Hi Bryan,
Rick is correct, with the possible exception of the 'ping' issue.
After you setup "ipfwadm", your Linux box is the running in "ip
forwarding" mode... <read, it's a router>, AND if you have also
implemented "ip_masquerading" <other terms are NAT "network address
translation, or in the Cisco world PAT "port address translation">, at
this point, you should have full visibility.
There are some 'funky' routing issues with "ip_masquerading", but that's
a lesson for another day.
You require the "ip_masquerade" because you are using a "private address
space" on your LAN. I agree with Rick's suggestion to use
"192.168.1.xxx" rather than "192.168.0.xxx". I too have encountered
Microsloth products which 'gag' on portions of the ip address space. M$
undoubtedly considers those to be "features"... <grin>
Happy "Linuxing"
Best regards
Derrick Barbour <----- ex-patriot Newfie, in Washington DC
Rick Marshall wrote:
> Bryan Taylor wrote:
>
>> Hello, Wonder if anyone has the time to take a look at what I have
>> done, I have tried everything I can think of but I still cannot get
>> it to work right, had it working before, a while back, but never
>> saved the settings I was using for the routing table... :) I have a
>> three computer lan set up as follows:192.168.0.1 Linux Slackware
>> 3.6.0192.168.0.2 Windows 98192.168.0.3 Windows 95I want to
>> have all three machines on the local network as well as route
>> through the Linux machine to the Internet via PPP, I can connect and
>> surf, ftp, etc, but I cannot ping outside of the machine I connect
>> to, and none of the windows machines will go past the linux
>> machine. The config on the win machines is correct, but the routing
>> table is shagged up in Linux. Here is a look at my setup
>> files,/etc/rc.d/rc.inet1 contains the following
>> lines.---------------------------/sbin/ifconfig lo
>> 127.0.0.1/sbin/route add -net 127.0.0.0 netmask 255.255.255.0
>>
>loIPADDR="192.168.0.1"NETMASK="255.255.255.0"NETWORK="192.168.0.0"BROADCAST="192.168.0.255"GATEWAY="192.168.0.1"/sbin/ifconfig
>> eth0 ${IPADDR} broadcast ${BROADCAST} netmask ${NETMASK}/sbin/route
>> add -net ${NETWORK} netmask ${NETMASK} eth0 if [ ! "$GATEWAY" =
>> "" ]; then/sbin/route add default gw ${GATEWAY} netmask
>> 255.255.255.0 metric 1fi /etc/ppp/options (works
>>
>ok.)-----------------------crtsctsasyncmapdefaultroutemodem/dev/ttyS10.0.0.0:noipdefaultipcp-accept-remoteipcp-accept-localdebug
>> /etc/hosts
>> /etc/hosts.conf--------------
>> ----------------------127.0.0.1 localhost
>> order hosts, bind192.168.0.1 victory multi
>> on After system startup, route -n shows the following routing
>> table.Destination Gateway Genmask flag
>> metric ref use iface192.168.0.0 0.0.0.0
>> 255.255.255.0 U 0 0 6
>> eth00.0.0.0 0.0.0.0 255.255.255.0 U
>> 1 0 0 eth0127.0.0.0 0.0.0.0
>> 255.0.0.0 U 0 0 1 lo After
>> running ppp-go and connecting to the net and receiving local and
>> remote IP's the routing table looks like this: Destination
>> Gateway Genmask flag metric ref use
>> iface142.163.7.190 0.0.0.0 255.255.255.255 UH
>> 0 0 0 ppp0192.168.0.0 0.0.0.0
>> 255.255.255.0 U 0 0 6
>> eth00.0.0.0 0.0.0.0 255.255.255.0
>> U 1 0 0 eth0127.0.0.0
>> 0.0.0.0 255.0.0.0 U 0
>> 1 lo Now I type/sbin/route add default ppp0to add the default
>> route to ppp0 and then add this line to the table
>> above...Destination Gateway Genmask flag
>> metric ref use iface0.0.0.0 0.0.0.0
>> 0.0.0.0 U 0 0 0 ppp0 Now
>> that I am connected I try a few thigns to see what works.ping
>> 204.101.251.1 (My nameserver on ISP) no replyping
>> www.nf.sympatico.ca (ISP Web server) and I get a reply.ping
>> 142.163.7.190 (Remote connection) and I get a replyanywhere else, no
>> reply.Ftp anywhere and it works.Fire up X and load netscape and
>> browse all day long, works ok.Windows machines cannot see the
>> internet at all... :(connected to the net or not, I can ping to and
>> from all three machines I have here on the lan perfectly, but not
>> past the linux machine.I know it is a routing problem, but what I
>> need is wha tI am not sure of, looks like I am not pointing to a
>> gateway when connected to the internet... or I am pointing to two
>> gateways and packets are getting tossed in a loop...Also, If I load
>> up Internet Explorer on my windows machines and http://192.168.0.1,
>> I get connected to the Apache Web server on the Linux Machine, and
>> all is well there. Anyone got any ideas??? Once I get this working I
>> am gonna store the settings on my web page in case someone else
>> needs them or if I need them myself.
>
> You need ipfwadm setup to get from the windows boxes to the outside
> world. But even then I don't think you can ping through the gateway.
> You need to be on it. Also I never use 192.168.0.nnn, use
> 192.168.1.nnn instead because some MS products don't like a 0 in the
> network address.
>
> I use
>
> FW=/sbin/ipfwadm
>
> ${FW} -F -f
>
> ${FW} -F -a m -P tcp -S 192.168.1.0/24
> ${FW} -F -a m -P udp -S 192.168.1.0/24
>
> ${FW} -M -s 3600 0 0
>
> in my rc.local file.
>
> This is straight from the Masquerading howto. You need to turn on
> masquerading in the kernel.
>
> Rick
-
To unsubscribe from this list: send the line "unsubscribe linux-ppp" in
the body of a message to [EMAIL PROTECTED]
