Title
h
hundreds-needle-744
11/08/2022, 6:12 PMi have an issue with relaying. I have set up mesh, and the nodes can talk to each other. One node is within another network, and I set it to function as a relay. for the range 192.168.3.0/24
The result is that I can ping hosts in the network from all the nodes on the mesh, but cannot do anything else. It is as if the relay only relays ICMP, but not TCP what might I have overlooked?
b
bored-island-21407
11/08/2022, 6:21 PMRelay or egress gateway?
an egress gateway forwards (and NATs) all traffic
h
hundreds-needle-744
11/08/2022, 6:42 PMEgress.
Found out that the issue is the firewall. When I do systemctl stop firewalld everything works as expected.
So either netclient does not correctly configure the firewall, or I need to do something extra that is not well documented.
Better would be for netclient to just do the right thing of course...
(The relay runs fedora btw...)
Sorry, egress...
b
bored-island-21407
11/08/2022, 6:58 PMNetclient only sets up forwarding and NAT. Any other firewall settings must be existing.
h
hundreds-needle-744
11/08/2022, 8:37 PMCan the other fireall settings that must be existing be documented somewhere?
b
bored-island-21407
11/08/2022, 8:41 PMyou would have to check what settings are applied at startup.
since your are using firewalld I suggest looking at
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sec-viewing_current_status_and_settings_of_firewalld
h
hundreds-needle-744
11/08/2022, 9:35 PMI know that. I can check what the settings are. But what are they supposed to be?