On Wed, 2002-02-27 at 05:57, Steve Holmes wrote: > OK, I can lynx to other sites and I can ping along as I use numeric ip > addresses. Here is the test firewall script I am currently using when I > do this. BTW, ports 53 (both udp and tcp) do not yield me any thing. I > use a regular name server at 24.221.30.3. > ------------------ > #!/bin/sh > # Firewall testing script > > ipchains -P input DENY > ipchains -P forward DENY > ipchains -P output ACCEPT > > ipchains -A forward -s 192.168.1.0/24 -i eth1 -j MASQ > ipchains -A input -i lo -j ACCEPT > ipchains -A input -i eth0 -j ACCEPT > ipchains -A input -p tcp ! -y --dport 1024:65535 -j ACCEPT > ipchains -A input -p icmp -j ACCEPT > ---- OK from firewall box - what is result of ipchains -L ping -c 4 24.221.30.3 ping -c 4 24.221.30.4 cat /etc/resolv.conf cat /etc/sysconfig/network route -n or if this makes it easier ipchains -L > /tmp/test ping -c 4 24.221.30.3 >> /tmp/test ping -c 4 24.221.30.4 >> /tmp/test cat /etc/resolv.conf >> /tmp/test cat /etc/sysconfig/network >> /tmp/test route -n >> /tmp/test mail < /tmp/test and then forward this on to the list Craig