HI, Problem get firewall going.

[Michael Chesterton]

Neil Dugan <ubuntu at butterflystitches.com.au> writes:

>> I don't think eth1 of the firewall should be be receiving arp
>> requests for 192.168.1.1, sounds like the computer thinks
>> 192.168.1.1 is directly connected to it's network, not via
>> 192.168.5.254
>>
> Any way I can find out?
> I might have configured the DHCP wrong.

well, route -n

What I would do is clear all the firewall rules, polices to accept,
then check all the routes.

The modem should have three routes, default to the isp, 192.168.5.0/24 via
192.168.1.xxx (whatever the firewalls eth0 ip address is) and 192.168.1.0/24
directly connected to the ethernet port.

The firewall should have three routes, default to the modem, 192.168.1.0/24
directly connected to eth0, 192.168.5.0/24 directly connected to eth1

The computer should have two routes, default 192.168.5.254, and
192.168.5.0/24 directly connected to eth0

> # route
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref Use
> Iface
> 192.168.0.0     *               255.255.0.0     U     0      0 0 eth0
> default         192.168.5.254   0.0.0.0         UG    0      0 0 eth0

Is this on the computer? Looks like you've got your subnet mask set
wrong on the dhcp servers lease, it should be 255.255.255.0 and is one
of the problems, I think you also need to put a 192.168.5.0/24 route
on the modem.