Here is some more information: Per Marek Dohoja's reply, I added a rule to my output chain: iptables -A FORWARD -s 192.168.1.0 - j ACCEPT.
I also tried adding 192.168.1.1 as above, with still nothing.
As suggested by Antony, I have performed the following test:
I examined the bytecounts of iptables and discovered:
Chain PREROUTING policy has accepted 11331 packets , 1345868 bytes
Chain POSTROUTING policy has accepted 12 packets, 665 bytes, but list detail in 2 of the rules
pkts = 348, bytes=25416, target=MASQUERADE out = pp0
pkts = 3 bytes=144, target=MASQUERADE out=eth0: (which is 192.168.1.1)
There are a total of 8 rules under POSTROUTING, only 2 have any stats. Is there anyway to clear all rules and start over?
Chain OUTPUT policy has accepted 178 packets, 7838 bytes.
ping and traceroute test:
From the firewall machine:
Can ping and traceroute www.abcnews.com. traceroute does NOT show the route going through 192.168.1.1, but straight to the ip address currently assigned ppp0. Which brings me to another subject: I am sure I told adsl-setup to leave the connection up continuously, yet it drops and re-acquires a new ip every minute. This will make any attempt to access my LAN from outside futile. Any suggestions on how simply acquire an ip from my isp and hold it forever would be greatly appreciated.
From a client machine, I can ping 192.168.1.1, I can also ping the ip assigned by my ISP (if I type fast! see above :-) When I do a traceroute from my client to the ISP ip, it DOES go through 192.168.1.1.
HOWEVER - I CANNOT ping www.abcnews.com OR the ip it resolves to(199.181.132.250) from a client machine.
After I conduct ping/traceroute test, the byte counts from the -nvx command increase on the ppp0 MASQUERADE rule ONLY, not on the eth0 rule...and ONLY when executed on the firewall machine. The byte counts do not change at all when test executed from the client machine.
Routing Table:
When ppp0 is up: (Again, ppp0 is reconnecting every 60 seconds...make it stop! :-()
Dest GW Mask Iface (ISP assigned IP) 0.0.0.0 255.255.255.255 ppp0 192.168.1.0 0.0.0.0 255.255.255.0 eth0 169.254.0.0 0.0.0.0 255.255.0.0 eth0 127.0.0.0 0.0.0.0 255.0.0.0 lo 0.0.0.0 (ISP assign IP) 0.0.0.0 ppp0
I hope this is enough information.
By the way, Dick St. Peters, I tried your suggestion and it had no effect.
Thank you all again.
Sincerely,
Sam Loy
