ClearFoundation

I want to follow-up and close the loop on this issue as it is now solved.

Tcpdump and the iptables logging rules that I inserted on the gateway box did not help with diagnosing this, as the logged data was not giving me any additional clues (it is obvious why this didn't help when you see the solution). So I went back to the beginning and reviewed all my network configuration and did some more reading on NAT. This article www.netfilter.org/documentation/HOWTO/NAT-HOWTO.txt is what pointed me in the right direction and helped me find my configuration error. The article is a little old, but it is well written in an easily understandable style and is still relevant. I would recommend it to anyone trying to understand iptable rules for NAT.

The two errors I had were that you don't need a 1-1 NAT rule for the gateway box itself, as it is the destination point for packets coming into the box so INPUT rules are what is relevant there. Thanks Nick for pointing that one out. The second error was that the boxes behind the gateway had the wrong default gateway address. I had installed the gateway box into my existing working network between the cable modem and the switch. The cable modem was still referenced as the default gateway on the few boxes behind the gateway that I was trying to access. So this resulted in it appearing that packets from my remote access attempts to the boxes behind the gateway were being silently dropped. Whereas what was really happening is that packets were getting to the boxes, but the replies from the boxes were getting mangled or dropped because they were skipping past the gateway box that would do the 1-1 NATing going back out, and instead going to the cable modem box as their gateway.

I now have full administrative access to my boxes via the 1-1 NATing, and am working on further securing the access to them from potential hackers.

Jeff

Glad you finally figured it out

Hello Jeff,

I am also facing the issue with static public IP setup issue with concast cable modem.

I did checked your all replies on this thread but did not helped.

So here is my setup, you might take a look at it and let me know.

Comcast (SMC Netowrk router Model: SMCD3G) ->>> ClearBox -->>> LAN (Internal Network)

The comcast admin UI is so minimal, and do not have much options to do.

We have 5 public ips.

Comstat (SMC Netowrk router Model: SMCD3G)
External: 1.2.3.4.5
Internal 10.1.10.1 (DHCP Enabled)
Firewall: 1-1 NAT: 1.2.3.4.6 ---> 10.1.10.2

ClearBOX
External(eth0): 10.1.10.2
Internal(eth1): 192.168.0.1

From Comcast Cable modem to one rj-45 directly connected to clearbox eth0

Now i try to ping the 1.2.3.4.6 from outside the network, it is not pinging.

How do I get the following setup using comcast cablem modem.
1. A public ip to the clearbox
2. clearbox being accessible outside the network, so that i can connect to the server using SSH,HTTP,FTP,etc


Please let me know the steps so that i can configure it.

Appreciated your help.

Thanks,
-skonealone