That frood Mjo sassed:
> Last week I got IP Masquerading working beatifully using ipchains.
> I made some major install changes and now I can't set it up again.
>
> ipchains -P forward DENY
> ipchains -A forward -s 192.168.0.1/24 -d 0/0 -j MASQ
These look fine.
>
> Both commands are accepted. Here is what I get with ipchains -L :
>
> Chain input (policy ACCEPT):
> Chain forward (policy DENY):
> target prot opt source destination ports
> MASQ all ------ 192.168.0.0/24 anywhere n/a
> Chain output (policy ACCEPT):
This also looks fine.
> When it was working, it listed my correct ip address there, not the
> one ending in 0.
That seems a bit odd... presumably you have a little LAN set up,
hence the need to do IP masquerade. I would expect the network
address to show up in the chain listing, as you would certainly want
to masquerade the whole LAN, and in any case the output seems to match
what you gave for commands.
You will of course need to tell the other machines on the LAN to use
the Linux box as their default gateway.... but you probably already
have that set if it was working before.
Have you verified that the Linux box can connect to sites on the 'Net?
How do your routing tables look on that machine? you can check them
with
netstat -rn
Do you have a default gateway? It should be listed with a destination
of 0.0.0.0 on the Linux box. Did you verify that your default gateway
settings were correct on the client machines?
> I'm knocking off one problem at a time that would otherwise make me boot into
> Windows. I got my sound card working today, so I'm almost totally ported
> over. Can't live without those mp3s.
All work and no play makes Tux a dull boy...
=8^)
--
We sometimes catch a window, a glimpse of what's beyond
Was it just imagination stringing us along?
---------------------------------------------------
Derek Martin | Unix/Linux geek
[EMAIL PROTECTED] | GnuPG Key ID: 0x81CFE75D
Retrieve my public key at http://pgp.mit.edu
**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************
