Hey Everyone,
Wow! I'm sorry this took so long but I hope it was wort the wait!
If I could as a favor from ALL of you, please read this new HOWTO
and see if you can catch any spelling mistakes, typos, un-clear
sections, missing FAQ entries, etc. Once all the little wrinkles
have been ironed out, it will be submitted to the LDP project.
If you already received a BETA version of this document, please
submit any errors you might have found but I hope I already
caught them.
Currently, you can download v1.62 of the HOWTO in HTML, TXT, and SGML
formats from my WWW site and it will be soon posted to the IP MASQ WWW
page as well.
http://www.ecst.csuchico.edu/~dranch/LINUX/index-linux.html#ipmasq
---
Linux IP Masquerade mini HOWTO
Ambrose Au, [EMAIL PROTECTED]; David Ranch, [EMAIL PROTECTED]
v1.62, March 21, 1999
This document describes how to enable the Linux IP Masquerade feature on a
given Linux host. IP Masq is a form of
Network Address Translation or NAT that allows internally connected computers
that do not have one or more
registered Internet IP addresses to have the ability to communicate to the
Internet via your Linux box's single Internet
IP address.
1. Introduction
1.1 Introduction to IP Masquerading or IP MASQ for short
1.2 Foreword, Feedback & Credits
1.3 Copyright & Disclaimer
2. Background Knowledge
2.1 What is IP Masquerade?
2.2 Current Status
2.3 Who Can Benefit From IP Masquerade?
2.4 Who Doesn't Need IP Masquerade?
2.5 How does IP Masquerade Work?
2.6 Requirements for IP Masquerade on Linux 2.0.x
2.7 Requirements for IP Masquerade on Linux 2.2.x
3. Setting Up IP Masquerade
3.1 Compiling the Kernel for IP Masquerade Support
3.2 Assigning Private Network IP Addresses to the Internal LAN
3.3 Configuring IP Forwarding Policies
4. Configuring the other internal to-be MASQed machines
4.1 Configuring Microsoft Windows 95
4.2 Configuring Windows NT
4.3 Configuring Windows for Workgroup 3.11
4.4 Configuring UNIX Based Systems
4.5 Configuring DOS using NCSA Telnet package
4.6 Configuring MacOS Based System Running MacTCP
4.7 Configuring MacOS Based System Running Open Transport
4.8 Configuring Novell network using DNS
4.9 Configuring OS/2 Warp
4.10 Configuring Other Systems
5. Testing IP Masquerade
6. Other IP Masquerade Issues and Software Support
6.1 Problems with IP Masquerade
6.2 Incoming services
6.3 Supported Client Software and Other Setup Note
6.4 Stronger IP Firewall (IPFWADM) Rulesets
6.5 IP Firewalling Chains (ipchains)
6.6 IP Masquerading multiple internal networks
6.7 IP Masquerade and Dial-on-Demand Connections
6.8 IPPORTFW, IPMASQADM, IPAUTOFW, REDIR, UDPRED, and other Port
Forwarding tools
6.9 CU-SeeMe and Linux IP-Masquerade
6.10 Mirabilis ICQ
6.11 Gamers: The LooseUDP patch
7. Frequently Asked Questions
7.1 What Linux Distributions support IP Masquerading out of the box?
7.2 What are the minimum hardware requirements and any limitations for IP
Masquerade? How well does it perform?
7.3 I've checked all my configurations, I still can't get IP Masquerade to
work. What should I do?
7.4 How do I join the IP Masquerade Mailing List?
7.5 How does IP Masquerade differ from Proxy or NAT services?
7.6 Are there any GUI firewall creation/management tools?
7.7 Does IP Masquerade work with dynamically assigned IP addresses?
7.8 Can I use a cable modem (both bi-directional and with modem returns),
DSL, satellite link, etc. to connect to the
Internet and use IP Masquerade?
7.9 Can I use Diald or the Dial-on-Demand feature of PPPd with IP MASQ?
7.10 What applications are supported with IP Masquerade?
7.11 How can I get IP Masquerade running on Redhat, Debian, Slackware,
etc.?
7.12 TELNET connections seem to break if I don't use them often. Why is
that?
7.13 When my Internet connection first comes up, nothing works. If I try
again, everything then works fine. Why is this?
7.14 IP MASQ seems to be working fine but some sites don't work. This
usually happens with WWW surfing.
7.15 IP Masquerading seems slow
7.16 Now that I have IP Masquerading up, I'm getting all sorts of weird
notices and errors in the SYSLOG log files.
How do I read the IPFWADM/IPCHAINS firewall errors?
7.17 Can I configure IP MASQ to allow Internet users to directly contact
internal MASQed servers?
7.18 IRC won't work properly for MASQed IRC users. Why?
7.19 mIRC doesn't work with DCC Sends
7.20 Can IP Masquerade work with only ONE Ethernet network card?
7.21 I'm trying to use the NETSTAT command to show my Masqueraded
connections but its not working
7.22 I would like to get Microsoft PPTP (GRE tunnels) and/or IPSEC (Linux
SWAN) tunnels running through IP
MASQ
7.23 I want to get the XYZ network game to work through IP MASQ but it
won't work. Help!
7.24 IP MASQ works fine for a while but then it stops working. A reboot
seems to fix this for a while. Why?
7.25 Internal MASQed computers cannot send SMTP mail!
7.26 Why do the new 2.1.x and 2.2.x kernels use IPCHAINS instead of
IPFWADM?
7.27 I've just upgraded to the 2.2.x kernels, why isn't IP Masquerade
working?
7.28 I've just upgraded to a 2.0.36+ kernels later, why isn't IP
Masquerade working?
7.29 I need help with EQL connections and IP Masq
7.30 I can't get IP Masquerade to work! What options do I have for Windows
Platforms?
7.31 I want to help on IP Masquerade development. What can I do?
7.32 Where can I find more information on IP Masquerade?
7.33 I want to translate this HOWTO to another language, what should I do?
7.34 This HOWTO seems out of date, are you still maintaining it? Can you
include more information on ...? Are there
any plans for making this better?
7.35 I got IP Masquerade working, it's great! I want to thank you guys,
what can I do?
8. Miscellaneous
8.1 Useful Resources
8.2 Linux IP Masquerade Resource
8.3 Thanks to the following people..
8.4 Reference
8.5 Changes
.----------------------------------------------------------------------------.
| David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] |
!---- ----!
`----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----'
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
