Quoting Stef Coene <stef.coene@docum.org>: ... snip ... > The routes appear to be correct as far as I can > tell. I've even turned off the firewalling > (iptables) to see if that was the problem, but it > was not. > > What am I missing? Is the default gateway ok? It points to 192.168.1.1 which is on a private LAN connected to eth2. I should have said in the original post. This is a lab behind an existing firewall. The 'Internet' in the topo drawing is a pretend Internet. The real Internet connection is on the other side of 192.168.1.1 (the 'inside-net'). And if you want to ping from the lan to internet, you will need to do SNAT (masquerading). You need a rule like this : iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE I needed that syntax anyway :) ... snip... > Is there a way to 'debug' like in a cisco router? You can use tcpdump. Or an iptables rule with -j LOG and see what appears in the logs. tcpdump is not installed on this box. And the iptables rules are disabled. In other words they are all set to accept. If I use the iptables command you suggest, will it actually log anything? Thanks, kelly ... snip ... Stef -- stef.coene@docum.org "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.openprojects.net