On Monday 03 September 2007 12:59:55 yogesh@xxxxxxxxxxxxxxx wrote: > hi all > > i have a fire wall which has two ethernet > one > eth0=10.1.1.26(local) > eth1=210.222.145.227(internet) > > i connect local pc to the eth0. > > than i want some host-172.16.1.54(external) want to connect to 10.1.1.33. > > so what can i do. i got request for 10.1.1.33 from 172.16.1.54 at eth1 but > it can not reach to the eth0;. > > also i am able to access 172.16.1.54 from my local lan.but from > 172.16.1.54 i am not able to connect to my local network. > > i get ping 210.222.145.227 from 172.16.1.54 but not able to ping 10.1.1.26 > > so can any one help me .also the pc.172.16.1.54 is on ather lan he is > connect to other router.so it gate way is also different. > If I'm not wrong, you want to be able to jump from one lan (10.X) to the internet, connecting, firstly to eth0 and then to eth1, which is the Internet gateway, right? Are you masquerading all the traffic from eth0 to eth1? Do you have the correct routers on that box? iptables -L -t nat would be helpful, as well, as netstat -nr All the best Manuel -- Manuel Arostegui Ramirez. Electronic Mail is not secure, may not be read every day, and should not be used for urgent or sensitive issues.