firewall prerequisite

["Casey W. Liscum" <hal@blankspace.org>]

I have a potential firewall box set up with 2 NICs (3c59x and tulip).
They are both loaded and appear in /proc/interrupts.  I am able to
ping outside but not the internal network.  Boxen inside also cannot
see the firewall.  I know this is an easy question, but I swear I
can't figure it out.  Both the firewall and the internal box I'm using
to test are stock potato r2 (except for the 2.4.1 kernel in the
firewall, but I had this problem with the orig kernel too).  I'm
getting frustrated..  

Below, aaa.bbb.ccc.ddd is my working external IP

My /etc/network/interfaces has the following records:
iface eth0 inet static
	address aaa.bbb.ccc.ddd
	netmask 255.255.255.0
	network aaa.bbb.ccc.0
	broadcast aaa.bbb.ccc.255
	gateway aaa.bbb.ccc.1
iface eth1 inet static
	address 192.168.1.3
	netmask 255.255.255.0
	network 192.168.1.0
	broadcast 192.168.1.255
#	gateway aaa.bbb.ccc.ddd


hal@hash:~$ /sbin/ifconfig
eth0      Link encap:Ethernet  HWaddr 00:A0:CC:3F:08:BF  
          inet addr:aaa.bbb.ccc.ddd  Bcast:aaa.bbb.ccc.255 Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:3039 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2498 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          Interrupt:11 Base address:0xe800 

eth1      Link encap:Ethernet  HWaddr 00:10:5A:14:D7:11  
          inet addr:192.168.1.3  Bcast:192.168.1.255 Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:7 errors:1 dropped:0 overruns:0 frame:2
          TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          Interrupt:5 Base address:0xe400 
...

Any ideas are much appreciated!
thanks

-- 
Casey W. Liscum
I used to think I was indecisive, but now I'm not so sure.