[Shorewall-users] shorewall-5.1.4.4 won't masquerade

[Grant]

My masquerade config is simple exactly like Example 1 here:

http://shorewall.org/manpages/shorewall-masq.html

It has worked for a very long time and works on 5.0.15.6 but not on
5.1.4.4 or 5.1.5. Any ideas?

- Grant

[Simon Matter]

Post by Grant
http://shorewall.org/manpages/shorewall-masq.html
It has worked for a very long time and works on 5.0.15.6 but not on
5.1.4.4 or 5.1.5. Any ideas?

Hi,

I think you have to update your config because it now uses the snat file
instead of masq.

Regards,
Simon

[Grant]

Post by Simon Matter

Post by Grant
http://shorewall.org/manpages/shorewall-masq.html
It has worked for a very long time and works on 5.0.15.6 but not on
5.1.4.4 or 5.1.5. Any ideas?

Hi,
I think you have to update your config because it now uses the snat file
instead of masq.

I was sure this would do it but it isn't masquerading after rebooting
the router. I used Example 1 here:

http://shorewall.net/manpages/shorewall-snat.html

- Grant

[Tom Eastep]

Post by Grant
http://shorewall.org/manpages/shorewall-masq.html
It has worked for a very long time and works on 5.0.15.6 but not on
5.1.4.4 or 5.1.5. Any ideas?

If you

shorewall update

does it then work?

-Tom

[Grant]

Post by Tom Eastep

Post by Grant
http://shorewall.org/manpages/shorewall-masq.html
It has worked for a very long time and works on 5.0.15.6 but not on
5.1.4.4 or 5.1.5. Any ideas?

If you
shorewall update
does it then work?

Can I see the changes it wants to make without writing them?

- Grant

[Tom Eastep]

Post by Grant

Post by Tom Eastep

Post by Grant
http://shorewall.org/manpages/shorewall-masq.html
It has worked for a very long time and works on 5.0.15.6 but not on
5.1.4.4 or 5.1.5. Any ideas?

If you
shorewall update
does it then work?

Can I see the changes it wants to make without writing them?

No -- but each file that is changed has the original saved in a .bak file.

-Tom

[Grant]

Post by Tom Eastep

Post by Grant

Post by Tom Eastep

Post by Grant
http://shorewall.org/manpages/shorewall-masq.html
It has worked for a very long time and works on 5.0.15.6 but not on
5.1.4.4 or 5.1.5. Any ideas?

If you
shorewall update
does it then work?

Can I see the changes it wants to make without writing them?

No -- but each file that is changed has the original saved in a .bak file.

I just ran shorewall update and restarted shorewall but masquerade
still doesn't work. Could kernel requirements have changed?

- Grant

[Tom Eastep]

Post by Grant

Post by Tom Eastep

Post by Grant

Post by Tom Eastep

Post by Grant
http://shorewall.org/manpages/shorewall-masq.html
It has worked for a very long time and works on 5.0.15.6 but not on
5.1.4.4 or 5.1.5. Any ideas?

If you
shorewall update
does it then work?

Can I see the changes it wants to make without writing them?

No -- but each file that is changed has the original saved in a .bak file.

I just ran shorewall update and restarted shorewall but masquerade
still doesn't work. Could kernel requirements have changed?

I doubt it -- please forward the output of 'shorewall dump' and I'll
take a look.

Thanks,
-Tom

[Tom Eastep]

Hi Tom, I'm sending this email to you directly. I greatly appreciate
you taking a look at my log but please don't post any of its private
info to the list.

You need to set IP_FORWARDING=Yes in shorewall.conf.

-Tom

[Grant]

Post by Tom Eastep

Hi Tom, I'm sending this email to you directly. I greatly appreciate
you taking a look at my log but please don't post any of its private
info to the list.

You need to set IP_FORWARDING=Yes in shorewall.conf.

Fixed! Thanks and sorry!

- Grant