Bit of a follow on with idea's from my previous email. I am having issues attaching services to my 10.0.0.1 address - firewalled mainly. As I do not want to open up many ports on eth0, should I be running the private network on a loopback interface, or virtual interface (tap??) Any hints greatly appreciated. Thankyou Matt mattsoftware.com > Hi Guys. > > I am trying to achieve a private network behind my public internet. > Can anyone let me know where I am going wrong (or of its even possible > to do this??). > > > Interfaces on the host: > * eth0 (public internet, visible to the world) > > > I have a PPTP server on the host which assigns 10.0.1.x addresses. I > want the clients to be able to communicate with the vserver guest. > > Guest is setup with interface 0... > ip = 10.0.0.1 > mask = 255.0.0.0 > dev = eth0 > name=vps > > > All the communication appears to be working fine, until the guest > tries to resolve a DNS entry. On closer inspection it doesn't seem > that that guest can ping any ip outside of the host.... > > bash-3.2# ping 10.0.0.1 > PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. > 64 bytes from 10.0.0.1: icmp_seq=1 ttl=64 time=0.041 ms > 64 bytes from 10.0.0.1: icmp_seq=2 ttl=64 time=0.022 ms > 64 bytes from 10.0.0.1: icmp_seq=3 ttl=64 time=0.024 ms > > bash-3.2# ping 121.50.218.162 > PING 121.50.218.162 (121.50.218.162) 56(84) bytes of data. > 64 bytes from 121.50.218.162: icmp_seq=1 ttl=64 time=0.037 ms > 64 bytes from 121.50.218.162: icmp_seq=2 ttl=64 time=0.017 ms > > bash-3.2# ping 74.50.3.85 > PING 74.50.3.85 (74.50.3.85) 56(84) bytes of data. > > > > bash-3.2# route -n > Kernel IP routing table > Destination Gateway Genmask Flags Metric Ref > Use Iface > 10.0.1.1 0.0.0.0 255.255.255.255 UH 0 0 0 * > 121.50.218.160 0.0.0.0 255.255.255.248 U 0 0 > 0 eth0 > 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 > 0 eth0 > 10.0.0.0 0.0.0.0 255.0.0.0 U 0 0 > 0 eth0 > 0.0.0.0 121.50.218.161 0.0.0.0 UG 0 0 > 0 eth0 > > > Any hints would be appreciated. (of course if you require any more > information let me know what you require and I'll provide :) > > > Thankyou > Matt. > mattsoftware.com >