This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Astaro 3.2 Masquerade Question

Ok, I have 3.2 installed with the following setup:

Internal 192.168.1.254
External 65.30.235.104

I want my computers behind the firewall to have access to the internet using Masq. So I have setup the following NAT rule:

Eth0_Network__ Any/Any -> Masq_Eth1
And a filter rule:

Eth0_Network__ Any Any Allow
Any Any Eth0_Network Allow

I also have ICMP behind firewall turned on.

My question is why can I not even ping a remote site with this configuration. I have read almost every message on this board for information on this config and I cannot understand my problem.

Does anyone have a similar config that they could share their solution?

Am I a complete bonehead that I can't figure this out?

Any help would be greatly appreciated.

Paul

This thread was automatically locked due to age.

Parents

0 elektrip over 23 years ago

Same problem over here. I feel completely nuts because I cannot figure it out although read lots and lots of threads here and also spent nights and days configuring 3.2 properly.
my posted threads (unanswered, too much text?):

http://www.astaro.org/cgi/ultimatebb.cgi?ubb=get_topic&f=6&t=000642

http://www.astaro.org/cgi/ultimatebb.cgi?ubb=get_topic&f=9&t=000280

any help much appreciated.
Cancel
Vote Up 0 Vote Down

Cancel
0 bxxp over 23 years ago in reply to elektrip

how about your DNS and gateway configuration?

bxxp
Cancel
Vote Up 0 Vote Down

Cancel
0 Paul Hocker over 23 years ago in reply to bxxp

DNS/Gateway is configured using DHCP from another Linux machine.

DNS is setup with ISP DNS entries.
Gateway is pointing to my Astaro Firewall box.

Can ping anywhere from the AStaro box, and also using HTTP proxy works as well for the clients.

Let me know if you need any more info.

Paul
Cancel
Vote Up 0 Vote Down

Cancel
0 bxxp over 23 years ago in reply to Paul Hocker

Ok, try this

open your packet filter livelog, an try to ping from your client.

What do you see?
Cancel
Vote Up 0 Vote Down

Cancel
0 elcolonel over 23 years ago in reply to bxxp

have you tried to traceroute the remote host?
Cancel
Vote Up 0 Vote Down

Cancel
0 esinctio over 23 years ago in reply to elcolonel

I have no problems with that.

Don't forget to set the PDS to ignore the Inside traffic
Cancel
Vote Up 0 Vote Down

Cancel
0 Paul Hocker over 23 years ago in reply to esinctio

I finally got my setup working correctly. After reading another post, they suggested removing the default GW on my astaro box. This was the problem the whole time. Never noticed when I was setting this up. Live and Learn!

Paul
Cancel
Vote Up 0 Vote Down

Cancel
0 elektrip over 23 years ago in reply to Paul Hocker

@Paul

I'm sure it was my thread and Andy got it fixed! I was in the same trouble as you:-)

digidream
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 elektrip over 23 years ago in reply to Paul Hocker

@Paul

I'm sure it was my thread and Andy got it fixed! I was in the same trouble as you:-)

digidream
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data