Slightly I want to modify my yesterday mail. In a PC with modem, which is to act as masq server, I have already installed iptables. However starting its daemon during startup was disabled by me. Now I have followed IP-masquerade howto. I made rc.firewall-2.4 , put it in /etc/rc.d and firewall-2.4 in /etc/rc.d/init.d/. Now when I ran rc.firewall-2.4 in command line, I get errors many modules are already running. Further gateway ip address of eth0, I can ping. When masq server is connected to internet, I can ping its dynamically allocated ip address. But I can't ping its dns server by its number also. The rules were intially as propsed by ip-masq howto
[EMAIL PROTECTED] root]# netstat -rn Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 61.1.161.42 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0 192.168.16.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo 0.0.0.0 61.1.161.42 0.0.0.0 UG 0 0 0 ppp0 [EMAIL PROTECTED] root]# iptables -t nat -L Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination MASQUERADE all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination [EMAIL PROTECTED] root]# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere LOG all -- anywhere anywhere LOG level warning Chain OUTPUT (policy ACCEPT) target prot opt source destination but after doing [EMAIL PROTECTED] root]# iptables -P FORWARD ACCEPT [EMAIL PROTECTED] root]# iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere LOG all -- anywhere anywhere LOG level warning Chain OUTPUT (policy ACCEPT) target prot opt source destination In this copndition masq is working. Only I want some clarification. Why it is now working but not with previous rules. In both general condition of ACCEPT all -- anywhere anywhere exists. -- L.V.Gandhi 203, Soundaryalahari Apartments, Lawsons Bay colony, Visakhapatnam, 530017 MECON, 5th Floor, RTC Complex, Visakhapatnam AP 530020 INDIA
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
