> -----Original Message-----
> From: centos-bounces@xxxxxxxxxx
> [mailto:centos-bounces@xxxxxxxxxx] On Behalf Of Marcus Moeller
> Sent: Tuesday, February 10, 2009 1:19 PM
> To: CentOS mailing list
> Subject: Re: iptables: forwarding on internal device
> I now begin to wonder if it's a routing issue and backroute problem as
> the respone package may come from a different MAC address:
>
> LAN1 -> LINUX_ROUTER -> LAN2
>
> Response:
>
> LAN2 -> CORE-ROUTER(with LINUX_ROUTER as default Gateway) ->
> LINUX_ROUTER | BLOCKED | LAN1
>
> This may be the case as the CORE-ROUTER was not part of the network in
> good ol' slacky times.
----
You do have all your Routes Defined on all machines and routers? Last does
that machine in question have it routes defined on it "route 10.x.x.x/x"?
Only other thing you can do is start from scratch. Save all your rules and
add them one at a time. If you can't have it off the network reduce the
rules to a bare minimum. Are the switches configured correct?
JohnStanley
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
