/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */


Byron Armstrong <[EMAIL PROTECTED]> wrote:
>
>      alias eth0 ne
>      alias eth1 ne
>      options ne io=0x320,0x340

Bravo.  That's correct.  :)

Hopefully you can ping between LAN machines now?

> I can get the activity light on the card now.

That's not necessarily an indication that things are working.  Ping is a
better test.  But it's a good sign.

> ipfwadm -F -p deny
> ipfwadm -F -a accept -m -P tcp -S 192.168.1.0/24

I corrected some typos, which I hope are only that.  If you run
"ipfwadm -Flne", do you see your rules echoed back at you just the way
you think they should look?

> What am I missing?  I think it would be SOMETHING that would tell eth0
> to forward to eth1, or to route packets from one to the other.

Did you configure your kernel with:

    CONFIG_FIREWALL=y
    CONFIG_IP_FORWARD=y
    CONFIG_IP_FIREWALL=y
    CONFIG_IP_MASQUERADE=y
    CONFIG_IP_MASQUERADE_ICMP=y
    CONFIG_IP_ALWAYS_DEFRAG=y

The CONFIG_IP_FORWARD option is the one that's most important.

Again I ask, can you ping between LAN members?  If you can't, work on
that problem first.

You also didn't say what happens when you try to make it work.  How does
it fail?

> Those HOWTO pages aren't very helpfull though.

Why not?  What's missing?

-- 
   [EMAIL PROTECTED] (Fuzzy Fox)      || "Good judgment comes from experience.
sometimes known as David DeSimone  ||  Experience comes from bad judgment."
  http://www.dallas.net/~fox/      ||                 -- Life Lessons

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES 
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to