?? this isn't what you want alright :) If your lan is connected to eth1: First of all: a router can only route between two different subnets and the IP ranges you gave to the router (64.240.90.230 and 64.240.90.231) are in the same subnet. That can only if you make it proxy-arp Secondly: you told your router that 64.240.90.224/28 is connected to eth0 and eth1, there can be only one, neo! remove the entry for eth1. Thirdly: you have 2 default-routes, one to eth0 and one to eth1. Both are pointing at 64.240.90.225, which resides in the lan-subnet. I think you need to study ip-address assigning and subnetting a bit. If even then you can't figure it out, add more info, what is the isp's gateway address, what addresses do you want where.. Serge. -----Original Message----- From: Vinay Kudithipudi [mailto:vinay@inlightnet.net] Sent: donderdag 3 augustus 2000 17:01 To: linux-net@vger.rutgers.edu Subject: Network Routing Configuration Hello Guys, Thanks for the great feed back on firewalls. I have a question about routing tables. I have two network cards in the comp that I am planning to use as an firewall. Both of them have pulic ip addresses. One card is going to be connected to the router and another to the lan. How should I write the routing table so that all the traffic is passed on from the card attached to the lan. My routing table at present is Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 64.240.90.231 * 255.255.255.255 UH 0 0 0 eth1 64.240.90.230 * 255.255.255.255 UH 0 0 0 eth0 64.240.90.224 * 255.255.255.240 U 0 0 0 eth0 64.240.90.224 * 255.255.255.240 U 0 0 0 eth1 127.0.0.0 * 255.0.0.0 U 0 0 0 lo default 64.240.90.225 0.0.0.0 UG 0 0 0 eth1 default 64.240.90.225 0.0.0.0 UG 0 0 0 eth0 -- Best regards, Vinay mailto: vinay@inlightnet.net - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.rutgers.edu - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.rutgers.edu