Mjo wrote:
>
> Last week I got IP Masquerading working beatifully using ipchains.
> I made some major install changes and now I can't set it up again.
>
> I verified I have the right kernel stuff and modules loaded. I use these
> two commands, which worked great a week ago:
>
> ipchains -P forward DENY
> ipchains -A forward -s 192.168.0.1/24 -d 0/0 -j MASQ
These commands are fine. Sort of. Did you mean a source of
192.168.1.0/24, which would be everything on the 192.168.1 network, or
did you mean to have a source of 192.168.0.1. If you only want that one
machine masqueraded, then you need a /32 not a /24.
> Both commands are accepted. Here is what I get with ipchains -L :
>
> Chain input (policy ACCEPT):
> Chain forward (policy DENY):
> target prot opt source destination ports
> MASQ all ------ 192.168.0.0/24 anywhere n/a
> Chain output (policy ACCEPT):
This is reporting exactly what you entered above. Looks fine according
to the rules.
> When it was working, it listed my correct ip address there, not the one ending
> in 0. In DrakConf I have enabled routing and left the default gateway blank
> (so ppp can fill that in which it is set to do). I also selected export
> default route.
If it was listing a single address, I'm guessing that you used a /32,
which would force the filter to match the IP address exactly.
Kenny
**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************
