The setup:
Debian; acting as the network's router using iptables, fail2ban Because of external requirements, both networks are 192.168.1.x. eth0: 192.168.1.1 eth1: 192.168.1.2
Ubuntu (192.168.1.3) acting as a network bridge of sorts eth0: 192.168.1.3 wlan0: 192.168.1.10
Client computers (192.168.1.100 through 200) connected to a switch
Debian's eth0(192.168.1.1) on my internal network, connects to a switch along with the Client computers, a mixture of desktop computers, wireless devices, etc.
eth1 is connected directly to Ubuntu's eth0.
I can ping and ssh to Ubuntu from Debian without a problem. When I try to ping or SSH from one of the client computers (connected to Debian's eth0), my connections time out.
I'm not sure if I should use route (or fully sure how to use route, for that matter) or iptables to get traffic from Debian's eth0 to eth1 and on to Ubuntu.
Here is my iptables output:
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- eth0 * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT all -- eth0 * 0.0.0.0/0 0.0.0.0/0 state NEW
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- eth1 eth0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT all -- eth2 eth0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT all -- eth0 eth1 0.0.0.0/0 0.0.0.0/0
0 0 REJECT all -- eth1 eth1 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Would appreciate any help. Thanks!
sudo iptables-save |grep -v ^#
and feel free to pipe this further throughsed
or so to disguise the actual IPs in question in case they're public IPs.