Take the 2-minute tour ×  I have a problem with my shorewall
policy. There are 4 zones configured in shorewall but the policy
vpn2vpn:accept doesn't work. I want to establish connections
between PPTP clients. They are dropped when using the current
policy.  However if I change the all2all policy at the end of
the policy file to all2all:accept it works. I have no idea why
as there are no zones missing in the policy file.  You can find
the syslog entry which is generated by the last policy (all all
DROP info) below.  Does someone knows what is missing in the
policy file?  shorewall policy:  fw      fw      ACCEPT fw
net     ACCEPT fw      dmz     DROP fw      vpn     ACCEPT  dmz
dmz     ACCEPT dmz     net     ACCEPT dmz     fw      ACCEPT dmz
vpn     ACCEPT  net     fw      DROP net     dmz     DROP net
vpn     DROP  vpn     fw      ACCEPT vpn     dmz     ACCEPT vpn
vpn     ACCEPT vpn     net     ACCEPT  all     all     DROP info
shorewall zones:  fw      firewall net     ipv4 dmz     ipv4