Your problem is in the routing table on the firewall box. See below for 
details.

At 11:52 AM 9/17/02 -0600, Warren Post wrote:
>I'm trying to set up Dachstein to sit between our LAN and our ISP. I can 
>ping the loopback and everything in the LAN from the firewall box, but I 
>cannot ping the external gateway nor anything else outside the LAN. The 
>LEAF ping FAQ suggest that my firewalling rules need to be tweaked, but 
>being new to firewalling and to Linux I need guidance. The details:
[...]
>ip route show reports:
>
>65.167.30.96/27 dev eth0  proto kernel  scope link  src 65.167.30.126
>192.168.0.0/24 dev eth1  proto kernel  scope link  src 192.168.0.3
>
>ping 65.167.30.174 from the firewall reports:
>
>ping: sendto: Network is unreachable

Believe what sendto is telling you: that no network containing IP address 
65.167.30.174 is reachable. The host has no default route, you will note, 
and network 65.167.30.96/27 only covers the address range .96 to .127 . QED.

The easy quick fix is to change the netmask on the eth0 IP address from /27 
to /24. If that works -- by which I mean that the default route is now 
installed and you can ping both the gateway and beyond it -- then all that 
is left is for you to discuss with your ISP what address/netmask you should 
be using (something no one here can guess; all we can do is note that some 
combinations, such as the one you are trying to use, will not work).

If this does not fix it, then send an updated trouble report. (Once I saw 
the routing-table problem, I did not examine the firewall ruleset you 
posted, so I don't know if it too has problems.)



--
-------------------------------------------"Never tell me the odds!"--------
Ray Olszewski                                   -- Han Solo
Palo Alto, California, USA                        [EMAIL PROTECTED]
-------------------------------------------------------------------------------



-------------------------------------------------------
This SF.NET email is sponsored by: AMD - Your access to the experts
on Hammer Technology! Open Source & Linux Developers, register now
for the AMD Developer Symposium. Code: EX8664
http://www.developwithamd.com/developerlab
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to