Community:
I am a Linux noob who has installed Linux firewall 2.2.19-3-LEAF via floppy on a P120, and setup as a firewall. I have it successfully routing to my WinMe machine. The WinMe machine is also on a separate home internal network (eg., 2 networks, 192.168.0.x and 192.168.1.x), and has Internet Connection Sharing for 4 other Win machines, including an XP system (don't ask, lol). All machines are able to connect thru the Dachstein fw to the internet, but only I have access (both physical via an ethernet hub between the fw and the WinMe machine, and also via ssh).
I am now attempting to add another p120 that I have already connected to my internal network but because it is running redhat, I cannot use the WinMe's ICS capabilities, and thought it would be easier to connect the redhat machine also to the fw network (192.168.1.200) statically. I am able to ping back and forth successfully between the fw and the redhat box by IP (cable running from the redhat box to the same ethernet hub that is between the WinMe machine and the firewall). However, I cannot ping back and forth by name from the fw side, and am further unable to ping to the internet past the fw, either by name or IP, from the redhat side.
Because I'm new, I'm not sure what you need, but here is the basic info:
fw internal IP address: 192.168.1.254 (firewall/static) rh ext (fw-side) IP address: 192.168.1.200 (linuxbox/static) WinMe ext (fw-side) IP address:192.168.1.1 (dhcp)
I have a 2-nic configuration in all 3 machines, and a Comcast cable connect running to the fw, w/no wireless - all cat5.
Hmm...a somewhat odd network setup, but there's no reason it shouldn't work. I'm assuming your setup looks like the following (please correct if I'm mistaken):
Internet | Dachstein | (192.168.1.0/24) | Ethernet Hub | | | RedHat | | | ??? | WinMe Box | (192.168.0.0/24) | Ethernet Hub-+----+ | | | | | | | Win4 | | | | | Win3 | Win2 Win1
I'm confused as to whether or not your RH box is tied to the second internal network (192.168.0.0/24), but it shouldn't really matter for the problem you're having.
internal ping results -
FIREWALL: firewall: -root- / # uname -a Linux firewall 2.2.19-3-LEAF #1 Sat Dec 1 12:15:05 CST 2001 i386 unknown firewall: -root- / # ping linuxbox ping: linuxbox: Unknown host firewall: -root- / # ping 192.168.1.200 PING 192.168.1.200 (192.168.1.200): 56 data bytes 64 bytes from 192.168.1.200: icmp_seq=0 ttl=64 time=1.5 ms 64 bytes from 192.168.1.200: icmp_seq=1 ttl=64 time=1.3 ms 64 bytes from 192.168.1.200: icmp_seq=2 ttl=64 time=1.3 ms
--- 192.168.1.200 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max = 1.3/1.3/1.5 ms
REDHAT: [EMAIL PROTECTED] etc]# uname -a Linux linuxbox.mshome 2.4.20-8 #1 Thu Mar 13 16:42:56 EST 2003 i586 i586 i386 GNU/Linux [EMAIL PROTECTED] etc]# ping firewall PING firewall (192.168.1.254) 56(84) bytes of data. 64 bytes from firewall (192.168.1.254): icmp_seq=1 ttl=255 time=1.60 ms 64 bytes from firewall (192.168.1.254): icmp_seq=2 ttl=255 time=0.900 ms 64 bytes from firewall (192.168.1.254): icmp_seq=3 ttl=255 time=0.914 ms
--- firewall ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2023ms rtt min/avg/max/mdev = 0.900/1.141/1.609/0.330 ms [EMAIL PROTECTED] etc]# ping 192.168.1.254 PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data. 64 bytes from 192.168.1.254: icmp_seq=1 ttl=255 time=1.56 ms 64 bytes from 192.168.1.254: icmp_seq=2 ttl=255 time=0.881 ms 64 bytes from 192.168.1.254: icmp_seq=3 ttl=255 time=0.881 ms 64 bytes from 192.168.1.254: icmp_seq=4 ttl=255 time=0.871 ms
--- 192.168.1.254 ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time 3027ms rtt min/avg/max/mdev = 0.871/1.048/1.562/0.298 ms
REDHAT TO I-NET ATTEMPT: [EMAIL PROTECTED] etc]# ping www.msn.com ping: unknown host www.msn.com [EMAIL PROTECTED] etc]# ping 207.68.173.244 <-------------(WWW.MSN.COM) PING 207.68.173.244 (207.68.173.244) 56(84) bytes of data. --- 207.68.173.244 ping statistics --- 3 packets transmitted, 0 received, 100% packet loss, time 1999ms
You have two problems. One is name resolution, which I won't address here (you didn't provide enough information to diagnose this anyway, and it looks like you may be using netbios (windows netwokring) name resolutoin, which won't work across a router without special setup anyway).
Your second problem looks to be with the network setup on your RedHat box. You don't list what the RH box is using for network settings, but I suspect it's got the wrong default gateway. Make sure your default gateway is set to the Dachstein firewall box. For statically assigned network settings, the /etc/sysconfig/network-scripts/ifcfg-eth0 file on your RedHat box should contain (at least) the following:
DEVICE=eth0 ONBOOT=yes BOOTPROTO=static IPADDR=192.168.1.200 NETMASK=255.255.255.0 GATEWAY=192.168.1.254
Verify these settings. If they're not correct, fix them and restart networking (service network restart). Hopefully, that will fix your problem. If not, please provide details of how networking is setup on your RH box (the same "ip route show" and "ip addr show" used for Dachstein, assuming you've installed the iproute package (I don't recall if it's installed by default in RH, but I install it on all my systems). Otherwise use: "ifconfig" and "route".
-- Charles Steinkuehler [EMAIL PROTECTED]
------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
