Hi,

I've got a network of two MS Win computers sitting behind a Leaf Bering
firewall running on a p133.

The Bering box shares my internet connection (previously Cable, currently
serial modem, hopefully soon ADSL) to the other two computers. This it does
flawlessly.

My problem is that I'm too cheap to buy a hub to connect the eth1 of the
Bering box to the other two computers, so I've installed an extra ethernet
card in said firewall, and hooked up two crossover cables.

I've uncommented both the PPP and Bridge sections of Network
conf->Interfaces.

I've configured Shorewall->IFaces to be
#ZONE    INTERFACE      BROADCAST       OPTIONS
net     ppp0            -
loc     br0             detect          routestopped
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

and lastly I've configured Shorewall->masq to be
#INTERFACE              SUBNET          ADDRESS
ppp0                    br0
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE

oh and I fixed the bug in etc/network/if-pre-up.d/bridge

So basically both machines can see the firewall, the firewall can see both
machines. both machines can see the internet, but neither machine can see
the other. When I ping from one machine to the other I get

Reply from 192.168.1.254: Destination port unreachable.

So what gives?

p.s.

The bridge seems to have learned the macs ok

# brctl showmacs br0
port no mac addr                is local?       ageing timer
  2     00:02:e3:0a:c0:8a       no                 1.70
  1     00:50:da:38:1e:b3       no                 2.70
  2     00:c0:df:e3:df:e7       yes                0.00
  1     00:c0:df:e3:ec:9b       yes                0.00


Antony Briggs



-------------------------------------------------------
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to