From 6f1bcedcfd3d48947b6f1a6b880cc1ac374649ee Mon Sep 17 00:00:00 2001 From: teastep Date: Thu, 18 May 2006 16:07:10 +0000 Subject: [PATCH] Add additional DNAT debugging advice to the FAQ git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3921 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- docs/FAQ.xml | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/docs/FAQ.xml b/docs/FAQ.xml index 0d1f8c905..88809ead7 100644 --- a/docs/FAQ.xml +++ b/docs/FAQ.xml @@ -17,7 +17,7 @@ - 2006-03-14 + 2006-05-18 2001-2006 @@ -238,6 +238,17 @@ DNAT net loc:<local IP address>[:< + + + If the packet count is non-zero, check your log to see if + the connection is being dropped or rejected. If it is, then you + may have a zone definition problem such that the server is in a + different zone than what is specified in the DEST column. At a + root promt, type "shorewall show zones" then be + sure that you have specified in the DEST column the first zone in + the list that matches the OUT=<dev> and the DEST= + <ip>from the REJECT/DROP log message. +