On Monday 03 September 2007 06:59:55 yogesh@xxxxxxxxxxxxxxx wrote: > hi all > > i have a fire wall which has two ethernet > one > eth0=10.1.1.26(local) > eth1=210.222.145.227(internet) > > i connect local pc to the eth0. > > than i want some host-172.16.1.54(external) want to connect to 10.1.1.33. > > so what can i do. i got request for 10.1.1.33 from 172.16.1.54 at eth1 but > it can not reach to the eth0;. > > also i am able to access 172.16.1.54 from my local lan.but from > 172.16.1.54 i am not able to connect to my local network. > > i get ping 210.222.145.227 from 172.16.1.54 but not able to ping 10.1.1.26 > > so can any one help me .also the pc.172.16.1.54 is on ather lan he is > connect to other router.so it gate way is also different. Sounds like you're missing a route to 172.16.1.0/24 (or whatever the subnet is) in your local PC attached to eth0 and you're missing a route to 10.0.0.0/8 (or whatever the subnet is) in your 172.16.1.54 host. As I understand your question, I think the missing routes should be in the firewall router. If it is a hardware router, it should already include routes for the connected networks. So I suspect that it's another host that you intend to act as a router. Perhaps you didn't start any routing protocol in that host. In the old days, that was in.routed but I don't know what it is these days. Does each host know a default route to the firewall? You display routes with: netstat -nr -- Garry T. Williams --- +1 678 656-4579