I have been working with a Centos server for a while now. I have set 3 subnetworks in my LAN through alias networks (etho:o, eth0:1, etc). I have a sharer printer in one of those networks, and I would like all the other networks to be able to print to that printer, but appart from that those subnets should be completely isolated among them. I use shorewall as the firewall manager, but I cant seem to manage the rule that will allow me to do that. I have read tons of materials on shorewall and iptables, but I cant manage to get this working. Would anyone help me on this?
2
-
I have managed to do this, but by addking an iptables rule: /sbin/iptables -t nat -A POSTROUTING -s 192.168.1.2 -d 192.168.0.6 -j MASQUERADE, but it isnt coming from shorewall.– rodrigocaicedoApr 8, 2013 at 4:12
-
Must clarify that my eth0 is lan, and if I add the -o eth0 parameter to the rule above, it wont work– rodrigocaicedoApr 8, 2013 at 4:14
Add a comment
|
1 Answer
http://www.shorewall.net/Shorewall_and_Aliased_Interfaces.html has some good info about the scenario you're facing, so definitely have a read of that.
I can't see why you'd want to use masquerade for something simple like getting your networks to to each other for printing purposes. If you post your dump somewhere visible (preferably immediately after you've restarted shorewall and then attempted a print job) we might be able to understand your issue better.
