On Wed, 8 Nov 2000, Dan Browning wrote:
> The VPN-Masq homepage
> (http://www.impsec.org/linux/masquerade/ip_masq_vpn.html) says:
>
> "RedHat has included the VPN patch in kernels 2.2.16-8 and later."
>
> I'm running 2.2.16-22, so I assume that I have the patch.
You do. Unfortunately there's a small bug and the bugfix patch didn't
make it to RH in time to be shipped with RH7.0, so you still have to
visit the VPN Masq home page, download the "second RH extra patch" for
2.2.16 (look for where it discusses maddr 0.0.0.0), and patch and
recompile your kernel.
The bugfix will be in the next errata kernel that RH ships.
> (Would there be an easy way to check /usr/src/linux/... to see if
> I really have it or not?
If ip_masq_pptp.c and ip_masq_ipsec.c are in /usr/src/linux/net/ipv4/,
you have it.
> Would it be quicker if I just downloaded/compiled 2.2.17+vpn_patch
> instead?)
Possibly. It depends on whether you rely on any of the other patches
RH has applied to their kernels.
> But assuming that I do have it, what is the next step? The HOWTO
> didn't mention port forwarding, but I think I might have to.
You need port forwarding *only* if you are masquerading a server. If
you're masquerading a client you do not need port forwarding or ipfwd.
--
John Hardin KA7OHZ ICQ#15735746 http://www.wolfenet.com/~jhardin/
[EMAIL PROTECTED] pgpk -a finger://gonzo.wolfenet.com/jhardin
768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5 E9 BF C8 33 A7 A9 CE 76
1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
"Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
does quite what I want. I wish Christopher Robin was here."
-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
11 days until Thanksgiving
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
