Lars E. D. Jensen wrote: > > > On 27/08/07 1:48, "Tom Eastep" <[EMAIL PROTECTED]> wrote: >>> I've followed this from ProxyARP.htm: >>> The lower systems (130.252.100.18 and 130.252.100.19) should have their >>> subnet mask and default gateway configured exactly the same way that the >>> Firewall system's eth0 is configured. In other words, they should be >>> configured just like they would be if they were parallel to the firewall >>> rather than behind it. >>> >>> The DMZ server 192.168.1.20 is setup with the same network config as the >>> firewalls eth0/192.168.1.15 that is with gateway 192.168.1.1. >>> >> 192.168.1.20 is connected to eth1 which is also where the firewall's >> default gateway is connected. That is NOT the configuration shown in >> ProxyARP.htm. >> >> -Tom > > Ok, then I'm missing something :) > > eth1 in the firewall is configured with 192.168.2.15 and gateway 192.168.2.1 > (I've also tried to remove the gateway definition from eth1). > > How do you see that the default gateway is connected to eth1? >
From the main routing table: 192.168.1.20 dev eth1 scope link 192.168.2.0/24 dev eth1 proto kernel scope link src 192.168.2.15 192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.15 169.254.0.0/16 dev eth1 scope link default via 192.168.2.1 dev eth1 <====================================== -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
