Hi,

I'm running a RedHat 5.2 server as a router with IP Masquerade.
Local network is 10BT 192.168.1.xxx, remote network is
also 10BT, 206.x.y.z... 

I am having problems with one of the local network machines
getting to the outside network.

It's a dual-boot machine.  When it runs RedHat, it works
fine, and can use all TCP/IP services through the router.
When it runs Win98, UDP and ICMP (ping) work fine, but
TCP connections only work on the local LAN, not through
the masquerading router. (!!)

Proof:
1. Test ping to the router
2. Test ping to an "outside" machine
3. Test DNS lookup to outside machine
4. Test TCP connection to local machine (e.g. telnet or http)
5. Test TCP connection to outside machine (using domain name or raw ip address).

When the local machine is running RedHat it passes all tests.
When it runs Win98 it fails tests 4 & 5.

Output of "tcpdump" on the router shows that UDP packets (DNS) and ICMP packets
are passing correctly through the router.  But when a tcp connection
is initiated from the local machine, nothing shows up on tcpdump on the
router!!

What the heck??

For reference, the masquerading rules are attached.

Also note:  MTU is set to 1500 on the router.

Thanks in advance for any and all help.

Mike Beller
-------

# IP Masquerade and Firewall
ipfwadm -F -p deny
ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0

# minimal hack to keep out bad smb stuff
ipfwadm -I -a deny -W eth0 -D any/0 137:139 -P udp
ipfwadm -I -a deny -W eth0 -D any/0 137:139 -P tcp

# Now you need to allow real audio and ftp to work normally through firewall
modprobe ip_masq_ftp
modprobe ip_masq_raudio
------------


_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]

Reply via email to