From: "Gerry Weaver" <[EMAIL PROTECTED]>Are you translating private addresses with NAT in the wisp-dist box?
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.254 67.65.229.0/24 dev netcs0 proto kernel scope link src 67.65.229.11 default via 67.65.229.254 dev netcs0
I can ping everything from the wisp-dist box itself and only the cpe(192.168.1.254) from the client pc.
192.168.*.* are private addresses that you can use as you want in your LAN but routers in the Internet don't know about them (in fact we are millions using the same private addresses). So, your packets quit your LAN, get to the wdist box, continue to the next node, ... but when the outer node wants to answer he doesn't know where to locate 192.168.*.* so it simply drops the packets.
You need to use iptables or the shorewall wrapper in the wisp box.
Javier Simó EHAS
------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click _______________________________________________ leaf-wisp-dist mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-wisp-dist
