[ILUG] Shorewall gurus: Connection redirect problem

[Kenn Humborg]

> Have you set "net.ipv4.ip_forward=1" in /etc/sysctl.conf?

Yup.  DNAT from outside to inside (e.g. port 80 on firewall
goes to internal web server) and SNAT from inside to
outside (internal machine opens TCP connection to
external host) are working fine.

It's just this external-to-external bit that's not working.

Later,
Kenn