dual nic problems with susefirewall2

Hi
this is partly in regard to my earlier posted problems on dual nics in the
same subnet. Thanks to all who answered. I finally know the problem -
arp-flux. For those who want to know more and the direct soln check
http://www.inlab.de/balanceng/faq.html#Q2.08:

However now i have a furthur problem. When i start susefirewall2 my second
nic is now blocked and cannot be pinged from another m/c even after
shutting down the firewall. Right now only restarting w/o firewall (and the
correct arp flags which are now directly set in a script in if-up.d)
resolves my problem. I checked the arp flags in /proc/sys/net/ipv4/conf/
for my eth devices - arp_anounce and arp_ignore - and both are in order
(vals are 2 and 1).

I've tried playing around with the firewall config /etc/sysconfig/
SuSEfirewall2 by changing FW_KERNEL_SECURITY="no" and
FW_ALLOW_FW_BROADCAST="yes" but no change. Both my nics are configured in
FW_DEV_EXT.

I've even cross-checked which flags in /proc/.....conf/eth and /all are
changed before and after starting firewall. Reset these after shutting down
the firewall but no mercy.

help ! i dont have much hair left to pull.

carlos

Carlos,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

Has your problem been resolved? If not, you might try one of the following options:

- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at
http://support.novell.com.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)

Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html

If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.

Good luck!

Your Novell Product Support Forums Team
http://support.novell.com/forums/