Mark Bynum wrote:

Richard,

Two questions:

1. What is wrong with Dachstein? Is it insecure?

2. I've tried your suggestions and still I can't ping either internal network from the other. But, I do know have a new route:

192.168.2.0/24 via 192.168.1.254 dev eth1

The other one didn't take. I don't know why.

Any other suggestions?

Thanks,

Mark

Richard Doyle wrote:

On Thu, 2003-09-25 at 21:37, Mark Bynum wrote:

INTERN_NET="192.168.1.0/24 192.168.2.0/24"
eth1_ROUTES="192.168.2.0/24_via_192.168.2.254"
eth2_ROUTES="192.168.1.0/24_via_192.168.1.254"


Don't use Dachstein, but the eth1 route can't go through 192.168.2.254
since 192.168.2.254 isn't on the 192.168.1.0 network. You need something
like

eth1_ROUTES="192.168.2.0/24_via_192.168.1.254"
eth2_ROUTES="192.168.1.0/24_via_192.168.2.254"

don't you?

Dachstein will not route between interfaces unless you tell it to do so.

To masquerade both networks

INERN_NET=192.168.0/23 should cover both networks.

Now you must specifically forward whatever traffic you want between these networks.

you can list whatever ipchains rules you need for forwarding traffic between these networks.

Put the ipchains commands in /etc/ipchains.forward





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to