/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */



I'm trying to use IP Masquerading at home with my
Ascend Pipleline 25 ISDN Router.  The ISDN Router gets
its external address dynamically from my ISP.  Its
internal address is set to 192.168.0.2.

                Windows Box
                (192.168.0.5)
                      |
ISDN Router           |       Linux Box
(192.168.0.2) -------hub-----(192.168.0.1)
                      |
                      |
                Macintosh Box
                (192.168.0.3)

My linux box (2.2.5-15) has its IP address set to
192.168.0.1 (mask 255.255.255.0), and its gateway set
to 192.168.0.2 (the ISDN router).

The Macintosh and Windows boxes have their gateway set
to 192.168.0.1 (the Linux box) with a mask of
255.255.255.0

The Linux box accesses the external network just fine
and can ping the internal boxes.

The internal boxes can ping and telnet to the Linux
box, but cannot get to external sites, either by
specifying an IP address or domain name.

The IP Masquerading modules are compiled and loaded.
My firewall init script looks like:

/sbin/depmod -a
/sbin/modprobe ip_masq_ftp
/sbin/modprobe ip_masq_raudio
/sbin/modprobe ip_irc
echo "1" > /prob/sys/net/ipv4/ip_forward
/sbin/ipchains -M -S 7200 10 160
/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 192.168.0.0/24 -j MASQ

I'm not sure why this isn't working, and haven't found
a solution in the archives.  Is the ISDN router's
treatment of my packet headers causing IP Masq to
break?

Thanks


_____________________________________________________________
Do You Yahoo!?
Bid and sell for free at http://auctions.yahoo.com



_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to