"Marshall, Joshua" wrote:
> 
> > What are the route settings for:
> 
> > - the 10.10.10.x LAN
> 
> The default route is 10.10.10.4 (Firewall 1)
> 
> > - Firewall 1
> 
> 10.0.5.4/30 eth1
> 10.0.5.8/30 eth1
> 10.0.1.0/24 eth1

I don't think you can just do this, can you?

What happens if IP 10.10.10.33 sends a packet to 10.0.1.28?

1. The default route causes the packet to be send to the firewall (to
eth0)
2. The firewall's routing table causes it to send the packet out eth1
 - at this stage the destination IP of the packet is 10.0.1.28, but
since that IP is not on this segment, it never makes it there.

You need a gateway entry on the firewall's routing table to make it send
the appropriate packets to 10.0.5.10 to be forwarded over the wan.


Matthew


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Reply via email to