Re: shorewall and wireguard - handshake but no ping

Erich Titl <[email protected]>
Newsgroups gmane.comp.security.shorewall
Message-ID <[email protected]>
Hi NIcola

Am 14.04.2022 um 13:01 schrieb Erich Titl:
> Hi Nicola
> 
> Am 14.04.2022 um 12:56 schrieb Nicola Ferrari (#554252):
>> On 14/04/2022 12:50, Erich Titl wrote:
>>> No problem whatsoever, I guess you did not specify a wireguard zone 
>>> and the corresponding rule(s).
>>
>> Many thanks Erich for your response!
>>
>> I can confirm you I defined a "vpn1" zone as ipv4 in shorewall zones 
>> and the "wg0" interface in interfaces.
>>
>> In policy I have
>> vpn1    all
>> all    vpn1
>>
>> Which should, afaik, allow all traffic from/to wg0
>>
>> Am I missing something else maybe?

What about the tunnels file ?

cheers

ET
OpenPGP_0x0889F461A4BDB9DA.asc (application/pgp-keys, 6.2 KB)
-----BEGIN PGP PUBLIC KEY BLOCK-----

xsFNBFtYv2ABEACUxbyy9SaGBHUh+1pv5sBZYgYOjKWS4rGkvnPwZwIgwPkkLWRO
w6UzO06LxeZo1XhFys2PVY49MtM045v1bsy6cCEetCdyzfmhUopkT2D1nAnUw2An
5rq4O7Puep85bykEhwbzOTjsGaN/kvihRqGVOYJJlu3Ykm5TbKYRLvOmQojXMa2g
I8Q38mXAaNSvX+uSFJoIGmHeoHQXNqq6r0Qdu270PvVG7/GFNpvpc/ztL9cuPLpP
YHM7KUAdoCoWMkvURivPkeA0q6IubMW8nI0rBMoEH531kZ6pY7IltTNi7QQocBak
aTnsdcxhGI6U8t7RfJDK2aPEKJ+LpJQJ2KtS1SzhVNxb6oA7Sc6Rc16ri/piCrs9
tmZv8k9XdAVwEBz7LBysaWDFzkvQrZbrFcTop/lAW/yZ6pmy6rVe+lBbZqQkSqs5
EeHkEuPezSTwhxIamjVKSN0TZd5niqCRxP84urVSueOiBg2uEGu/dcZxyxRYtaia
KLH/0nfbAnmnHkbN3vzcIfAxagmu+x+mG9lJ8K0I6PqaYK25+mzG84B0bAAq+s4R
zlElKihqsQW1GF3ftDQjXbo3fBs6JWjYc5H9AOE4woc7bEHj6CTOOIHN2Io4u/w5
S8IFGlfSW90JTqecAgRc4OPuJv6wFAEfMqK1NjyaoTqS6Is8dfQuN1z8nwARAQAB
zTZFcmljaCBUaXRsIChsb25nZXIgZ3BnIGtleSAyMDE4KSA8ZXJpY2gudGl0bEB0
aGluay5jaD7CwXoEEwEIACQCGwMFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AFAltY
wtgCGQEACgkQCIn0YaS9udq3Ew/9GacD0hseeaJdx3HJaWbeCb9zo10Q6nEqgqYw
