Re: Forwarding not work in FC9 but ip forward is turn on



ppps wrote:
Hey guys,
first of all I would like to thank them for their great support, thanks to that I could now bring forward a package from both ends, or for any network, except for one detail :( The 192.168.5.0 network is supported by a router zyxell Prestige 660-Hw T1-V2 that gives me access to the Internet.

Through this router I can reach computers behind the router zyxell (example: from 192.168.5.20 to 192.168.1.210 via linux FC9), but unfortunately from 192.168.1.210 I can not ping the interface of the router ZyXEL (IP: 192,168 .5.1).

But if I can ping from 192.168.5.254 (linux FC) to 192.168.5.20. This is quite strange to me :(. I mean

Pinging 192.168.1.210 192.168.5.1 does NOT WORK! :(
Pinging 192.168.5.254 192.168.5.1 if it works!
192.168.5.20 Pinging 192.168.5.1 also works

I called my ISP and I asked for some filter on the router itself that prevents the ping, but they say that with the default settings there is no filter that blocks access to the interface.
I even reset the router ZyXEL to the default values but does not work.

My supplier tells me that there is something in linux known as an "echo" which I turn off in my linux FC but they have no idea how to do it. : (

I need to access my LAN to the Internet but I can only do that from the hosts directly connected to the router zyxell (including FC), but not from my other LANS :(

Please I need your support and thank you very much in advance!!




You make this very difficult as you've changed ip addresses and your not
running the tests that you have been asked to run to prove routing from
network -> network from the firewall and thru the firewall.

*However* trying to use what your showing now it appears that you don't
have the route from the ....1.x network (1.210 in this case) to the
...5.x network (5.1, your zyxell router) setup correctly. What is your
default route on the 1.210 machine set to? Do (on the firewall):

tcpdump -i eth5 -n -nn -vvv host 192.168.5.1 &
tcpdump -i eth4 -n -nn -vvv host 192.168.5.1 &

And then run a "ping 192.168.5.1" from the 192.168.1.210 host, what do
you see?

Also, if your zyxell router is your internet router then your firewall
will need a default route set to 192.168.5.1 to allow traffic to pass to
the zyxell for internet traffic.

Kevin
--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Relevant Pages

  • Re: Host Computer with ICS cannot be accessed
    ... You read my mind on the router thing. ... My home network is a piece of cake... ... >>firewall settings, not that I've found so far, but I'll keep looking. ... and we couldn't get file sharing working until ...
    (microsoft.public.windowsxp.network_web)
  • Re: share my printer between 2 computers and surf with 2 computers at same time
    ... The main choice you have to make is whether to have the router include wireless capability or not. ... Because wireless routers for home use are relatively inexpensive these days, I'd suggest buying a wireless router even if you don't initially intend to use that capability. ... If you already have a UTP cable going between upstairs and downstairs, you can use that to have a wired network. ... caused by 1) a misconfigured firewall; ...
    (microsoft.public.windowsxp.network_web)
  • Re: share my printer between 2 computers and surf with 2 computers at same time
    ... The main piece of hardware you need to buy is a router. ... Because wireless routers for home use are ... you can use that to have a wired network. ... caused by 1) a misconfigured firewall; ...
    (microsoft.public.windowsxp.network_web)
  • RE: [Full-Disclosure] Re: January 15 is Personal Firewall Day, help the cause
    ... the>outside world which are in response to packets originating from ... to drop in a little Trojan, your whole network can be compromised. ... NAT router works at Layer 3. ... You still need a personal firewall or ...
    (Full-Disclosure)
  • Re: MSN WORKGROUP
    ... before my router is excess the folder very quickly suddenly it excess the ... Pls guide me how can i make it again this network. ... xp or firewall., secondly i can not find my wirefall optopn in control panel ... Problems sharing files between computers on a network are generally ...
    (microsoft.public.windowsxp.network_web)