Re: [Shorewall-users] Another Bone Head question

[Tom E. <te...@sh...>]

--On Monday, January 27, 2003 4:23 PM -0900 "John S. Andersen" 
<JAn...@sc...> wrote:

> Whilst configuring another shorewall firewall router
> for another site, I must have made some totally newbie
> error....
>
> While directly on the cable modem, it works great.
>
> But when placed on the LAN side of my existing
> Shorewall box, the NEW shorwall box could not ping,
> or look up dns or anything else.
>
> If I shutdown shorewall (clear) in the NEW box then
> it could surf the net and ping etc.  When connected
> to the cable modem directly and shorewall running
> it works great.
>
> It properly obtains a dhcp lease from either my main
> shorewall box OR my ISP's dhpc server in either
> case.
>
> But with one shorewall behind the other, the second
> one can't resolve names or ping.
>
> What have I overlooked in my haste???
>

'norfc1918' set on the external interface?

-Tom
--
Tom Eastep   \ Shorewall - iptables made easy
Shoreline,    \ http://www.shorewall.net
Washington USA \ te...@sh...