I'm "VERY" new to linux (so please reply in simple language so I can understand) and I currently have a firewall server, a linux web server and several PCs. This week I needed to change IP address on my T1. I have a block of 8 IPs for the outside (red side) and a block of 32 IPs for the inside (green side). I changed what I thought was the IPs that needed to be changed in the rc.inet1 file. (The person that setup this firewall is no longer available.)

From the firewall server I can ping sites on the outside and I can ping my web server and PCs on the inside but from the web server or PCs I can ping the firewall or anything on outsite.

If I unplug the firewall and I plug the PCs and server directly in to the T1 they work fine.

I'm guessing my ISP configured the router correctly. I'm not sure where to go from here.

OK... I should NEVER "assume" anything... When you "assume" you make an "@$$" out "u" and "me"...

I assumed that my ISP had the router configured correctly. I know very little about Cisco route configuration but I had a copy of the old configuration and they sent me a copy of the new configuration and looked at the changes and it was clear as day. It was a good thing I had a copy of the old router configuration.

I guess a firewall is only as good as the router configuration...