>I checked the How-to and FAQs (BTW the masq mailing list archives are NOT
>searchable - this would be a real time saver). When scanning the diald FAQ
>(http://www.loonie.net/~eschenk/diald/diald-faq-6.html#ss6.11) it says
>that TCP connections are not to be used 'to bring up the link' yet UDP are
This is not what I've seen in the past but I haven't used Diald in a year
or two. Either TCP or UDP would bring the link up.
>Jun 19 20:12:32 router kernel: IP fw-out deny ppp0 UDP W.X.Y.Z:61232
A.B.C.D:53 L=65 S=0x00 I=4096 F=0x0000 T=31
>Jun 19 20:12:47 router kernel: IP fw-out deny ppp0 UDP W.X.Y.Z:61233
E.F.G.H:53 L=65 S=0x00 I=4352 F=0x0000 T=31
>Jun 19 20:13:02 router kernel: IP fw-out deny ppp0 UDP W.X.Y.Z:61232
A.B.C.D:53 L=65 S=0x00 I=4608 F=0x0000 T=31
>Jun 19 20:13:22 router kernel: IP fw-out deny ppp0 UDP W.X.Y.Z:61233
E.F.G.H:53 L=65 S=0x00 I=4864 F=0x0000 T=31
Sorry rod but this is worthless without some form of a key.
Is W.X.Y.Z your internal IPs? Since I see that the port #s are
in the high range, it seems like they are MASQed. Also, since
this is a OUTPUT deny (should be a reject), that means that
you already passed through the INPUT and FORWARD stages.
>echo "masquerade-forwarding from $PRIVATE_NET"
>ipfwadm -F -a accept -m -W $PUBLIC_INT -S $PRIVATE_NET
>
>echo "masquerade-forwarding on $DIALD_INT from $PRIVATE_NET"
>ipfwadm -F -a accept -m -W $DIALD_INT -S $PRIVATE_NET
This strikes me ODD. I understand that you need to point your traffic
to the SLIP interface but I don't thing you need to do this to BOTH
interfaces like this.
--David
.----------------------------------------------------------------------------.
| David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] |
!---- ----!
`----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----'
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
