Internet connection outside Endian firewall issue

[Guest]

[bennykuttipara]

hello everybody,
i am new to Endian firewall, i downloaded and install Endian firewall 2.4.1. and i configured the firewall but i couldn't get the internet out from the firewall.we have BSNL Broadband connection
my configuration details are  shown below
Network configuration -> Ethernet Static
my green ip is 192.168.1.2  and netmask is /24 - 255.255.255.0
we have static ip  address, red ip is 117.218.xx.xx and netmask is /24 - 255.255.255.0
its default gateway i set is 117.218.xx.xx (actually it is Bsnl router ip  ie 192.168.1.1)
and dns i set is  dns1  218.248.245.1 dns2 218.248.255.139.
my pc has two lan card eth0 and eth1
i connect Bsnl ADSL modem to Endian red interface ie eth1 ->> then from Endian Green interface to Dlink switch. But i don't get the internet connection.
how can i get the internet connection out from the endian firewall. Please help me , thanks in advance

Benny George.

[endianupdate]

Hi I have just joined myself also and saw no one had replied to your post so I will give it a go.

Endian is a firewall so you must have two IP subnets one on the GREEN side and ONE on the RED side

If your Bsnl router is 192.168.1.1 then you must use a different subnet for the GREEN side e.g. 192.168.2.x /24

So the configuration would be;

LAN 192.168.2.x/24 --- > GREEN 192.168.2.2 --- > RED 192.168.1.2 --- > Bsnl 192.168.1.1

If you are using public IP address on your Bsnl router 117.218.x.x and RED 117.218.x.x then you can keep your GREEN at 192.168.1.x as follows;

LAN 192.168.1.x/24 -- > GREEN 192.168.1.2 -- > RED 117.218.x.x --- > Bsnl 117.218.x.x

Check your subnet for the 117.218.x.x range it is not normally /24 i.e. 255.255.255.0 as the ISP will not give you a full class C range it is normally 255.255.255.248 or similar.

Hope this helps

[qhris]

It may be a stupid question, but did you set your gateway to the green ip?

[endianupdate]

Yes all hosts that are on your LAN connected to the GREEN network will have their gateway set to the GREEN IP address.

Hope this helps.