From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jeffrey Laramie Subject: Re: help with routing/firewall Date: Thu, 18 Dec 2003 13:19:57 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3FE1EFCD.2050307@Loudoun-Fairfax.com> References: <20031218180112.66315.qmail@web20419.mail.yahoo.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20031218180112.66315.qmail@web20419.mail.yahoo.com> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/html; charset="us-ascii" To: netfilter@lists.netfilter.org Fred Gurn wrote:

Hi,

I have set up suse linux as bridge/firewall.

Simple configuration.

eth0 internet

eth1 local net

Everything accepted from eth1, nothing from eth0, traffic from eth1 is routed to internet.

IP forwarding is enabled.

From local net I can ping eth1 and eth0 (that means machine is routing packets), but I cant go outside eth0. Same happens when ther is no firewall. What's the problem with routing?

You've answered your own question. You have a problem with routing. Check the default routes on your LAN and make sure they point to the firewall box.

What comands can I use to monitor what is happening with packets?

Insert LOG rules in the ruleset and then check for entries in /var/log/messages. You can use LOG just like any other target. Until you fix the routing issue you can't do much with iptables.

Jeff