Re: [Fwbuilder-discussion] newbie question - basic firewall setti ngs, NAT-to-internal-server translation not working

[Mark K. <ma...@bl...>]

Doh!!! Herein I think lies the problem...

I ran tcpdump, and whilst looking at the results and contemplating this 
email, I think I found the source of the whole dilemma. What source, 
you ask? Well, my inherent lack of knowledge about routing.

The default route to the Internet from the internal server is NOT 
through my new, fwbuilder-based, firewall. Since I am testing this new 
firewall, it is not the default, there is another... It is through 
another route. I assumed, incorrectly, that since the http requests 
came from the new firewall, they would be returned through that route. 
Now it occurs to me that the packets would possibly attempt to go out 
their default route to the net? And in the course of doing that be 
dropped? Eh?

I have yet to test this assumption - but, Vadim, thank you for this bit 
of enlightenment.


-Mark


On Wednesday, June 25, 2003, at 05:38 PM, Vadim Kurland wrote:

> what is the default route on the server ? It should point at the 
> firewall's internal address.