In my small office I have a setup like this:
Now I want to add a proxy into this. It is a Linux-PC that has also a small webserver. It has two interfaces eth0 and eth1.
All http-traffic should go thru the proxy for monitoring and bandwith purposes.. The webserver itself works from LAN and Internet, if I set port-forwarding on the dsl box. But I can not reach the dslbox from LAN, when the proxy is in the chain. When I have the firewall only, it works perfectly, I have access to the internet from LAN.
In the working configuration I set the interfaces and routing this way:
dslmodem: static 192.168.1.1 firewall-interface to modem: static 192.168.1.2 default gateway 192.168.1.1 firewall-interface to LAN: 192.168.2.1 serving dhcp 192.168.2.xx
This works fine.
Now I thought, my new proxy box needs an own net so I figured out to split the 1 network into two. I used a CIDR-calculator to figure out the ranges:
dslmodem: static 192.168.1.1/27 proxy to modem: static 192.168.1.2/27 proxy to firewall: static 192.168.1.33/27 (the second subnet) route on proxy: default gateway **192.168.1.1 firewall to proxy: 192.168.1.34/27 firewall to LAN: 192.168.2.1 serving dhcp 192.168.2.xx route on firewall: default gateway **192.168.1.33***
I can ping the firewall at 2.1 and 1.34 from LAN and I can ping the proxy at 1.33 but I can not reach 192.168.1.1 nor anything in the internet. Why? Does my setup makes any sense at all? How should I configure it? (Or do I need another network for the dsl->proxy like .3.1 or so?)
Thank you for any help