On Tue, 2010-02-09 at 10:23 +0800, Wilson Kwok wrote:
> Here is what I checked:
>  
> This IP address 210.0.214.121 is no problem, you can see the MAC
> address (firewall external interface: 00:0a:cd:0f:66:bb) and (ISP
> router MAC address: 00:05:3b:60:c0:57):
>  
> 10:21:51.276188 00:05:3b:60:c0:57 > 00:0a:cd:0f:66:bb, ethertype IPv4
> (0x0800), length 62: 221.127.14.48.32481 > 210.0.214.121.http: S
> 2808036249:2808036249(0) win 65535 <mss 1440,nop,nop,sackOK>
> 10:21:51.276353 00:0a:cd:0f:66:bb > 00:05:3b:60:c0:57, ethertype IPv4
> (0x0800), length 62: 210.0.214.121.http > 221.127.14.48.32481: S
> 3041452640:3041452640(0) ack 2808036250 win 5840 <mss
> 1460,nop,nop,sackOK>
> 
>  
> This IP address 210.0.214.127 is can't connect to internet, the MAC
> address 00:01:03:2a:67:25 is the testing firewall external MAC
> address:
>  
> 

Have you reconfigured 192.168.0.14 to use the internal IP address of the
test firewall as its default gateway?

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to