I finally got my network setup to where I've got an IPCop machine with three interfaces (R/O/G) and a node on each network segment being able talk to the firewall. My nodes on Green are able to initiate a session to resources on Red, but I can't do that with my nodes on Orange. I can have my Orange nodes do nslookup requests for Red resources, but I can't ping or get web pages. I looked at how I set up my routes on my Orange and Green nodes and they look analogous, so the only thing I can think of is that IPCop is not allowing outbound connections on Orange only. Is that by default? Or did I misconfigure something?

- Joe