[Shorewall-users] About routing

[Tom Eastep]

On 12/20/2016 09:09 AM, Luis Felipe Dominguez Vega wrote:
> Shorewall 5.0.14.1 over debian testing
>

In /etc/shorewall/snat:

#ACTION SOURCE DEST ....
MASQUERADE 10.0.0.0/24 eth1
MASQUERADE 10.0.0.0/24 eth2

- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________

[Simon Hobson]

Luis Felipe Dominguez Vega <***@mtz.desoft.cu> wrote:

> Well to the routers i can access because are owns by my VPN provider, but if i do a Source Nat fix the problem?? and how to do that??

I assume you meant to write that you *can't* access them ?

Basically, unless they have been given a route to your internal network, they will not have any knowledge of it. You will need to either contact your provider and have them add a route, or as you suggest, as a level of NAT in your own router (system running shorewall).
For outbound traffic, this will be source NAT - and is configured in the "masq" configuration file. For inbound traffic, it would be DNAT entries in your "rules" config file - though these won't work without corresponding entries in the providers' routers.

[Luis Felipe Dominguez Vega]

Now i test Firewall Builder and put some basic NAT rules and works!!!!! (the communication with router in SNMP from local network) so the routers router table is working, but i want do with shorewall, not with fwbuilder.

---------------------------------------
Al tanto
Ing. Luis Felipe Domínguez Vega
Administrador de la Red de Desoft Matanzas
GNU/Linux Kernel Developer - rtlwifi kernel module

"No es grande aquel que nunca falla, es grande el que nunca se da por vencido… "

----- Original Message -----
From: "Luis Felipe Dominguez Vega" <***@mtz.desoft.cu>
To: "Shorewall Users" <shorewall-***@lists.sourceforge.net>
Sent: Tuesday, December 20, 2016 12:09:12 PM
Subject: Re: [Shorewall-users] About routing

Shorewall 5.0.14.1 over debian testing

---------------------------------------
Al tanto
Ing. Luis Felipe Domínguez Vega
Administrador de la Red de Desoft Matanzas
GNU/Linux Kernel Developer - rtlwifi kernel module

"No es grande aquel que nunca falla, es grande el que nunca se da por vencido… "

----- Original Message -----
From: "Tom Eastep" <***@shorewall.net>
To: shorewall-***@lists.sourceforge.net
Sent: Tuesday, December 20, 2016 11:55:26 AM
Subject: Re: [Shorewall-users] About routing

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 12/20/2016 08:07 AM, Luis Felipe Dominguez Vega wrote:
> Well to the routers i can access because are owns by my VPN
> provider, but if i do a Source Nat fix the problem?? and how to do
> that?? THANKS....

Which version of Shorewall are you running?

- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org
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=Nh36
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/intel
_______________________________________________
Shorewall-users mailing list
Shorewall-***@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/intel
_______________________________________________
Shorewall-users mailing list
Shorewall-***@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

[Tom Eastep]

On 12/20/2016 08:07 AM, Luis Felipe Dominguez Vega wrote:
> Well to the routers i can access because are owns by my VPN
> provider, but if i do a Source Nat fix the problem?? and how to do
> that?? THANKS....

Which version of Shorewall are you running?

- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________