Gateway door is closed?

[MkIII_Supra]

I have read the NHF and followed it closely. I have read quite a few posts and tried all sorts of wild things. I have used Google to look for answers. I have even been using the ICQ to request help. I am at my wits end.

I am trying to set-up a Gateway with my 400. I will run a firewall and various other security measures on it and run my 700 through it to the internet. This way I can run both or even all 3 of my systems online at the same time.

Anyhow, with the help of Prince Kenshi<sp?> I did manage to get each system to ping the other last night. After that I went to bed cause it was late and I have a nasty chest cold and I was tired. Anyhow, I tried this morning and again this evening and now I can't even get a ping to acknowledge on either system. This is day 3 now and I am getting frustrated. I have tried and checked all that I can think of. Below are my systems and the results if /sbin/ifconfig.

I can get both systems online by themselves with DHCP no problem, but I can 't get them to talk to each other.

System #1
AMD K6-2 400
96MB PC-100 SDRAM
ATi Xpert@Play 98 8MB PCI
D-Link DFE-530TX+ PCI 10/100 NIC
Linksys LNE100TX 10/100 PCI NIC
4GB Western Digital
No Sound
Serial Mouse
Standard Keyboard
Mandrake 7.2
Kernel 2.2.17-21mdk


[root@localhost /root]# ifconfig
eth0 Link encap:Ethernet HWaddr ##:##:##:##:##:##
inet addr:204.210.1.94 Bcast:204.210.1.255 Mask:255.255.255.0
UP BROADCAST NOTRAILERS RUNNING MTU:1500 Metric:1
RX packets:346 errors:0 dropped:0 overruns:0 frame:0
TX packets:35 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
Interrupt:9 Base address:0xd400

eth1 Link encap:Ethernet HWaddr ##:##:##:##:##:##
inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:34 errors:0 dropped:0 overruns:0 frame:0
TX packets:45 errors:25803 dropped:0 overruns:0 carrier:51606
collisions:0 txqueuelen:100
Interrupt:11 Base address:0x3c00

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:3924 Metric:1
RX packets:8696 errors:0 dropped:0 overruns:0 frame:0
TX packets:8696 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0


System #2
AMD Duron 700
256MB PC-133 SDRAM
ATi Xpert 2000 32MB 2x AGP
Creative Ensoniq
Serial Mouse
PS/2 Keyboard
3C590 "Vortex" Series PCI NIC
20GB Quantum Fireball ATA-66 7200RPM
27GB Maxtor ATA-66 7200RPM
Red-Hat Wolverine
Kernel 2.4.2-0.1.28


[root@localhost /root]# /sbin/ifconfig
eth0 Link encap:Ethernet HWaddr ##:##:##:##:##:##
inet addr:192.168.0.2 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MTU:1500 Metric:1
RX packets:24495 errors:0 dropped:0 overruns:0 frame:0
TX packets:25718 errors:0 dropped:0 overruns:0 carrier:25
collisions:1080 txqueuelen:100
Interrupt:10 Base address:0x2000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:4440 errors:0 dropped:0 overruns:0 frame:0
TX packets:4440 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0

[paco]

Nice you dropped your ifconfig stats, but I think that your NIC's are not the problem.

A better question is:

Are you already running an script for your firewall, for example a script-file for ipchains.

If you are running a script already check if your blocking all traffic or icmp-traffic etc.

[MkIII_Supra]

As per the NHF by Xconsole I am using PMFirewall. He also recommended gShield but I didn't like it to well. PMFirewall is set up with ipmasquerade and it does detect both nic's.

[Mountainman]

So you cant even ping between the two? By ip number or name? I am assuming that you can ping the loopbacks on both. The fact that you could ping the other night says it isnt cabling or hardware {thinking out loud}. Could you post a route table for both of them? I know that you have the computers added to your host file, but you should still be able to ping by ip. Do a tcpdump on the one that has pmfirewall running and try to ping it from the other one. That way you can see what it is receiving and can work from there.

[MkIII_Supra]

I am posting from inside my Gateway now! I finally fingered it out! Now I just have to remember what the hell I did! :D :D :D :D :confused: :confused: :confused:

[Mountainman]

Its funny you should say that. I reinstalled mandake for my gateway the other night, and now I cant get it to masquerade. :rolleyes: I did at least get my dns working though. I installed pmfirewall, no joy on masquing through it, followed the howto no joy either. I will play with it when I get home.

[Lorithar]

*peers at the ifconfigs*

on the downstream system (the duron) you may have a config issue with that netcard.

I HATE autosense 10/100 cards with a passion. I prefer to call it autosenseless. Look at the ifconfigs and note a) the number of TX/RX errors, and b) the number of collisions.
this is indicative of a network card coming up in 10mb mode when the network is at 100Mb or vice versa. If you are using a patch cord to hub arrangement I'd look into hard setting both these cards to one or the other of their speed settings (i keep ye old dos boot disk around for this as most of the utility packs are dos based) Same applies if your using a crossover cable, but keep in mind that the active system will determine what mode the booting system will come up in. I use the DLINK 528 cards (as they have both BNC and 10base connectors) and have all network cards on the network hard set to 10 Mbs at the moment as it's more than enough for now ...