Hey all,
What I'm doing here is running a VMWARE team with two Novell Suse Linux Enterprise Server 10.2 installs. I'm using one as an internal box which has one eth device on it. My goal is to set up a second firewall/routing box to an external source. My problem is that I cannot get internet access through my firewall/routing box to my internal box. Right now, I have them configured as follows:
Internal Box:
Static IP:
Eth0 192.168.0.2 (Nmask: 255.255.255.0)
Gateway: 192.168.0.1 (Firewall/routing box internal gateway card)
DNS: 192.168.0.1 (Running a bind DNS on this interface)
External Box:
Eth0 142.237.41.138 (External Card on Firewall/Routing box which gets its IP via dhcp)
Eth1 192.168.0.1 (Gateway for internal box/also running bind)
route:
Destination: GW: Genmask: Flags: Metric: Ref: Use: Dev:
142.237.41.0 142.237.41.138 255.255.255.0 UG 0 0 0 Eth1
I feel I may have entered the route wrong because, I can ping from internal box to internal gateway, and from internal to external interface, however for example I cannot ping outside the vmteam, only as far as the external interface (142.237.41.138)
Also, for now, I have my firewalls down, once I get this working I will start modifying my iptables.
Feel free to ask me to post any additional information or clarification needed, I would be happy just to get this working
I have routing on as well (echo 1 >/proc/sys/net/ipv4/ip_forwarding)
Oh, AND - my iptable rules are as follows:
Note that my $IF_PRV and $IF_PUB ARE predefined variables with information regarding interface private/public.
iptables -A FORWARD -i $IF_PRV -o $IF_PUB -j ACCEPT
iptables -A FORWARD -i $IF_PUB -o $IF_PRV -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -t nat -A POSTROUTING -s $NET_PRV -o $IF_PUB -j SNAT --to $IP_PUB