> Hi folks! This will be a long email. Sorry.
> I either do not understand routing, or firewalling, or BOTH. :-)
>
> My environment now:
>
> Cable modem to Linux eth0 IP 24.x.x.x
> Linux box is hosting a few web sites, is running sendmail also for the
> users of 10.0.2.x, and DNS
>
> Linux eth1 IP 10.0.0.221
> Win 98 IP 10.0.0.223/24 gateway 10.0.0.221
>
> Linux eth2 IP 10.0.1.221
> Cisco 760 (home) ISDN router IP 10.0.1.254 routing 0.0.0/0 to gateway
> 10.0.2.254
>
> at the other end of the ISDN:
>
> cisco 760 ( pal ) router IP 10.0.2.254 routing 0.0.0.0/0 to gateway
> 10,0,1,254
> winNT server IP 10.0.2.10/24 gateway 10.0.2.254
> 4 more Win95/98 at various IP 10.0.2.x
>
> I have implemented David's suggestions in my rc.firewall, that I include
> at the end of this email.
>
> The objective:
>
> Have the users at 10.0.2.x to access the internet (web and POP)
> It is NOT important that 10.0.0.223 (my win 98) has access to 10.0.2.10
> (remote NT server), but it would be nice to have
>
> The problems and symptoms:
>
> a) Testing from my win98(IP 10.0.0.223) to outside has no problem. It
> always worked.
> Testing from my win98(IP 10.0.0.223): ping 10.0.1.221 ----> Success
> Testing from my win98(IP 10.0.0.223): ping 10.0.1.254 ---> FAIL.
> The TCPDUMP of eth1 shows 10.0.0.223 > 10.0.1.254 icmp echo request, but
> no echo answer.
Has the cisco home router got more routes than you mention?
You said:
Cisco 760 (home) ISDN router IP 10.0.1.254 routing 0.0.0/0 to gateway
10.0.2.254
But I think this should be:
10.0.2.0/24 -> your other cisco (10.0.2.254?)
0.0.0.0/0 -> 10.0.1.221 (your linux box - the internet routes through
there).
The only problem with this is that the first route's recursive. Are you
using
a numbered or unnumbered link from the CISCO? (ie has each end of
the lan line got it's own IP address). If not, then you should be OK with
the
above, think of the pair of ciscos as one router from IP's point of view.
Martin.
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
