[PVE-User] Bond0 device for Net interface

Lars Wilke lw at lwilke.de
Sun Oct 9 22:27:54 CEST 2011


* Inderjit Singh wrote:
>    We are using shorewall with Proxmox. Issue is net to FW traffic not
>    working but dmz to FW is working fine. Our requirement is all traffic goes
>    to Net to FW . Please provide suggestions.

it would help to know your NIC configuration, too.

>    /etc/shorewall/policy
>    # From Net Policy
>    net     all     DROP

And this might be your problem, look at the output of iptables -L -n -v
to see if the DROP rules are listed above any other rules for net2fw traffic.

>    net     $FW      ACCEPT            info    1/sec:2

this is very low.

hth
   --lars



More information about the pve-user mailing list