Re: Problem with internet sharing
there are two (possible) causes here:
1.) back-channel is missing
allows the replies to pass through your firewall - but where do you allow the replies to pass back ? as far as i know, icmp is a stateles protocol not being picked up by the --state module - this it will not enter the connection tracking and the reply packet is dropped
$IPTABLES -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
2.) return route is missing
does your client on the 192.168.0.0/24 network know where to find the 192.168.254.0/24 network ? did you add routes to the network on the client on the clients default gateway ? if not, then the client does not know where to send the replies to and they get "lost" somehwere on the internet until they time out.
hope it helps...
what i just saw... your ACCEPT rules for samba do not specify the -m state --state NEW flags - they really should, because at the moment they accept for more than you probably want...
Last edited by SpaceTeddy; November 19th, 2008 at 02:50 PM.
Reason: saw something...
Calvin: I'm being educated against my will! My rights are being trampled!
Hobbes: Is it a right to remain ignorant?
Calvin: I don't know, but I refuse to find out!