<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello ,<br>
<br>
We are using shorewall with Proxmox. Issue is <b>net to FW</b>
traffic not working but <b>dmz to FW</b> is working fine. Our
requirement is all traffic goes to <b>Net to FW</b> . Please
provide suggestions.<br>
<br>
<b>/etc/shorewall/zones</b><br>
fw firewall<br>
net ipv4<br>
dmz ipv4<br>
loc ipv4<br>
<b><br>
/etc/shorewall/interfaces</b><br>
#ZONE INTERFACE BROADCAST OPTIONS<br>
net bond0 detect
routeback,tcpflags,routefilter<br>
dmz venet0 detect routeback<br>
dmz vmbr1 detect routeback<br>
loc vmbr0 detect routeback<br>
<br>
<b>/etc/shorewall/policy</b><br>
#$FW $FW ACCEPT<br>
$FW net REJECT<br>
$FW dmz REJECT<br>
$FW loc ACCEPT<br>
<br>
# From DMZ Policy<br>
dmz dmz ACCEPT<br>
dmz net ACCEPT<br>
dmz $FW DROP info 1/sec:2<br>
#dmz loc REJECT info<br>
<br>
# From Net Policy<br>
net all DROP<br>
net $FW ACCEPT info 1/sec:2<br>
#net dmz ACCEPT info 8/sec:30<br>
net loc REJECT info<br>
<br>
# From Loc Policy<br>
loc loc ACCEPT<br>
loc $FW ACCEPT<br>
loc dmz REJECT info<br>
loc net ACCEPT info<br>
<br>
# THE FOLLOWING POLICY MUST BE LAST<br>
all all REJECT info<br>
<br>
<pre class="moz-signature" cols="72">--
--
Inderjit Singh
</pre>
</body>
</html>