Need detail help in routing configuration

[jetberrocal]

Hello! I am new with Engarde and with Linux routing.
The routing function is not working as I need.

My network is:

Windows XP Client 192.168.1.151 DHCP Assign
|
^
Inside LAN 192.168.1.0/24
|
^
Engarde Inside NIC 192.168.1.75 Static IP
|||
Engarde Outside NIC 192.168.0.75 Static IP
|
^
Outside LAN 192.168.0.0/24
|
^
Linksys Router Inside IP 192.168.0.90 Static IP
Linksys Router Outside IP Internet Static ISP Provider Assigned


Problem:

Connected to the Engarde computer I can ping the Internet successfully
Connected to the Engarde computer I can ping Inside and Outside LAN, and Internet

Connected in a Computer in the Inside LAN can ping to 192.168.1.75 (Engarde Inside NIC)

Connected in a Computer in the Inside LAN can not ping to 192.168.0.75 (Engarde Outside NIC)
Connected in a Computer in the Inside LAN can not ping to 192.168.0.90 (Outside LAN)
Connected in a Computer in the Inside LAN can not ping to Internet

Need specific instructions to make the Inside LAN to ping/connect the
Outside LAN and to make the Outside LAN to ping/connect the Inside LAN

[jetberrocal]

To clarify:

Engarde is running in Permissive mode and version 3.0.22

If you need any other information in order to help me, please ask me.

[Dave]

To clarify:

Engarde is running in Permissive mode and version 3.0.22

If you need any other information in order to help me, please ask me.

You shouldn't need to disable SELinux to do this. You are trying to do two totally separate things here. You'll need to do port forwarding to reach the inside internal LAN. Look at the firewall section of the WebTool, and enable masquerading to be able to allow internal machines to reach the Internet.

I believe much of this is possible to be done right through WebTool, but you may have to research the IP Masquerading HOWTO for further assistance.

Best,
Dave

[jetberrocal]

To clarify:

Engarde is running in Permissive mode and version 3.0.22

If you need any other information in order to help me, please ask me.

You shouldn't need to disable SELinux to do this. You are trying to do two totally separate things here. You'll need to do port forwarding to reach the inside internal LAN. Look at the firewall section of the WebTool, and enable masquerading to be able to allow internal machines to reach the Internet.

I believe much of this is possible to be done right through WebTool, but you may have to research the IP Masquerading HOWTO for further assistance.

Best,
Dave

I do not have problems connecting from the Outside LAN to the Inside LAN, the problem is connecting from the Inside LAN to the Outside LAN.

My Firewall configuration:

Default Policy is Accept on ALL
Masquerading Enabled on (192.168.0.75) to (192.168.1.75)
Masquerading Enabled on (192.168.1.75) to (192.168.0.75)

[Dave]

I do not have problems connecting from the Outside LAN to the Inside LAN, the problem is connecting from the Inside LAN to the Outside LAN.

My Firewall configuration:

Default Policy is Accept on ALL
Masquerading Enabled on (192.168.0.75) to (192.168.1.75)
Masquerading Enabled on (192.168.1.75) to (192.168.0.75)

Show us the output of "iptables -L". It might also help for you to add a logging rule if you haven't already, and use that to troubleshoot a bit further.

Best,
Dave

[jetberrocal]

Dave:

Thank you for your interest in helping me.

I think I solved the problem. I change the client NICs configuration. This particular client had two NICs; one NIC had IP 10.4.0.6 and gateway 10.4.0.6, and the other DHCP configured by the Engarde.

The one with the 10.4.0.6 was conflicting; I remove the 10.4.0.6 gateway from the NIC and now this client can connect to the Outside LAN successfully.


Sorry for the inconvenience ( I am new at this)

Jose