o-----------ooO--(- Important  Message -)--Ooo------------o
|                                                         |
| SAVE BANDWITH, SPACE, TIME & MONEY, REPLY WITH PRUDENCE.|
|                                                         |
o----=[ Penguin @ My - Linux ([EMAIL PROTECTED]) ]=----o


Hi,
for the IP masquerading,
I have done it before
dia jalan cantek
I made a documentation on it 
saya gunakan account tmnet dan linux box yang jadi gateway saya set dhcp
containing 
address range yang boleh ditukar
saya gunakan 192.168.1.x
no need to set ip address or proxy on worksatition or client
let them get the ip automatically

here is the document
anyone pls correct any mistake or inform me if that does not work well

happy trying

To set up 'cyber cafe' environment with linux as the LAN server
Requirement 
1- One linux box 2-2-x, with NIC and modem
2- A hub
3- 1 or more workstation 
First, setup internet connection using (I recommend) kppp, mine connecting
to TMNET. Next, make sure your network configuration is correct under netcfg
For reference, here is the content of my /etc/resolv.conf
before connected

search
nameserver 202.188.0.133
nameserver 202.188.1.5

and after connected

domain tm.net.my    #kppp temp entry
search
nameserver 202.188.1.133
nameserver 202.188.1.5
nameserver 202.188.0.133   #kppp temp entry
nameserver 202.188.1.5       #kppp temp entry

Second, set your linux box to run dhcp service
        create & edit a file /etc/dhcpd.conf
my sample:

subnet 192.168.1.0 netmask 255.255.255.0{
range 192.168.1.10 192.168.1.250;
default-lease-time 86400;
max-lease-time 259200;
option routers 192.168.1.1;
option domain-name-servers 202.188.0.133;
option domain.name.servers 202.188.1.5;
option domain-name ^�tm.net.my^�
}

then create an empty file for dhcpd to keep record of what ip given to who
by

touch /etc/dhcpd.leases

next add line into /etc/rc.d/rc.local

/sbin/route add ^�host 255.255.255.255 dev eth0

reboot linux, linux should become dhcp server already.

Third, Setting up masquerading itself
Create and edit file /etc/rc.d/rc.firewall

/sbin/depmod ^�a
/sbin/modprobe ip_masq_ftp
/sbin/modprobe ip_masq_raudio
/sbin/modprobe ip_masq_irc
echo ^�1^� > /proc/sys/net/ipv4/ip_forward
echo ^�1^� > /proc/sys/net/ipv4/ip_dynaddr
/sbin/ipchains ^�M ^�S 7200 10 160
/sbin/ipchains ^�P  forward DENY
/sbin/ipchains ^�A forward ^�s 192.168.1.0/24 ^�j MASQ

you can get more info on this from
http://members.xoom.com/daung/ipmasq.htm

then make the file executable by 

chmod 755  /etc/rc.d/rc.firewall

next add a line /etc/rc.d/rc.local

/etc/rc.d/rc.firewall

reboot the linux and connect your client to use dhcp ip and connect linux to
isp and your client should be able to connect to internet already

-----Original Message-----
From: Wong Kam-Soon [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 19, 2000 10:23 AM
To: [EMAIL PROTECTED]
Subject: [Penguin] IP masquerading ?


o-----------ooO--(- Important  Message -)--Ooo------------o
|                                                         |
| SAVE BANDWITH, SPACE, TIME & MONEY, REPLY WITH PRUDENCE.|
|                                                         |
o----=[ Penguin @ My - Linux ([EMAIL PROTECTED]) ]=----o


hi,
I have a linux system, redhat 6.1
and have all my networking setup, and is working.
But, I can't make something like, when I online,
all my workstation online.
My workstation have set their proxy as 100.0.0.1:80, which is my server ip 
address, but that ip brings them to apache webpage.

I have heard from irc says that this need ip-masquerading, izzit ?

Could any one please teach me how to setup a thing like this ?

(just same as cyber-cafe)

Thank !!

[EMAIL PROTECTED]
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
-
Disclaimer : http://users.my-linux.org/disclaimer.html
-
Disclaimer : http://users.my-linux.org/disclaimer.html

Reply via email to