I am using a box running Arch as my router and firewall (with shorewall). Recently, I tried to add another network onto the system, which failed horribly. After putting everything back where it was before this, and confirming that everything is exactly the same, I am having some issues with routing from my internal network (192.168.1.0/24) to the outside. Here is the current situation:
- I CAN ping the external network from my firewall
- I CAN ping the firewall from my internal network
- I CANNOT ping the external network from the internal network
I have two network interfaces,
enp5s0 (internal) and
enp6s0 (external). Here are my routes from
ip route ls (note my external ip ends in .78, I redacted the rest for obvious reasons):
default via [redacted].1 dev enp6s0 src [redacted].78 metric 203 mtu 576 [redacted].0/24 dev enp6s0 proto kernel scope link src [redacted].78 [redacted].0/24 dev enp6s0 proto kernel scope link src [redacted].78 metric 203 mtu 576 192.168.1.0/24 dev enp5s0 proto kernel scope link src 192.168.1.1 metric 202
A traceroute from the machine on the internal network reveals that it gets to 192.168.1.1, then times out. I suspect I need to add another route allowing traffic coming from 192.168.1.0/24 to be routed through enp6s0 out to the net. I've tried different routes, and none have worked. Also, my dhcpcd.conf did change. If the commented line is uncommented, it creates a second default route which stops any connection at all. Previously, this was not an issue.
interface enp5s0 static ip_address=192.168.1.1/24 #static routers=192.168.1.1 static domain_name_servers=192.168.1.1 # I have TOR DNS bound to this ip
Any help would be much appreciated.