F3i2EWs4FlJbn8R5BTbGkwO7+33JQGQenXLL0IcKkXT9b5YyDCA3fAzE2UvE+f2w
+I7cPiZoUZhsDQKSsAisRAgRs0USiKKdy5VczJ8duSK+GzxtxwZ9A/KZpc4k0vSv
F/CoWNultLli+bUv1rqJ0Vy7ggMgkpugidZJi/6rXcKDPKPj5S0Kbnt65h9IKfEX
JNi82fNqK9KhQn6ywvU0CLX1GQLMETnFOunLwCrrh3pLKANfS9IGcWmvJ5kB3oY6
qlbzLZEYPwdk1//CvmmtfW2vk3SRjHJDGDzX4zsRlMAwhOqKhTLhOjJhf4aXjZYA
Ui3E7zcpVvWPcIKYUZQgiwtUra04WAIYuNPaYIi7/f6rKC0kQ4nfz14IQa49kDze
8sQfgbCZkbrZYUqYjMJcasklOzAp6JKfZHSwo6AemdFTlXRRggojYGnin8qHfwdu
KJm1PIUvveEJNzqYyJlbtyXXIrs4EN1Jfvy0DGEC3e3cHwQbcawMN9d5PnlSEKUi
MjlBzWZfJFHWsVd767HF9oWZQc4Wm0G6Gb8BjVfL4edBeFHpJcU2RQb4c+3i53WA
2xYyri7N556V2HLUknp71/W8pM1IraBGoXK+YXBASAROZ2ObHy43BQdZm2Y8pWr6
29Srz0/CRgQQEQgABgUCW1jG5AAKCRC31P+dBbgKFiUwAKCT94xSyHXUWozpAhI9
lIOnw9SuvgCg0j+ekZqUwT0THKY3BVHpgo2DXfPCwXcEEwEIACEFAltYv2ACGwMF
CwkIBwMFFQoJCAsFFgIDAQACHgECF4AACgkQCIn0YaS9udq3PhAAkZAbRZoWWaf/
PKcuYhFDYCY1TJULjZkaEmodNOde+cxlNFxw3eBHQDKcphNihZeKgQToIo3GJmXR
a3IvghZ5tf9qU06FSJJvlpM6jC+fqjzwLAgJZ/ZPLDE72XijueoMRoF0g6pDIY8O
1K4muwgIi3/zV7vp+9AE7GWCNCoSChu1S72ZUGjFhdW1RlwjQtBwgKfuSzFQ3TTM
JRcdVVYOhQYwTQf07PI/AqWqyybeKE0pxzHHDeNWJ7TjLc7VB661ktF/6ZR4BuLH
vhLEWJ38+c1shaRA5BEz2HR2ErqI4JWbhkTedCESQg2Xs3GGcy3hgp5VnUs5Cc3I
I01q1DlYBn9xMGeYBclHrK/7zaJlSUbum4trT82rDKevxkZ9UJgys4KMFnqIpr2T
7GfGoi0HIzbzu1UWtDizb+tYTxwVjA0kbBm4zJI0xap4tZF3LnY2mlAJ7m2+aYUx
CDdnmIpNurZ5GmsuKNvfJIqqF0auX29KbkSkiH7zvCUZjN3GRfAkVk71hxxIhQZX
ZGwu6J+XH5KRg6Pg7JLNRCDZekXQmtpEEW9lx+Q2Cug+e3EKBsit30YJa4IreyxF
aaVHl/MT1G3ZL7pt4FhrAt0LcZYQsvFiVbKlwKx60hX9gteKMZxbelOKckAYaI3T
lwEEcb+7Iw0Jdlo5a0EpDwAd3uGffLDNGkVyaWNoIFRpdGwgPG1lZ2FAdGhpbmsu
Y2g+wsF3BBMBCAAhBQJbWMJzAhsDBQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJ
EAiJ9GGkvbnacUwP/3fhj+DuqifDX8XU4bRGm8iF03gPw2/MZrDIfN80SEn4vTgH
kKMb6slkcDv8NaA7sQJBpSz0BzZSHpdgbLJbT89Jlov/Ej3M4SFxh5oPW2R6Yw1L
EHdTZXusOK0FvsnOFlyIWWLOUinfyrDZJl+Qvy9ZhtFWL30WIoj/mQC0S+udLok6
