Hello.

I am trying to set up a server as a dual homed router/firewall.

When I have all eth interfaces configured and routing tables
in place, I can get from an internal host (host A below)
to as far as the eth0 interface of the SuSE server, I can't ping anything further than that. From the SuSE server I CAN see the DSL router and access the internet but it is blocking traffic from the internal network.

Would there be a special setting I need to set/unset to make the server work as a router?
Am I just not configuring the routing tables correctly?

I am planning on running a SOCKS5 firewall on this server or possibly the TIS firewall kit.

The network set up is as follows:

DSL ROUTER:
dslip internet address: 65.168.184.xxx
internal eth address: 192.168.11.235


SuSe SERVER (MORIA):
eth0 to the DSL router: 192.168.11.230
eth1 to internal network: 192.168.10.230
eth2 to internal network (ifconfig'd bur not in use): 192.168.10.230


HOST A:
192.168.10.65 on internal network 192.168.10.x


Routing tables being used:

SUSE SERVER (RUNNING LINUX 8.1):
moria:~ # route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.20.0 * 255.255.255.0 U 0 0 0 eth2
192.168.11.0 * 255.255.255.0 U 0 0 0 eth0
192.168.10.0 * 255.255.255.0 U 0 0 0 eth1
default 192.168.11.235 0.0.0.0 UG 0 0 0 eth0



HOST A (RUNNING SOLARIS 8):
galaxy% netstat -r

Routing Table: IPv4
Destination Gateway Flags Ref Use Interface
-------------------- -------------------- ----- ----- ------ ---------
192.168.10.0 galaxy U 1 78 dmfe0
224.0.0.0 galaxy U 1 0 dmfe0
default 192.168.10.230 UG 1 7
localhost localhost UH 2 6 lo0
galaxy%


Please help.
I have some meat on the grill and I need to flip it over soon or it's going to burn!!!


Antonio Trejo
IT Services.
International Data Collection
(619)628-2370

This command will enable port fowarding.
echo "1" > /proc/sys/net/ipv4/ip_forward

In addition you might need to change your firewall rules using iptables.