On 4/19/05, Vittore Zen <drzen at gamebox dot net> wrote:
> My network:
> 
>                        DMZ
>                         ^
>                         |
> public ip 1 <-------> m0n0 1 <----
>                                 |
>                                 +--> LAN
>                                 |
> public ip 2 <-------> m0n0 2 <----
>                         |
>                         |
>                      Wifi LAN
> 
> m0n0 2 has a static route for DMZ to m0n0 1
> m0n0 1 has a static route for Wifi LAN to m0n0 2
> 
> m0n0 1 rules permit:
> - any traffic from LAN
> - any traffic from WAN to DMZ
> - no traffic from DMZ to LAN
> 
> m0n0 2 rules permit:
> - any traffic from LAN
> - any traffic from Wifi LAN to LAN
> - no traffic from WAN
> 
> hosts in LAN can ping and connect to hosts in DMZ
> hosts in LAN can ping but no connect to hosts in Wifi LAN. Why?
> 

Sounds like you're missing a static route on m0n0 1 pointing the wifi
subnet to the LAN IP of m0n0 2.

-Chris