AG/MtOB6r0fZWc+BVpODb2jwERPADfapVwBEgk0MWVRljs7qtz0nS/olNvznbDjN
ekznloSZh7my53fHEdqm5tCPE7SkTHhkltk2srIY6tsOtg+q2L9cbCjhsvEbrizQ
vEWPJ+Y4UHqcTSmxs5POIWAawcihDWE6jei+WKZJc09KN+QvzzvVFQLKV3tkwprb
MBWtM9kTy6FQtfJqv8FK9pSuYTHHrMWmGr3twpLVHg+OyNvHkULbwXwjnXfAGYcp
Ytx4kq8UHEAde/lrmbtMdquCeRejrVwcCNOAYoIWKyRpnYwQnPGbdyq7l2dGqV9b
h0/+UAtjN+wJ1w4cLw3HEPRlBSm1g9s0PQQ0RKjylKxxXTx3iZmy5hiNjkZ4rOK2
0ut4KEUY9ncKH//xOt9FjNLStT/vOHcqA1Wjr12Te7CnWnBOG2dqr6yNslHCIWcd
nwlME7ecU/fRM/FC45oKOBtyRqfjDJovnAHSy0Dr4Qqnjwgxwl+E7mDghDEXwkYE
EBEIAAYFAltYxuQACgkQt9T/nQW4ChaebgCfRBatJ6iu9ie0NbbjTgk5NE8MAhsA
oPxxyjnYqPJ4RVcysUxNA1paquY2zsFNBFtYv2ABEADFB5VLpOqHPP7a0Tq3ZiW4
37ZhrWnduztWnfT3dp5ewfvkON9/3+zWw9QBRrhUvl52BgQyHk9xvCdA5BuhMlNE
dBt5vD8w5JgflWH8TVSf94MMBfW5sQwpP811weiTjaiqIaUDjD3fkmBkbgo59wq1
lX4P0tl88HRJdrVm0m6cjlV6Uiv9+u4knSda12yvoHmKrodvOfpjOGXYBmpZzH2V
LyWNx5IVlC8IedK8+SsRejWpk/uMfF0j+BNMNwQG/q3fuAyO+FWIijnpeVUEBWuI
F9sRV+5ZfX/rZGvfeG28eloQxtDKlIw5s6CznbSnujccwUbSbNc56zFNuU0siIYA
Vtjtkz8s2ujv/ga8nzeLw0UJu30PIvI+3+YU8EYsSPVqrFqhOWkgtQBoojUL1sN2
u4bHmtsJ8Yno9EW6AB5jnmq5f+aqbrA9gkvAvgLy1WcAmr3WqEupx48wWau1Jwdj
P+WQZH3Qw+J6SomhBEjZKgWvhSycNeLPEv+92+gZFFfXN5ypTJbIFZU9HmWA/B2t
DCYk5pU5j9BboMq7jJ59oZO5Yi5c3sBrGRWVeLkH+CPUlC+UsVs3Tt8ibmQWx37M
98Y3ydafmC4v4C/byZfTgAzDktnbAhUyrQXlALxd9+HQExEu+vYrRzmSogUG/Htt
v/D+TwQFwWH3IAevrMiGfQARAQABwsFfBBgBCAAJBQJbWL9gAhsMAAoJEAiJ9GGk
vbnad3AP/iAZ9DscdLhpXpTP1V77Mq7H1xh54jEwWEryFyITjL4relLrOoG6CJ31
LKbNzeJvyQEdZCHCKCOf9fM28Q/2680QDqiSksvRrhQRCQ2w1M2iTQgpR5mH0nqE
VlXWFdRc2BJrnHf/eJpeB0ENFrP2y4JSgKgmIyMPGrI8CilBzPNGfwcBKxGuy8BG
dBD0cVb+1OMmw1UA6BPl3D4dHOUEdvi8GepDzM6MLdtElc0VGDL0YtJTu96OrrXs
Ibx+0Hvao+GSaOOIZoWRKlu6s+zP9AdflcpI01qhUixJtkS8i2yK//Ccu3LTTaU9
b4fuLGYWnEZ7ihFKpFU1TEY1baLhXRTT0Laj4g2VvpUXehsze0Ggako00uBXLi4f
ItQfNR6qRiA9BDvqOrb8+oGlO59u96/FadOeUvNGhYQPIKQOh07tHQkxU9L1gWjo
