Masquerading, NAT; Clients cannot ping

Hello,

I have problems sharing the internet connection of my SuSE 10.2 box
(Susebox). What's wrong?

Symptoms:
---------

Clients from 192.168.1.0/24 can ping Susebox, both on the internal
(192.168.1.11), as well as on the external (192.168.2.69) ip address.

Susebox can ping it's nameserver (192.168.2.12).

Clients cannot ping the nameserver of Susebox.

Setup:
------

Susebox:~ # cat /proc/sys/net/ipv4/ip_forward
1

Susebox:~ # ifconfig | grep -A1 eth
eth0 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx:xx
inet addr:192.168.2.69 Bcast:192.168.2.255 Mask:255.255.255.0
--
eth1 Link encap:Ethernet HWaddr yy:yy:yy:yy:yy:yy
inet addr:192.168.1.11 Bcast:192.168.1.255 Mask:255.255.255.0

Susebox:~ # route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.2.2 0.0.0.0 UG 0 0 0 eth0

Susebox:~ # iptables --table nat --list POSTROUTING
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE 0 -- 192.168.1.0/24 anywhere

Other firewall rules are usually active (from the SuSE2firewall) but it
does not help if this rule is the only active one.

Oswald,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

Has your problem been resolved? If not, you might try one of the following options:

- Do a search of our SDB at http://en.opensuse.org/SDB:SDB
- Check all of the other information and support options available at
http://www.opensuse.org/
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)

Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html

If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.

Good luck!

Your Novell Product Support Forums Team
http://support.novell.com/forums/