Hello.
I am new to IP masquerading but not to networking.
I am in the process setting up a new Linux 2.0.36 system to act as an Internet
gateway/firewall and as in Intranet server for a colleague.
He has only one IP address assigned by his ISP and I plan to use diald to manage
the connection and IP Masquerading to enable his W9x workstations to access
the world.
So far, all internal networking is AOK and diald connection management is
working as required.
Where I am stuck is with the IP Masq config.
I have got to the point where the first four tests in the HowTo work
successfully but test 5 fails.
What happens when a W98 box tries to ping an external IP address (203.2.199.1
- one of mine) is that diald kicks in and a connection is created to the ISP
but no ICMP replies are received by the PC. Every outbound request "times out".
However, if I run tcpdump on the Linux gateway box, I see ICMP packets flowing
back and forth as expected on the Ethernet connection but nothing at all on
the PPP interface.
If I ping the same address from the Linux box (at the same time), I get normal
response; so the link is up.
I also notice that while the PPP link is up, test three fails. As soon as the
link goes down, test three works again.
I have tried several variations of ipfwadm rules including one which allows
everything before adding the masquerade rule. All variatons produce the same
behaviour above.
I have included a defaultroute option in my diald config and this seems to
work as I can access anywhere from the Linux box.
Having got to the hair-tearing stage over the past few days, I would greatly
appreciate any advice as to what I have done or failed to do to prevent
masquerading from working as advertised.
Cheers and thanks,
Stephen Davies
========================================================================
Stephen Davies Consulting
[EMAIL PROTECTED]
Adelaide, South Australia. Voice:
041-980 1417
Computing & Network solutions. Fax: 08-82728863
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
