.0.138)
eth1 IP: 192.168.1.1 interne Lan (192.168.1.* scope)

interfaces

code:

#ZONE  INTERFACE BROADCAST OPTIONS
net eth0 detect noping
loc eth1 detect routestopped
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

zones

code:

#ZONE DISPLAY  COMMENTS
net Net  Internet
loc Local  Local networks
dmz DMZ  Demilitarized zone
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

masq

code:

#INTERFACE     SUBNET  ADDRESS
eth0   192.168.0.0/24
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE

rules

code:

#ACTION  SOURCE  DEST    PROTO DEST    SOURCE    ORIGINAL
#                      PORT    PORT(S)    DEST
ACCEPT loc net icmp echo-request
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

Je connectie gaat over ppp0, niet over eth0.

[Verwijderd]

Als ik kijk in de example die ook in de interfaces files staan:

code:

#   Example 1:  Suppose you have eth0 connected to a DSL modem and
#           eth1 connected to your local network and that your
#           local subnet is 192.168.1.0/24. The interface gets
#           it's IP address via DHCP from subnet
#           206.191.149.192/27 and you want pings from the internet
#           to be ignored. You interface a DMZ with subnet
#           192.168.2.0/24 using eth2. You want to be able to
#           access the firewall from the local network when the
#           firewall is stopped.
#
#           Your entries for this setup would look like:
#
#           net eth0    206.191.149.223 noping,dhcp
#           local   eth1    192.168.1.255   routestopped
#           dmz eth2    192.168.2.255

Dan is dat volgens mij niet zo.

[Verwijderd]

_schopje
Iemand een idee?