Firewall 4 eth num vai

julianobrune
(usa XUbuntu)

Enviado em 08/04/2010 - 15:04h

Olá a todos

Instalei meu firewall(debian lenny). Estou tendo o seguinte problema.
tenho 4 ETH
eth0 = 192.168.2.15 Link1 ADSL 192.168.2.254
eth1 = 192.168.1.15 link2 ADSL 192.168.1.254
eth2 = 192.168.2.16 rede interna 192.168.2.0/24
eth3 = 192.168.1.16 rede interna 192.168.1.0/24

Estou tentando configurar apenas uma das redes por enquanto(fazer ela passar pelo firewall), correspondente a eth0(Link1) e eth2(REDE)
Nas estaçoes coloquei como gateway 192.168.2.16(eth2). O problema é que minha ligaçao esta tosca.
pois:
Router ADSL - ligado no Switch
ETH0 - ligado no Switch
ETH2 - ligado no Switch
Estaçao - Ligado no Switch
Resumindo: Se alguem mudar o gateway para 192.168.2.254, navega sem passar pelo firewall. até ai eu sei.
Se eu der um ping da minha estacao para 192.168.2.16(eth2) - vai com sucesso.
Se eu desligo o Router ADSL do Switch o ping 192.168.2.16 NAO FUNCIONA.
Segue abaixo algumas configuracoes do meu firewall para vcs observarem. com certeza deve ter algo de muito errado no iproute.

Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
0.0.0.0 192.168.2.254 0.0.0.0 UG 0 0 0 eth0

####################################################################################
0: from all lookup local
32764: from 192.168.2.0/24 lookup 22
32765: from 192.168.1.0/24 lookup 21
32766: from all lookup main
32767: from all lookup default

####################################################################################


default via 192.168.2.254 dev eth0
default via 192.168.1.254 dev eth1


####################################################################################


auto eth0
iface eth0 inet static
address 192.168.2.15
netmask 255.255.255.0
gateway 192.168.2.254

auto eth1
iface eth1 inet static
address 192.168.1.15
netmask 255.255.255.0
gateway 192.168.1.254

auto eth2
iface eth2 inet static
address 192.168.2.16
netmask 255.255.255.0
gateway 192.168.2.254

auto eth3
iface eth3 inet static
address 192.168.1.16
netmask 255.255.255.0
gateway 192.168.1.254


########################################################################################

# Generated by iptables-save v1.4.1.1 on Wed Apr 7 13:26:51 2010
*mangle
:PREROUTING ACCEPT [263263:203381602]
:INPUT ACCEPT [8091:1598227]
:FORWARD ACCEPT [254739:201766307]
:OUTPUT ACCEPT [18454:2452302]
:POSTROUTING ACCEPT [258097:202143555]
COMMIT
# Completed on Wed Apr 7 13:26:51 2010
# Generated by iptables-save v1.4.1.1 on Wed Apr 7 13:26:51 2010
*nat
:PREROUTING ACCEPT [15100:1467740]
:POSTROUTING ACCEPT [189:10373]
:OUTPUT ACCEPT [33:2476]
COMMIT
# Completed on Wed Apr 7 13:26:51 2010
# Generated by iptables-save v1.4.1.1 on Wed Apr 7 13:26:51 2010
*filter
:INPUT ACCEPT [8091:1598227]
:FORWARD ACCEPT [254739:201766307]
:OUTPUT ACCEPT [3362:377728]
COMMIT
# Completed on Wed Apr 7 13:26:51 2010

#########################################################################################

OBS: tentei ligar o Router ADSL na eth0 direto como deve ser, e a eth2(rede) liguei no Switch junto com minha estacao. Nesse observei o seguinte.
se eu coloco a rota para apondar para o router ADSL. o firewall pinga certinho para a internet, porem nao pinga para minha rede interna.
se eu coloco a rota para apondar para minha rede interna. o firewall pinga certinho para rede interna, porem nao pinga para a net.
aff. desisti, dai postei aqui.
valeu a todos pela enventual ajuda.
abcs