saludos.. ala comunidad. tengo un equipo con centos 6.4. maneja dos tarjetas.
eth0 para la net
eth1 para la red local..
estoy implementando un servidor dhcp .. en el servidor eth1 ,
hace la funcion .. de dhcp para la red local. todo ba bien le asigna
direcciones ip.. pero no le da acceso a internet a los clientes.
esta es mi configuracion..
el firewall. lo manejo con shorewall..

###############puertos####################
ACCEPT all fw tcp 22
ACCEPT all fw tcp 20,21,80,443,30300:30309
ACCEPT loc net tcp 20,21,80,443
ACCEPT loc net tcp 25,110,143,465,587,99,995
ACCEPT loc net tcp 43,53,63,123

# The manpage is also online at
# http://www.shorewall.net/manpages/shorewall-interfaces.html
#
###############################################################################
#ZONE INTERFACE BROADCAST OPTIONS
net eth0 detect dhcp,blacklist
loc eth1 detect dhcp,blacklist

# Shorewall version 4 - Zones File
#
# For information about this file, type "man shorewall-zones"
#
# The manpage is also online at
# http://www.shorewall.net/manpages/shorewall-zones.html
#
###############################################################################
#ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS
fw firewall
net ipv4
loc ipv4

#SOURCE DEST POLICY LOG LIMIT: CONNLIMIT:
# LEVEL BURST MASK
#
############la company####################
fw all ACCEPT
net all DROP info
loc all REJECT info

For information about entries in this file, type "man shorewall-masq"
#
# The manpage is also online at
# http://www.shorewall.net/manpages/shorewall-masq.html
#
#############################################################################################
#INTERFACE:DEST SOURCE ADDRESS PROTO PORT(S) IPSEC MARK USER/
# GROUP
eth0 eth1

[root@gil664 shorewall]# cat /etc/resolv.conf
nameserver 8.8.8.8
nameserver 8.8.4.4
search gil664.lacompany.net

# sysctl.conf(5) for more details.

# Controls IP packet forwarding
net.ipv4.ip_forward = 1

# Controls source route verification
net.ipv4.conf.default.rp_filter = 1

??????????????????????????

[root@gil664 shorewall]# ^C
[root@gil664 shorewall]# ^C
[root@gil664 shorewall]# ^C
[root@gil664 shorewall]# ^C
[root@gil664 shorewall]# cat /etc/sysconfig/network-scripts/ifcfg-et1
cat: /etc/sysconfig/network-scripts/ifcfg-et1: No such file or directory
[root@gil664 shorewall]# vim /etc/sysconfig/network-scripts/ifcfg-eth1
DEVICE=eth1
HWADDR=00:18:F8:0E:D1:CC
TYPE=Ethernet
UUID=72d830f4-72a1-4074-a84a-05fe8eb06bc7
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=static
IPADDR=192.168.2.1
NETMASK=255.255.255.0

esta es mi configuracion para ... dhcp

root@gil664 ~]# vim /etc/dhcp/dhcpd.conf
# Si se tienen problemas con equipos con Windows Vista/7/8, omita el parámetro
# server-identifier. Ésto aunque rompe con el procolo DHCP, permite a los
# clientes Windows Vista/7/8 poder comunicarse con el servidor DHCP y acceptar
# la dirección IP propocionada.
# server-identifier 172.16.1.1;
ddns-update-style interim;
ignore client-updates;
authoritative;
default-lease-time 900;
max-lease-time 7200;
option ip-forwarding off;
option domain-name "lacompany.net";
option ntp-servers 0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org, 3.pool.ntp.org;

shared-network redlocal {
subnet 192.168.2.0 netmask 255.255.255.0 {
option routers 192.168.2.1;
option subnet-mask 255.255.255.0;
option broadcast-address 192.168.2.99;
option domain-name-servers 192.168.2.1;
option netbios-name-servers 192.168.2.1;
range 192.168.2.2 192.168.2.98;
}
}

saludos,. alguna sugerencia... .