I've got a SuSE 7.3 system, freshly installed, with two ethernet
cards. Silly me, I thought I'd run SuSEfirewall2.
My problem is more fundamental than the firewall; I can't get packets
to flow between the interfaces without the firewall running.
On the firewall I can ping systems on my internal net, and I can ping
systems on the internet.
On internal systems I can ping both firewall interfaces, but I cannot
ping anything beyond, i.e., on the internet.
On an external system on the internet, I can ping both firewall
interfaces, but I cannot ping any internal systems.
I'm probably missing something really obvious, but I've been at this
all day and surely can't see the problem. Any help is greatly
appreciated!
My /etc/rc.config has this:
START_FW="no"
START_FW2="no"
IP_FORWARD="yes"
eth0 is external interface
eth1 is internal interface
At runtime, things look like this:
(actual netnumber changed to protect the innocent...)
fw1:~ # ip addr show
1: lo: mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
2: eth0: mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:a0:cc:d7:76:f7 brd ff:ff:ff:ff:ff:ff
inet 111.222.111.125/26 brd 111.222.111.127 scope global eth0
inet6 fe80::2a0:ccff:fed7:76f7/10 scope link
3: eth1: mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:a0:cc:d7:76:f6 brd ff:ff:ff:ff:ff:ff
inet 111.222.111.1/26 brd 111.222.111.63 scope global eth1
inet6 fe80::2a0:ccff:fed7:76f6/10 scope link
4: sit0@NONE: <NOARP> mtu 1480 qdisc noop
link/sit 0.0.0.0 brd 0.0.0.0
fw1:~ # ip route show
111.222.111.64/26 dev eth0 proto kernel scope link src 111.222.111.125
111.222.111.0/26 dev eth1 proto kernel scope link src 111.222.111.1
default via 111.222.111.125 dev eth0 scope link
fw1:~ # cat /proc/sys/net/ipv4/ip_forward
1
What's wrong with this picture?
/john
--
inet: john@wilkes.com |
addr: 321 High School Rd. NE #367 | "The man who views the world at 50 the
city: Bainbridge Island, Washington | same as he did at 20 has wasted 30
code: 98110-1697 | years of his life."
icbm: 47 37 48 N / 122 29 52 W | - Muhammad Ali
