On Thu, 15 Jun 2000, Michael Stearne wrote about, Re: IP masq/network help:
> Does this involve 2 network cards? One for the @home (24.12.....) and one for
> the local IP (192.168.0.2)?
Yes it does involve 2 ethernet cards, i was very unclear on that point,
sorry.
>
> What would I define the computer as in /etc/hosts? (Or in the IP address spot
> of linuxconf?)
I let DHCP do all the work on the ineternet/modem side as i get a dynamic
IP. As to a host name i use my ampr.org address which is assigned to my Ham
radio callsign, 44.137.28.48. However you could name your machine what you
want, give it a ip in the private range of 192.xx.xx.xx or 10.0.0.x
Use my example script after changing the IP#'s.
>
> Thanks,
> Michael
>
>
> Richard Adams wrote:
>
> > On Thu, 15 Jun 2000, Michael Stearne wrote about, IP masq/network help:
> > > I just got a cable modem and would like to run ipmasq or ipchains
> > > through the linux box for the other computers on the LAN. I have RH
> > > 6.1, ipchains 1.3.9. I had it set up fine before the cable modem using
> > > a dialup modem. I used linuxconf to change the client network
> > > settings. I can see the modem and work fine with it if the IP address
> > > is set to the assigned ip address by the provider (24.12.124.xxx), but
> > > no other computers on the internal net (192.168.0.2, etc). If I change
> > > the IP address of eth0 to 192.168.0.2, I no longer get the modem
> > > connection. In ipchains (actually, the script I use to start
> > > ipchains), it picked up on the ppp0 when it connected (I guess), there
> > > is a line that says: echo "1" > /proc/sys/net/ipv4/ip_dynaddr. What is
> > > the equivilent of that when you have a static IP. My question is how do
> > > you assign 2 IP addresses to one adapter ,24.12.124.xxx and 192.168.0.2,
> > > so the modem sharing clients can use 192.168.0.2 as their router addr
> > > and the modem sharer can actually use the real IP addr, 24.12.124.xxx.
> >
> > To put all the above in a nutshell, all that is needed is the router, to
> > have ip_forwarding set to 1 or as we say enabled.
> >
> > create a script, simalar to the following.
> >
> > #!/bin/sh
> >
> > #
> > # The following taken from
> > # http://members.home.net/ipmasq/ipmasq-HOWTO-1.79-3.html#ss3.3
> > #
> > #
> > # Enable simple IP forwarding and Masquerading
> > #
> > # NOTE: The following is an example to only allow IP Masquerading
> > # for the 192.168.0.2 and 192.168.0.8 machines with a 255.255.255.0
> > # or a "24" bit subnet mask.
> > #
> > # Please change this network number and subnet mask to match your
> > # internal LAN setup
> > #
> > # Load modules first
> >
> > # /sbin/modprobe ip_masq_ftp
> >
> > /sbin/ipchains -M -S 7200 10 160
> > /sbin/ipchains -P forward DENY
> > /sbin/ipchains -A forward -s 192.168.0.8/32 -j MASQ
> >
> > No need to do any other stuff on the router, simply have all the 192
> > network route via your router.
> > Teh other machines set thier proxy for example in netscape via you, you run
> > httpd with prxy enabled.
> >
> > They can http via you, or telnet ftp ping do what they want via you, its as
> > simple as that.
> >
> > You can of course read the HOWTO and add rules for just about everything
> > one could imagen.
> >
> > >
> > > This is the info the provider gave me:
> > > Primary DNS: 24.2.212.12
> > > Secondary DNS: 24.2.212.14
> > > Default Gateway: 24.12.124.1
> > > Netmask: 255.255.255.0
> > > Broadcast Addr: 24.12.124.255
> > > IP Addr: 24.12.124.xxx
> > >
> > > Where do I put this info, whether through ifconfig or linuxconf, in
> > > /etc/hosts and /etc/resolv.conf, etc.
> > >
> > > Thanks,
> > > Michael
> > >
> > >
> > >
> > > -
> > > To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
> > > the body of a message to [EMAIL PROTECTED]
> > > Please read the FAQ at http://www.linux-learn.org/faqs
> > --
> > Regards Richard
> > [EMAIL PROTECTED]
> > http://people.zeelandnet.nl/pa3gcu/
--
Regards Richard
[EMAIL PROTECTED]
http://people.zeelandnet.nl/pa3gcu/
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.linux-learn.org/faqs
