On Mon, 27 May 2002, Antony Stone wrote: > Second packet (SYN-ACK) is from 192.168.0.11 to 213.84.165.198. Good. > > Source MAC address is 00:D0:B7:74:17:FD. This is your web server, I'm sure. > > However, the destination MAC address is 00:06:5B:3A:60:7D. > > What is this machine ??? It sure isn't your firewall - that's why the > firewall is showing [UNREPLIED] in its connection tracking table - the > packets are going to some other ethernet address on the network.
Duh, this is the internal ethercard (192.168.0.1) of our production firewall..... The one I am trying to configure now is a test machine. So having two firewalls is a problem... Is it by concept possible to have portmapping on two firewalls at the same time? Or do I need to configure extra gateways on the internal webserver? Thanks, -- Dick Visser TERENA IT-support Singel 468D, 1017 AW, Amsterdam, The Netherlands Phone: +31 20 5304488 Fax: +31 20 5304499 Email: [EMAIL PROTECTED] http://www.terena.nl Live webcam: http://www.terena.nl/~dick/cam2.asx PGP-key: http://www.terena.nl/~dick/pgp.key.asc