I currently have my network as a 192.168.xx.xx nonroutable behind a single
routable ip using a linux box doing nat. I've been doing this for years
and have had no troubles.
I am switching providers and now have 8 routable ips all in the same /24
subnet. This is new ground for me and I'm having troubles. I'm guessing
that the root of my problem is in my subnetting. I am trying to set up a
new router with 3 nics - one for my isp connection, one for a dmz, and one
for my lan. Once I get the routing working, I will worry about setting up
netfilter. I don't have the entire /24 to myself, but my new isp seems
to be blocking addresses not assigned to me. So, I think it is safe to
subnet the /24 any way I wish. This may be my problem... I took a look
at my ip addresses and came up with the following:
(isp)
a.b.c.1 a.b.c.00000001 (default gateway ip, controlled by isp)
a,b,c.17 a.b.c.00010001 eth0 /24
(lan)
a.b.c.254 a.b.c.11111110 eth1 /25
a.b.c.153 a.b.c.10011001 lan computer
a.b.c.177 a.b.c.10110001 not in use at this time
a.b.c.179 a.b.c.10110011 not in use at this time
(dmz)
a.b.c.62 a.b.c.00111110 eth2 /27
a.b.c.49 a.b.c.00110001 not in use at this time
Right now, I have nothing hooked up to the dmz interface. I have one
computer hooked up to the lan interface (a.b.c.153)
Here is ifconfig/route information from my linux router:
eth0 inet addr:a.b.c.17 Bcast:a.b.c.255 Mask:255.255.255.0
eth1 inet addr:a.b.c.254 Bcast:a.b.c.255 Mask:255.255.255.128
eth2 inet addr:a.b.c.62 Bcast:a.b.c.63 Mask:255.255.255.224
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
a.b.c.32 0.0.0.0 255.255.255.224 U 0 0 0 eth2
a.b.c.128 0.0.0.0 255.255.255.128 U 0 0 0 eth1
a.b.c.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 a.b.c.1 0.0.0.0 UG 0 0 0 eth0
I am running Linux kernel 2.4.21 on a redhat9 bare minimum install with
all routing and netfilter options enabled and have
/proc/sys/net/ipv4/ip_forward is set to 1.
My a.b.c.153 computer is set up as follows:
a.b.c.153/255.255.255.128 gw a.b.c.254
I can ping a.b.c.153 from the router.
I can ping a.b.c.254 from .153
I can ping a.b.c.62 from .153
I cannot ping my isp gateway (a.b.c.1) from .153
I cannot ping any other internet ip addresses.
As Linus might ask, "Am I on crack?"
I've done the google searches and found this tidbit:
http://www.shorewall.net/shorewall_s...ide.htm#Routed
which is really what I want to do. But, WHY DOESN'T IT WORK???
Thanks in advance,
A. Trent Foley
(E-Mail Removed)
----== Posted via Newsfeed.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeed.com The #1 Newsgroup Service in the World! >100,000 Newsgroups
---= 19 East/West-Coast Specialized Servers - Total Privacy via Encryption =---