/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
> Did you enable 'ICMP masquerading' when you compiled your kernel? You
> need this enabled to be able to correctly use a machine behind your ipmasq
> server to ping a machine outside of it.
>
Yes I did. I ping hosts on Internet without any problems.
> As long as the client machines are setup to use your ipmasq server as
> their default gateway, then they should never send messages directly to
> your router. If any of your client machines are linux boxes, you can run
> '/sbin/route' to see the routing table.. that should let you know if the
> box is trying to use something else as its gateway.
>
They are Windows 95/98/NT boxes. Here is what they answer to "route print"
before the first attempt to access the corporate network:
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.8.6.2 10.8.6.32 1
10.8.6.0 255.255.255.0 10.8.6.32 10.8.6.32 1
10.8.6.32 255.255.255.255 127.0.0.1 127.0.0.1 1
10.255.255.255 255.255.255.255 10.8.6.32 10.8.6.32 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
224.0.0.0 224.0.0.0 10.8.6.32 10.8.6.32 1
255.255.255.255 255.255.255.255 10.8.6.32 10.8.6.32 1
===========================================================================
(10.8.6.32 is the workstation IP address)
And this is the similar answer after pinging:
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.8.6.2 10.8.6.32 1
10.1.1.1 255.255.255.255 10.8.6.1 10.8.6.32 1
10.8.6.0 255.255.255.0 10.8.6.32 10.8.6.32 1
10.8.6.32 255.255.255.255 127.0.0.1 127.0.0.1 1
10.255.255.255 255.255.255.255 10.8.6.32 10.8.6.32 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
224.0.0.0 224.0.0.0 10.8.6.32 10.8.6.32 1
255.255.255.255 255.255.255.255 10.8.6.32 10.8.6.32 1
===========================================================================
The second line now appears and it is the evil.
I suspect that the problem lies closer to routing, not to masqerading, and
therefore my question is somewhat off topic. But it is also apparently
related to masqerading and I also beleive that masqerading gurus are
competent in routing too.
Thanks.
________________________________
Dmitriy Stepanenko aka Mudropolk
e-mail: [EMAIL PROTECTED]
phone: (380)(06264)1-93-06, local 41-93-06
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
