So I am trying to set up a dual homed BRO IDS box to act as a gateway(?) server between my home network and the existing el cheapo router that came with the broadband. what I have is this... (pipes represent wire, sorry for poor formatting)
Internet
|
ADSL Router running DHCP (gateway is 192.168.1.254)
|
eth0 (192.168.1.1)
ubuntu 1404 server running bro IDS, running bind9,
it serves DHCP on 192.168.2.0 network only on eth1
eth1 (192.168.2.1)
|
Internal LAN running two Apple Airports in bridge mode
I have set things up correctly I feel, but the Ubuntu Server doesn't route. I can SSH on it and ping both interfaces from it, plus ping the Internet. However hosts on either of the LANs cannot route to the other side of the Ubuntu server.
Here is the output of routes -n
Kernel IP routing tableico /etc/network/interfaces
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0
192.168.1.254 0.0.0.0 UG 0 0 0 eth0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
and here is the content of /etc/interfaces
auto lo
iface lo inet loopback
auto eth0
iface eth0 inet static
address 192.168.1.1
netmask 255.255.255.0
gateway 192.168.1.254
broadcast 192.168.1.255
auto eth1
iface eth1 inet static
address 192.168.2.1
network 192.168.2.0
netmask 255.255.255.0
broadcast 192.168.2.255
gateway 192.168.1.254
I enabled ipv4 ipforwarding using sysctl. The Ubuntu DHCP server is configured to only serve 192.168.2.0 Ip addresses, and it works well. There is another DHCP router serving eth0 (192.168.1.0) which I've kept active to be able to use the wifi on the broadband router to browse the web while working the problem.
But in any event I have still failed to be able to ping the other side of the Ubuntu box after logging in to both sides with static and dynamically assigned IPs. can post the contents of dhcpd.conf too...?
Am I missing something simple? Are there any troubleshooting steps I can take on the Ubuntu box to verify narrow down the problem. Currently I just get 'no route found / exists' messages... Here's the /etc/dhcpd.conf particulars too...
ddns-update-style none;
default-lease-time 600;
max-lease-time 7200;
authoritative;
subnet 192.168.2.0 netmask 255.255.255.0 {
range 192.168.2.2 192.168.2.240;
option routers 192.168.1.254;
option broadcast-address 192.168.2.255;
option domain-name-servers 192.168.2.1, 8.8.8.8;
}
This is the output from ping across router
Request timeout for icmp_seq 0
Request timeout for icmp_seq 1
Request timeout for icmp_seq 2
Also, while configuring it, I set it up as a bridge initially, but that configuration was removed from interfaces ages ago (it didn't work at all)
As requested, here is the output from iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination