Scott Ecker wrote:

> >From an internal machine I can ping the internal and external interface on the 
>firewall, but nothing beyond that.
>
> I noticed that my syslog is filling up with tons of these:
>
> Nov 18 12:14:33 mail kernel: Packet log: \
>     output DENY eth0 PROTO=1 10.10.5.2:8 \
>     216.231.41.22:0 L=60 S=0x00 I=35342 F=0x0000 T=127 (#6)

> You can check out a shortened copy of my network.conf here: 
>(http://www.troutpocket.org/dachstein.txt).  I'm not using DHCP or DHCLIENT.  I am 
>using a private IP on the external interface because I'm setting it up behind another 
>router just for testing purposes.  Let me know what other info would be helpfull.
>

Dachstein like the Eiger variants before it denies private addresses by default on the 
external interface.  Look in /etc/ipfilter.conf in a stop_martians() for the rules 
that deny the 10. range of private addresses and comment it out.



_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to