Hello, My environment is: Linux 2.1.121, kernel is ok for masquerading, firewalling, ... eth0: 172.16.1.2/255.255.255.0 eth1: 212.45.66.129/255.255.255.224 eth0 is connected to a pipeline (172.16.1.1) w/ 128K. eth1 is connected to the hub, so to the local network. local network pcs' are in 212.45.66.128/27 current fw settings are: ------------------------------------------------------------- ipchains -F ipchains -F input ipchains -F forward ipchains -F output ipchains -P output ACCEPT ipchains -P forward DENY ipchains -P input ACCEPT ipchains -M -S 7200 10 60 ipchains -A forward -j MASQ -s 172.16.1.0/0 ipchains -A forward -j ACCEPT -s 212.45.66.128/27 -d 0.0.0.0/0 -p all ipchains -A forward -j ACCEPT -s 0.0.0.0/0 -d 0.0.0.0/0 25 -p tcp ipchains -A forward -j ACCEPT -s 0.0.0.0/0 -d 0.0.0.0/0 110 -p tcp ipchains -A forward -j ACCEPT -s 0.0.0.0/0 -d 212.45.66.128/27 \ 25 -p tcp ipchains -A forward -j ACCEPT -s 0.0.0.0/0 -d 212.45.66.128/27 \ 110 -p tcp ipchains -A forward -j ACCEPT -s 0.0.0.0/0 -d 212.45.66.128/27 \ 1024:65535 -p tcp ipchains -A forward -j ACCEPT -s 0.0.0.0/0 -d 212.45.66.128/27 \ 1024:65535 -p udp ------------------------------------------------------------------------ Everything works, but the masquerading. I am sure I made something wrong, but don't know what it is. In addition, I heard something about this. Linux initially sends the packets by using the closest ethernet device's ip settings, i.e, eth0. If I assign my source IP address other than the eth0's, it will send by using that device's ip settings. mesa1:~# traceroute -s 212.45.66.129 -n 144.122.34.3 traceroute to 144.122.34.3 (144.122.34.3) from 212.45.66.129, 30 hops max, 40 byte packets 1 172.16.1.1 3.025 ms 3.302 ms 3.03 ms 2 212.45.65.8 28.086 ms 47.862 ms 20.736 ms 3 212.45.65.9 25.635 ms 23.075 ms 20.656 ms 4 212.45.65.7 78.957 ms 53.885 ms 23.754 ms 5 194.54.37.53 1383.55 ms 447.342 ms 67.831 ms 6 194.54.37.90 100.396 ms 92.857 ms 137.344 ms 7 193.140.0.6 152.278 ms 150.121 ms 113.479 ms 8 144.122.1.34 202.521 ms 125.298 ms 135.114 ms 9 144.122.34.3 136.722 ms 102.049 ms 99.179 ms mesa1:~# traceroute -n 144.122.34.3 traceroute to 144.122.34.3 (144.122.34.3), 30 hops max, 40 byte packets 1 172.16.1.1 2.916 ms 2.804 ms 2.733 ms 2 212.45.65.8 19.701 ms 19.833 ms 23.612 ms 3 212.45.65.9 28.074 ms 20.191 ms 19.671 ms 4 * * * Any help will be appreciated, -- Regards, Murat Arslan _______________________________________________ Masq maillist - [EMAIL PROTECTED] http://tiffany.indyramp.com/mailman/listinfo/masq Admin requests can be handled by web (above) or [EMAIL PROTECTED] PLEASE read the HOWTO and search the archives before posting.
