LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Firewall infront of router setup? (https://www.linuxquestions.org/questions/linux-security-4/firewall-infront-of-router-setup-867555/)

tjwilliams 03-09-2011 04:03 PM

Firewall infront of router setup?
 
Hello all, I am new to this site and thoguth I would pose a question off the bat.

I am trying to setup a firewall using Centos 5.5. The machine has 2 NICs, one connecting to the ISP/Modem and the other connected to a DIR-655 wireless router. The nic is connecting to the internet port on the router.

I do not want DHCP on the Firewall machine but on the wireless router.

[ISP/Modem]<--->[machine eth0]<--->[machine eht1]<--->[DIR-655 internet port]
IP from ISP Dynamic 192.168.1.1 192.168.1.2

IP's on the DIR-655 LAN will be 124.168.0.0/24 network lets say.

I have setup routes on the eth0 192.168.0.0/24 and 124.168.0.0/24
and added 124.168.0.0/24 to eth1.

I can ping eth0 and eth1 but cannot ping 192.168.1.2.

this setup is not actually connected to the internet so I disabled iptables to try testing the ping and still no good.

Any help would be appreciated.

Thanks.

tjwilliams 03-10-2011 07:06 PM

okay, so far this is what I have with the setup

Right now I have router1 wireless to a wireless bridge port 1<--->eth0 [firewall] eth1<--->router2 internet port<---><--->LAN Port 3<--->laptop.

router1 LAN = 112.168.0.0/24 network
bridge = static ip in router1 range
eth0 = dynamic from router1 (current 112.168.0.191)
eth1 = static 195.168.0.1 255.255.255.0
router2 internet port = static 195.168.0.2 255.255.255.0
router2 LAN = 195.168.1.0/24 network
laptop on router2 lan port 2 = dynamic 195.168.1.2

Currently on the firewall i can ping eth0 and eth1 and out eth0 to router1 lan IPs
I cannot ping router2 IP or the laptop

On the laptop I can ping the router2 IP and eht1. I cannot ping eth0 or beyond.
I also set SELinux to permissive and allowed ip forwarding.

dazed and confused.


All times are GMT -5. The time now is 10:29 PM.