ip_forwarding does not work

[nebjoe]

Hi all,

I have set up zeroshell for the first time.

I have ETH00 (192.168.10.254/24) for the local lan, ETH01 (172.30.100.254/24) for the connection to the WAN router, which has an IP of 172.30.100.1/24.

From the ZS I can ping a local client attached on ETH00, I can ping the WAN router and beyond into the internet.

The local client can only ping the ZS ETH00 and ETH01, but not the WAN router or anything else.

I read somewhere that ZS does not block any outgoing traffic by default and I have not touched anything but the basics.

/proc/sys/net/ipv4/ip_forw is set to 1

Any idea where I can beginn looking for a solution?

Regards Jochen
Any idea where I can begin looking 😀

[redfive]

I think that the nat on ETH01 is missing …
Regards

[nebjoe]

No, NAT is done by the WAN router. The client cannot reach the WAN router.

Jochen

[redfive]

Yes, but the main/wan router (172.30.100.1) isnt aware about the network 192.168.10.0/24, since that network is behind ZS … so, or you have to create a static route on the main router , something like
ip route 192.168.10.0 255.255.255.0 via 172.30.100.254
or, you have to do NAT on ZS’s ETH01 interface.
Regards

[nebjoe]

Blushing madly!

Thank you very much. Blind sided by the obvious. How embarrasing.

I will sleep better tonight.

Regstes, Jochen

[Author]

Posts