On Fri, 10 Jan 2014 11:46:23 +0100 Timothy Murphy gayleard@alice.it wrote:
Incidentally, I am running shorewall on this server with IP_FORWARDING=On . I'm surprised this does not turn on kernel forwarding.
When running shorewall make sure that iptables and ip6tables is set to off.
chkconfig iptables off chkconfig ip6tables off
Verify: chkconfig --list iptables chkconfig --list ip6tables
There is no need to change the forwarding settings. Shorewall will do that for you.