/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
Colin Charles wrote:
> We're configuring a small local area network, and would
> like to fix IP Masquerading. The OS of choice happens to be
> Mandrake 7.1. The HOWTO has been read thoroughly, and yet,
> there has been no progress made. Squid has been installed to
> provide WWW access, but thats all - POP3, telnet, et cetera
> do not work. Considering Squid works, LAN setup is assumed
> to be okay.
>
> the /etc/rc.d/rc.firewall file is the standard one that
> came with the HOWTO, with changes made accordingly.
>
> [root@unplugo rc.d]# ipchains -M -L
> IP masquerading entries
>
> There seem to be no entries.
>
> [root@unplugo rc.d]# ipchains -L
> Chain input (policy ACCEPT):
> Chain forward (policy ACCEPT):
> target prot opt source destination ports
> MASQ all ------ 192.111.2.0/24 anywhere n/a
> MASQ all ------ 192.111.2.0/24 anywhere n/a
> MASQ all ------ 192.111.2.0/24 anywhere n/a
> MASQ all ------ 192.111.2.0/24 anywhere n/a
> Chain output (policy ACCEPT):
> Chain acctin (0 references):
> Chain acctout (0 references):
> Chain acctboth (0 references):
> Chain inp (0 references):
> Chain out (0 references):
> Chain fwd (0 references):
> Chain IpFwAdM! (0 references):
>
> However, nothing seems to work. The kernel has everything,
> and its 2.2.15-4mdk. Its been recompiled endlessly, to no
> avail.
>
> Please help. If any more data is required, do not hesitate
> to mail me at [EMAIL PROTECTED] and I'll provide for it.
> Thanks in advance.
it looks like the script you are running is very buggy.
i'd suggest placing a "ipchains -M -L" command after every
ipchains command so you can check the output to see exactly
when things go haywire (or just place the following function
in the script before the first use of ipchains).
function ipchains
{
echo ipchains "$@"
/sbin/ipchains "$@"
/sbin/ipchains -M -L
}
raf
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
