virtual honeynet, not accessible from outside, only from host

[honey () kleinundgemein de]

Hi,

I have a roo config problem, my setup is like that:
http://www.honeynet.org.es/reports/diagram.png

My host is linux (debian 3.1) with VMware Server, my honeypots are Win2k and RedHat 7.0.

But all virtual machines are not accessible from the outside world, only from the host.
The VMware configuration is fine, so it must be a honeywall config error.

host:~#  nmap -p 443 <honeywall-ip> -P0 

Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2006-03-15 16:56 CET
Interesting ports on honeywall.domain.tld (<honeywall-ip>):
PORT    STATE SERVICE
443/tcp open  https
MAC Address: 00:0C:29:CD:71:CD (VMware)

Nmap finished: 1 IP address (1 host up) scanned in 0.308 seconds


outsideserver:~#  nmap -p 443 <honeywall-ip> -P0

Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2006-03-15 16:56 CET
Interesting ports on honeywall.domain.tld (<honeywall-ip>):
PORT    STATE    SERVICE
443/tcp filtered https

Nmap finished: 1 IP address (1 host up) scanned in 2.043 seconds



host:~# ps aux | grep eth1
root       292  0.0  0.0  2500  868 ?        Ss   02:15   0:00 dhclient -e -pf /var/run/dhclient.eth1.pid -lf 
/var/run/dhclient.eth1.leases eth1
root       563  0.0  0.0  1352  312 ?        S    02:15   0:00 /usr/bin/vmnet-bridge -d /var/run/vmnet-bridge-0.pid 
/dev/vmnet0 eth1
root     25310  0.0  0.0  3804  776 pts/1    S+   16:56   0:00 grep eth1


it has probably something to do with HwMANAGER (can post any other config information, too):

[root@honeywall ~]# hwctl -n HwMANAGER
any/0

("any" gave iptables errors and setting ips didn't work either)


I am really thankful for any help since this is for a little project at college.

Thanks

Kai