First, I don't believe ipmasqadm is installed by default. There should be an
rpm for it onthe CD or you san ftp from the mirrors or rpmfind.com

Second, which security level did you select on install... I mad et eh
mistake of choosing somehting like high, and couldn't get a damned thing to
work from outside the box. I even tried someones suggestions of using msec
to set security to zero, and that only made things more confusing. There
must be a hundred different places where MDK7.1 puts restrictions on outside
use, and I can't find them all. I actually install RH6.9.5Beta(Pinstripe) to
get a fully functional box gaani, and I'm going to work my MDK problems out
later.

You may wish to try opening up security a bit and see where restrictions
have ben stuck.

--Greg

>
> I've read and re-read and re-read the IPCHAINS how-to, and I still can't
figure out how to accomplish port forwarding with mandrake 7.1.
>
> Consider the following scenerio:
>
> LM 7.1 box with 3 network cards:
> eth0 - IP of 1.2.3.4 - outside internet connection
> eth1 - IP of 192.168.1.1 - connects to internal workstations
> eth2 - IP of 10.0.0.1 - connects to a webserver machine.
>
> Workstation connected to eth1 with an IP of 192.168.1.10
> HTTP Server connected to eth2 with an IP of 10.0.0.2
>
> Ok, I have eth1 masquerading to eth0 nicely.  That was the easy part.
>
> Question #1. How do I set up port forwarding so that I can access my
workstation (192.168.1.10)'s PC ANYWHERE program running on ports 5631-5632?
I used to do this on an old Mandrake machine with:
>
> ipmasqadm portfw -a -P tcp -L $extip 5631 -R 192.168.1.10 5631
> ipmasqadm portfw -a -P udp -L $extip 5632 -R 192.168.1.10 5632
>
> (where $extip was my external web ip - in this case, 1.2.3.4)
> However, apparently there is no more ipmasqadm.  So how do I do this?
>
> ======================================
>
> Question #2.
>
> I want my workstation (192.168.1.10) to be able to view web pages and
telnet into the server machine (10.0.0.2).
>
> And lastly, I want the web (1.2.3.4) to be able to access telnet and http
ports of 10.0.0.2's machine.
>
> The How-to would have been a lot more informative if they had an example
like this.
>
> Bob
>

 
______________________________________________________________________________
Vous avez un site perso ?
2 millions de francs � gagner sur i(france) !
Webmasters : ZE CONCOURS ! http://www.ifrance.com/_reloc/concours.emailif



Reply via email to