As you can see in the supplied traffic sample, your Docker container is trying to access the DNS server with IP 192.168.1.1, which is located in your LAN.
You have to allow this traffic in your FORWARD policy.
This is your current FORWARD policy:
You must add a new FORWARD rule before the...
You have to analyze where your DNS traffic is being sent and where is it stopped.
For it you can use network traffic analysis tools like tcpdump.
For example, you can use the next tcpdump command for see all the DNS traffic coming from your Docker container:
tcpdump -n -i docker0 port 53
Can...
We have already fixed this bug and it will be solved in the next FWCloud-API patch release that we will publish very soon.
We would like to mention you in the CHANGELOG.md file as the bug reporter for both, this one and the other one that you reported related with the FWCloud-Installer script...
Thanks for the report.
We will reproduce it in development environment, solve it and add the fix to the next FWCloud release.
Nevertheless, it is always important that you take a careful review of the imported policy in order to make sure yourself that the policy has been imported right as, in...
Hi Jeremy,
We have already fixed the bug and published the new version of FWCloud-Installer.
If you need any help with FWCloud, please don't hesitate in contacting us again.
Thank you very much for the report.
Hi,
Yes, you can configure site 2 site VPN, VPN servers, etc.
Any configuration parameter that you can use with OpenVPN can be used in FWCloud when you create your VPN servers or clients.
Hi,
Thank you! :-D
Answering your questions:
1) Yes, you can change it modifying the LISTEN_PORT environment variable in /opt/fwcloud/websrv/.env
2) Yes, it is possible too, but for this you already have the FWCloud-Websrv process.
Regards.
Hi,
This is due to the CORS_WHITELIST configuration in the FWCloud-API.
Edit the /opt/fwcloud/api/.env file, add the new URL to the CORS_WHITELIST variable and restart FWCloud-API.
Please, let me know if this solves your problem.
Ok, then the problem is in the name resolution.
Maybe you have to enable access to the DNS service in the INPUT chain of your host and coming from the Docker interface.
Can you test it ?
Look at the line 230 of your firewall policy load script:
$IPTABLES -A INPUT -i ens18 (LAN) -d 192.168.1.22 -m conntrack --ctstate NEW -j ACCEPT
You have called your network interface as ens18 (LAN), but this is a mistake, you should call it as it is really named in your firewall, that it is...
Is your FWCloud installation updated to the latest one ?
Which versión do you have (you can see it in the About button) ?
Can you paste here the fwcloud.sh script for analyze it ?
You can get it using the option for see it in the right menu button menu over your firewall.
I think that you have an error in the SNAT rule.
If you look at our FWCloud & Docker integration documentation you will see that in the `Translated source` field of the SNAT rule you have to put the IP address of your LAN interface (in your case 192.168.1.22). But in your SNAT rule such field is...
Ok, the configuration option for IPv4 forwarding is enabled. It is necessary for the containers to Internet communication.
Yes, I'm talking about the service provided by the container. For example, if your container is a MySQL its service is supplied by the TCP port 3306 (if you have not mapped...
Ok, let's go first with the service supplied by the Docker container.
How are you accessing this service?
I need to see to the Options tab of your firewall config.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.