my IP is 10.0.2.1 for the server and 10.0.2.10 for the host. Here are my ipchains rules :input ACCEPT :forward DENY :output ACCEPT -A forward -s 10.0.2.0/255.255.255.0 -d 0.0.0.0/0.0.0.0 -i ppp0 -j MASQ
And here is my options are ip_forward=yes spoofprotect=no syncookies=no (I have tried spoofprotect=yes and syncookies=yes, but doesn't resolve the pb) All seems to be OK, but I can't see the content of SOME web site. www.freshmeat.com works www.google.com works but www.club-internet.fr does not ! It does only if I get it from the server it self ... And it sometimes works on the host (1 out of 100 tries...) I'm gonna be crazy ! On Wed, 7 Feb 2001 21:48:23 +0100, Bart van Dommelen said: >Hi, > > I also have ipforwarding enabled in /etc/network/options, > first line must be: ip_forward=yes. Furthermore , I have a dialup > connection and when PPP is up, these masquerading rules are > applied: > > ipchains -D forward -j DENY > ipchains -A forward -j MASQ -s 192.168.10.0/24 -d0.0.0.0/0 > > These will enable masquerading from any member from the domain > 192.168.10 to the outside. Don't forget to delete them when the > connection is down. > > > Hope this will help you. > > > > On 7 Feb 2001, at 19:27, [EMAIL PROTECTED] wrote: > > Date forwarded: Wed, 7 Feb 2001 20:23:50 +0100 > To: <[email protected]> > Subject: Problem viewing some web pages > From: <[EMAIL PROTECTED]> > Date sent: Wed, 7 Feb 2001 19:27:59 GMT > Forwarded by: [email protected] > > > Hi, > > > > I have a PC with woody as firewall with kernel 2.2.14 > > I use masquarading. > > My host machine is a woody to with kernel 2.4.0 > > I've noticed that some web site like > > www.club-internet.fr > > is not viewable from the host machine. > > If I ssh to my firewall machine and launch lynx > > http://www.club-internet.fr/ the content of the site > > is shown. > > But doing the same on the host => host contacted > > waiting for reply. But the reply never comes ! > > This happens with some other sites. > > I've tried with windows on the host machine => the > > same. > > Does someone know the solution ? > > Thnx forward > > bye > > > > > > ______________________________________________________________________________ > > ifrance.com, l'email gratuit le plus complet de l'Internet ! > > vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP... > > http://www.ifrance.com/_reloc/email.emailif > > > > > > > > -- > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > > > > Kind regards, > > Bart van Dommelen > > **********************************************************************/ > "Pursuant to US Code, Title 47, Chapter 5, Subchapter II, '227, any and all > unsolicited commercial E-mail sent to this address > is subject to a download and archival fee in the amount of $500 US. > E-mailing denotes acceptance of these terms." > -- ==================================== SnAKes NGUYEN DINH Quoc Huy http://snakes.fr.st/ [EMAIL PROTECTED] ICQ UIN 3398187 ====================================
