First of all, thank all of you very much indeed. I am sorry I still have not given very clear information to you.
Now the problem seems more interesting. The eth0 (the external port) is 192.168.1.113, which is given by ISP's DHCP server. The eth1 (the internal port) is 192.168.2.1, which is assigned by myself. I have re-setupped a pc in the LAN. Its ip is 192.168.2.100. Its gateway now is 192.168.2.1, which used to be 192.168.1.254. The subnet mask is 255.255.255.0 The DNS IP has been also setupped to be the ISP's DNS server. I have flushed all rules and restarted the route. The output of ipchains -nvL is Chain input (policy ACCEPT: 0 packets, 0 bytes): Chain forward (policy ACCEPT: 0 packets, 0 bytes): Chain output (policy ACCEPT: 0 packets, 0 bytes): Route itself works fine. It can ping the internet, itself(eth0 and eth1) and the pc in the LAN. I could also ping from the pc in the LAN to the route( both 2.1 and 1.113). But got "Request timed out." error when I tried to ping the 1.254 and the ISP's DNS server. the new output of ipchains -nvL is Chain input (policy ACCEPT: 294 packets, 40399 bytes): Chain forward (policy ACCEPT: 47 packets, 3965 bytes): Chain output (policy ACCEPT: 81 packets, 6533 bytes): I suppose that I may not be able to add a new private subnet under the private 192.168.1.xxx. However, I do need to separate the whole 1.xxx subnet into two or more subnet. May be I should try to use 192.168.1.192 to be my new subnet mask to separte the private subnet but I don't know whether it will work under this situation. Oh, dear. I don't know what I can do next even though I just want to make the LAN see the internet. I may not be to worry about the attack from the internet anymore since it seems that my ADSL modem is connecting to a managed route on ISP side. Any suggestion, please? Liumei __________________________________________________ Do you Yahoo!? New DSL Internet Access from SBC & Yahoo! http://sbc.yahoo.com ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
