can't ping to fedora box with filters down from public side

Joe,

> No the Fedora box has it's gateway pointing to the vlan which it is in.
> That vlan is in BM static route table.

ok, does the layer3 switch that handles the VLAN have its default
gateway configured to be the BM server private IP address?

> I am just comming up to speed on Suse. I have to play around with
> Fedira. I learned that when you turn off the firewall on Fedira that
> it didn't remember the settings when you turn it on... (that's a
> different issue)

ok, make sure that the fedora firewall is off when testing, because we
might be chasing ghosts.

> any other thoughts ?

When NAT isn't working as it should there are very few things to check:
- typos in the configuration of the NAT-ed addresses
- packet forwarding enabled
- filtering disabled (for troubleshooting purposes)
- routing
- routing
- routing

Less likely issues are due to ARP try to flush the arp tables of your
switches and stuff like that), but in general they manifest in different
ways than yours.

--
Cat
NSC Volunteer Sysop