Robert Spangler wrote:
> On Monday 13 June 2011 14:02, the following was written:
>
>> We just went to replace the bridge/firewall services one one server
>> with the same on another. It's pretty simple, and I literally cloned (w/
>> rsync) a third server that does this onto the one that will be the new
>> one.Then copied the /etc/sysconfig/iptables from the one being
>> replaced, and brought it up this morning.
>>
>> Nope. We had to put everything back the way it was.
>>
>> The new one sees the two or three servers behind the firewall, and we
>> can ping them, from the new box. On one, we see IPP broadcasts; in fact,
>> we see lots of broadcast packets using tcpdump. From outside, though,
>> you can't see the servers. Trying to ping them, they see nothing. It
>> seems to be the case that tcp and icmp packets are blocked, and we
>> can't figure out why.
>
> Is the firewall IP or port based or a combo of both?
> Is the firewall setup on the bridge interface or on each individual server
> interface i.e., eth0, eth1 etc..
Not sure how to answer that. I'd say it's on the external interface.
>
> What does ifconfig show you? Are all the interfaces started? Do the DHCP
> interfaces receive a DHCP address?
Yep. And route shows *only* br3, and when I restart the network br3 brings
up eth0 and eth1.
mark