Hey Everyone..
Welp.. I think I've tracked down a problem here with Redhat5's IPFWADM.
I've found that if I setup MASQ on a Redhat5 box with all of the
recent patches, it works fine and the output of the MASQ entries
from IPFWADM table looks good:
[root@trinity ipfwadm-2.3.0]# ipfwadm -lM
IP masquerading entries
prot expire source destination ports
udp 00:10.79 stimpy2.trinnet.net proxy.frmt1.sfba.home.com 1033 (61007) ->
domain
tcp 01:50.47 stimpy2.trinnet.net ftp.redhat.com 1051 (61008) -> ftp
*BUT*.. as soon as I do an ICMP ping from a MASQ'ed box and then look
at the table again, I get:
[root@trinity ipfwadm-2.3.0]# ipfwadm -lM
IP masquerading entries
ipfwadm: unexpected input data
Try `ipfwadm -h' for more information.
So, I thought that this might be an issue with the timeout patch
but low and behold, the stock IPFWADM code won't compile under
Glibc v2. Now, Redhat has patched their code to make it compile
under glibc so I grabbed ALL the sources and patches, recompiled
successfully but it didn't solve a THING. Even after a
reboot. Any ideas?
--David
(here is the source dir with ALL the patches that I used)
-rw-r--r-- 1 root root 17982 Jul 30 1996 COPYING
-rw-r--r-- 1 root root 4049 Jul 30 1996 ChangeLog
-rw-r--r-- 1 root root 1544 Jul 30 1996 Makefile
-rw-r--r-- 1 root root 3780 Jul 30 1996 README
-rw-r--r-- 1 root root 19365 Jul 30 1996 ipfw.4
-rwxr-xr-x 1 root root 26521 Apr 14 09:59 ipfwadm
-rw-r--r-- 1 root root 2908 Apr 14 09:58
ipfwadm-2.3.0-generic-timeout.patch
-rw-r--r-- 1 root root 1176 Apr 14 09:57
ipfwadm-2.3.0-glibc.patch
-rw-r--r-- 1 root root 13022 Jul 30 1996 ipfwadm.8
-rw-r--r-- 1 root root 53135 Apr 14 09:58 ipfwadm.c
-rw-r--r-- 1 root root 52387 Apr 14 09:57 ipfwadm.c.orig
-rw-r--r-- 1 root root 423 Jul 30 1996 ipfwadm.lsm
.----------------------------------------------------------------------------.
| David A. Ranch - Remote Access/Linux/PCs [EMAIL PROTECTED] |
!---- ----!
`----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----'
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]
