> I have a cable provider which provided me these settings:
> IP: 10.2.114.20
> Subnet mask: 255.255.0.0
> Gateway: 10.1.0.2
> DNS: 82.117.194.2 and .3

> M0n0wall box has two nic's, one lan, and one wan. Lan is configured as
> follows:
> Lan IP: 192.168.1.1/24
> Wan IP: 10.2.114.20/16 ; Gateway: 10.1.0.2
> Cable modem ip is: 192.168.143.43

This is very weird. Correct me if I'm wrong but you're actually going
through no less than *three* NAT layers here... The IP your provider has
issued you (10.2.114.20) is in a private address range, so they must be
doing NAT at their end, your cable modem is also in a private range (so
another NAT layer), then m0n0 is going to be doing NAT itself.

Getting the whole lot to work should be possible, but it ain't gonna be all
that friendly if you ever want to do any port forwarding at all.

> Now, the real problem. I cannot get past the Nic WAN?1 when I 
> try to ping cable modem directly, it says:
> Pinging 192.168.143.43 [192.168.1.1] destination host unreachable?!

First thing to do is to disable "block private networks" on the WAN setup
page. The "destination host unreachable" error is most likely because you
can't route from 10.1.0.2 (your def. gateway) back into your own network
(192.168).

If the cable modem doesn't have any non-NAT modes, you'll need to run it as
an additional NAT layer. When you connect the cable modem directly to a PC,
what IP does the PC get? Is it in the 192.168 range? If so, the cable modem
is definitely running as a NAT layer. If not, and your PC gets the true
10.2.114.20 address, then your modem is most likely already running as a
bridge.

If you're tied into your provider and can't get a public-routable address,
I'd set it up like this:
1) Connect cable modem to a single PC and use its web interface to
reconfigure it to work in non-NAT mode if possible (might be called PPP
half-bridge, IP passthrough, DHCP spoof mode, something like that). Then
give it your external IP (10.2.114.20).
2) Tell m0n0 to get the IP automatically by DHCP on the WAN interface.
3) Make sure to untick "block private networks"
4) It should work.

If you can't get the modem running in non-NAT, tell m0n0 to still get its
WAN IP by DHCP, only in this instance it'll get a 192.168 address from the
DHCP server in your modem, not from your provider. It's an additional NAT
layer which will cause problems with port forwarding, but it should work.

Regards,

Chris
-- 
C.M. Bagnall, Partner, Minotaur
Tel: (07010) 710715   Mobile: (07811) 332969   ICQ: 13350579
AIM: MinotaurUK   MSN: minotauruk at hotmail dot com   Y!: Minotaur_Chris
This email is made from 100% recycled electrons