I'm also currently setting-up up a PLDT ADSL for PPoE
with IPTables.
Mandrake 8.0, I believe, straight from the box,
supports ADSL using PPTP, Bridged DHCP and PPoE and it
is straightforward to implement
firewall/NAT/IPTables/PPPoE while installing from
scratch.
For reference, reading the new Linux ADSL Howto at
http://feenix.burgiss.net/ldp/adsl/
was enlightening. I was able to speak with a PLDT
engineer and he confirms they are using PPPoE,
splitter-type ANTs and they already have several
DSLAM/COs setup. I was not able to confirm what model
and make they use for their DSL modems or whether they
use ATM or frame-relay.
I wanted to know how far I would be from the nearest
DSLAM/CO to ascertain what kind of upstream/downstream
bandwidth they are really giving to customers. The
DSL Howto has some recommendations how to tweak your
your DSL connection and measure upstream/downstream
throughput.The site
http://www.dslreports.com/tweaks
can also help.
For other PPPoe firewall/NAT setup, you could also use
the LRP-type diskette distros like freesco and Coyote
Linux, if you want a 486 router for you homegrown LAN
or cafe. Freesco does not support PPoE officially but
the setup files are in
ftp://www.tecknojunky.com/pub/pppoe4freesco/
Just grab all the files there and along with the
latest .27 version from www.freesco.org, one can have
a diskette router-based PPoE with ipchains,
masquerade, dial-in ppp server etc. Coyote Linux also
supports ADSL/PPoE. Just search their docs and forums
for DSL inquiries.
hth,
Rene Torres
[EMAIL PROTECTED] <--- having mail problems since
epldt took over their infocom pop and migrated to
iplanet imap mta (well, if u control homecable,
skycable, infocom, GMA7, www.inq7.net, your mobile
phone, the local loop,the copper wire, the dsl..what's
next)
--- Federico Sevilla III <[EMAIL PROTECTED]> wrote:
> Hi fellow PLUGgers,
>
> I'll be getting a PLDT DSL connection within a week
> or two, so I think
> it's high time that I do major research on getting
> my Linux box connected
> via PPPoE.
>
> From my initial research there seem to be two pretty
> good ways to go about
> it: use the Roaring Penguin PPPoE client, or use
> kernel-based PPPoE. I'm
> inclined to use the latter (for no particular
> reason), but it looks like
> that will require a patch version of ppp. I'm
> currently using an unpatched
> ppp v2.4.1 from Debian's unstable tree.
>
> Would anyone know if the version of ppp that I have
> will support
> kernel-based PPPoE without needing patching?
>
> Would anyone know what benefits the kernel-based
> PPPoE solution has over
> using the rp-pppoe client? Has anyone gotten IP
> Masquerading to work
> properly with the rp-pppoe client?
>
> Lastly, here's something for those of you who are
> into iptables/netfilter
> (ACENT guys, yoohoo, hehehe): I'm currently using a
> very simple set of
> iptables commands to allow the entire LAN to do IP
> masquerading.
>
> /sbin/iptables -t nat -F
> /sbin/iptables -t nat -A POSTROUTING -o ppp+ -j
> MASQUERADE
>
> The first command flushes the NAT table, and the
> second command allows
> traffic to go out through any ppp interface
> (sometimes I have dial-in
> access which takes up ppp0 which makes the
> connection to the Internet use
> ppp1). I will probably update this to use whatever
> interface the pppoe
> client uses for outgoing traffic.
>
> Will these two commands allow the clients to connect
> to any port on any
> host in the Internet, without allowing any foreign
> (non-LAN) machine to
> connect directly to a local computer?
>
> Thanks in advance (and pardon the messed up grammar,
> it's dinner time and
> I'm hungry). Any leads to good sources of
> information (aside from
> searching on Google which I'll be doing) would be
> appreciated. :)
>
> --> Jijo
__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