YXxVvGgHtGdQghdj02ioQVUkPMynuelMc5X9zrAqAu7nWG8tKUVibpMpHu0Ya+YQ
QSIGwKNK6YjeSoUGjEWGSnFT1Bxv39gAKWh0Xo4OfEnEy/ec6e3xNYAq8ofEKDXN
0xMmtZmmTVpwd2/MHLdSaS+DByCX/5xQwDNIkmBc05kP0MLsLC7MRFJwTqg6vSlQ
ducsWPpUQe8qpy+F6rQx5wemEcFdK14PceIbI3api4EC9L7h5pEbzsFNBFtYwz4B
EADcKn5WT4vQcyqki8yVmwlBZgSUdX0WBcNbQW98Jdq27ZkgGkmuurAmOvEP31oa
zM8iUcuOdt+vJ9e64WZEBGi4OHOUj74DMaEjfQXWcAKAmez0rgrhqC6KwT9DhH37
ytQXPeegUmJxN//Rx6AIp2gRZ34UWjvTM4+bW60le4ZiQWZnGTkti0xmuCJzx99l
HYl34aUTgC2UZlrVJIpy2Nu/Gg4hI7WUvn95neH6Jha3rTdWPAJvknl8JKLTiD+x
bvc3WVfmRT0x6gPipfXfA2Pg9eDOj2u1IdnaZCYZncFzSATMRFOPeeFnJwkqtuIj
WRKRXpgcWH/0TiCjbEBEEosioSprYYiuaiY6ull//V1YnI1EA9ori9zMc0mbBodh
n08dTrbWW/WHyDwrSxr5PBW47Dn45YE7BLc5b2nrqSJwngrmLt0mZVPQ0jNaHpTc
XDvbeZfTedCD7rbuYovdTMv/+28KLU7DCtLBmLok+v/9kT+xrF0paUJSGcdG/XIc
JBFABXHP54zeDu5V6DTtY8zKNLU//SWE4+Wl3KVgXYkXPk6BvXlzm9BPSJI/WpL4
CszUMCniy+PgP5hiqPfyFi1NNoIGJwEXPal7MRyF2fPNyGcDtr9Relm1lduIx20c
ameNafOJaJQgH1awvjnwEjF2Eui1jVj2Pe7APNJDSjFw6wARAQABwsFfBBgBCAAJ
BQJbWMM+AhsMAAoJEAiJ9GGkvbnaVZQP/j15oAwf+TMndgeKv/Y+6pC6onsI96oR
oMINeKAM1BJ+sqjk3WsGinOH0wn3ULUc6CW7WiHi0VFexDntp7D5+lM9cBdGNak8
Jty2piK2T+VB+kHjoGXWJTz0X4ulVPiVoHD9RTxQLfc/etGYHOxs0YAhzwB0VbCC
PfJhpWuUyXFSGpGEviQP6XdS7WkORSJHaUr8v8uyHW7bvFj8qBAgFxftmhCBY/Q0
/6CqcbSPJDVb8YJ1m+FI1dPKI5TLpby9felqqTErwPKr076Zzzb25fRsbxF1Tr/0
ChNLaAb8n+UhI5+jqn7I4KyaC5e1ZagDo5hPzAUJ+IwG3IJbGXxNjHxEYnLjXLYB
Ka/OCdnIlmaT4Ki0PO3x8R7zd8KtfkYgHh45ZnI5ka2mEC/z0nN8EiLBZcy5wvrv
MwOm2Qb+IcA3iiLqW4fCqJcMEm8cKKGNhnOXE/eGDn267V4S1wT/aIvzy+0Jblzv
cKaRR6vqiXy5Vkgad4b+0nNHLS7cJawrwzvoLeWbTiOjfJ3Rr2rW4DpnZTAFMCDz
NnixbPTEFLlwc71l77BFGW62gMEOuUFGJfiW3zJqjCYJpQdX8YiZb8jIuHOnDqlU
S6sXz6S9hU4aMx4oweiKxiIrTFw3nS+GHAxqkcOt3B5voJXJUTGXC3+dme7tT33f
ISOparplRLDV
=tfhH
-----END PGP PUBLIC KEY BLOCK-----
OpenPGP_signature (application/pgp-signature, 840 B) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.