Re: Please help...

[Sam Loy <sampaw@mac.com>]

Thanks everyone who has tried to help so far. I am confident I will get 
it working with all of your help.

Here is some more information:
Per Marek Dohoja's reply, I added a rule to my output chain:
iptables -A FORWARD -s 192.168.1.0 - j ACCEPT.

I also tried adding 192.168.1.1 as above, with still nothing.

As suggested by Antony, I have performed the following test:

I examined the bytecounts of iptables and discovered:

Chain PREROUTING policy has accepted 11331 packets , 1345868 bytes
Chain POSTROUTING  policy has accepted 12 packets, 665 bytes, but list 
detail in 2 of the rules
	pkts = 348, bytes=25416, target=MASQUERADE  out = pp0
	pkts = 3	 bytes=144, target=MASQUERADE out=eth0: (which is 192.168.1.1)
There are a total of  8 rules under POSTROUTING, only 2 have any stats. 
Is there anyway to clear all rules and start over?
Chain OUTPUT policy has accepted 178 packets, 7838 bytes.

ping and traceroute test:

 From the firewall machine:

Can ping and traceroute www.abcnews.com. traceroute does NOT show the 
route going through 192.168.1.1, but straight to the ip address 
currently assigned ppp0. Which brings me to another subject: I am sure 
I told adsl-setup to leave the connection up continuously, yet it drops 
and re-acquires a new ip every minute. This will make any attempt to 
access my LAN from outside futile. Any suggestions on how simply 
acquire an ip from my isp and hold it forever would be greatly 
appreciated.

 From a client machine, I can ping 192.168.1.1, I can also ping the ip 
assigned by my ISP (if I type fast! see above :-) When I do a 
traceroute from my client to the ISP ip, it DOES go through 
192.168.1.1.

HOWEVER - I CANNOT ping www.abcnews.com OR the ip it resolves 
to(199.181.132.250) from a client machine.

After I conduct ping/traceroute test, the byte counts from the -nvx 
command increase on the ppp0 MASQUERADE rule ONLY, not on the eth0 
rule...and ONLY when executed on the firewall machine. The byte counts 
do not change at all when test executed from the client machine.

Routing Table:
When ppp0 is up: (Again, ppp0 is reconnecting every 60 seconds...make 
it stop! :-()

Dest				GW			Mask				Iface
(ISP assigned IP)   0.0.0.0		255.255.255.255		ppp0
192.168.1.0	      0.0.0.0			255.255.255.0			eth0
169.254.0.0            0.0.0.0                   255.255.0.0			eth0
127.0.0.0		      0.0.0.0			255.0.0.0				lo
0.0.0.0		      (ISP assign IP)     0.0.0.0				ppp0

I hope this is enough information.

By the way, Dick St. Peters, I tried your suggestion and it had no 
effect.

Thank you all again.

Sincerely,

Sam Loy