Internet from Windows/NT thru Linux

1998-05-05 Thread iquest
Hi,

  I'm currently connecting to the internet from the Debian/Linux
  box.  I'd like to know how would I go about access the internet
  from other PCs (windows/nt) which are on the same network as my
  Linux box.

  Thanks!
-- 
Timothy C. Phan
Intelligence Quest Research, INC.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread Ben Pfaff
 I'm currently connecting to the internet from the Debian/Linux
 box.  I'd like to know how would I go about access the internet
 from other PCs (windows/nt) which are on the same network as my
 Linux box.

You should probably mention whether you are accessing the internet
through PPP dialup or through Ethernet.  Once you tell us, we can help
you a lot more readily.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread aqy6633
   I'm currently connecting to the internet from the Debian/Linux
   box.  I'd like to know how would I go about access the internet
   from other PCs (windows/nt) which are on the same network as my
   Linux box.

The keyword you are looking for is IP Masquerading
Red the HOWTO and have fun. Works perfectly here.

Alex Y.

-- 
   _ 
 _( )_
( (o___   +---+
 |  _ 7   |Alexander Yukhimets|
  \()|   http://pages.nyu.edu/~aqy6633/  |
  / \ \   +---+


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread Paul Guidera

-Original Message-
From: iquest [EMAIL PROTECTED]
To: Debian User debian-user@lists.debian.org
Date: Tuesday, 5 May 1998 7:49
Subject: Internet from Windows/NT thru Linux


Hi,

  I'm currently connecting to the internet from the Debian/Linux
  box.  I'd like to know how would I go about access the internet
  from other PCs (windows/nt) which are on the same network as my
  Linux box.



There are two main ways (that I am aware of anyway)

1) If you have static IP address from your ISP for all of the machines on
your network.  Recompile your kernel for ip forwarding and set the gateway
of your other pc's to the ip address of your linux box.

2) If you don't have static IP address.  Read the IP-Masquerade HOWTO
(/usr/doc/HOWTO/mini - if you have installed them) which will explain it a
lot better than I can :)

Regards,

Paul.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread iquest
Hi,

  I'm connecting to internet through PPP dialup.

  I've recompiled the kernel with all IP-Masquerade and configured
  one of my NT4.0 box as described in the IP-Masquerade Mini-HOWTO
  and it did not work.

  My Linux box has the IP address: 192.168.188.2
  My NT4.0 has IP address: 192.168.188.4

  I can ping/ftp between machines without any problem.

  Here is an ls /proc/net on my linux box

-r--r--r--   1 root root0 May  4 23:21 arp
-r--r--r--   1 root root0 May  4 23:43 dev
-r--r--r--   1 root root0 May  4 23:21 igmp
-r--r--r--   1 root root0 May  4 23:21 ip_autofw
-rw-r--r--   1 root root0 May  4 23:21 ip_forward
-rw-r--r--   1 root root0 May  4 23:21 ip_input
-r--r--r--   1 root root0 May  4 23:21 ip_masq_app
-r--r--r--   1 root root0 May  4 23:21 ip_masquerade
-rw-r--r--   1 root root0 May  4 23:21 ip_output
-r--r--r--   1 root root0 May  4 23:21 raw
-r--r--r--   1 root root0 May  4 23:21 route
-r--r--r--   1 root root0 May  4 23:21 rt_cache
-r--r--r--   1 root root0 May  4 23:21 snmp
-r--r--r--   1 root root0 May  4 23:21 sockstat
-r--r--r--   1 root root0 May  4 23:21 tcp
-r--r--r--   1 root root0 May  4 23:21 udp
-r--r--r--   1 root root0 May  4 23:21 unix
-r--r--r--   1 root root0 May  4 23:21 wireless
  
  My /etc/modules
ntfs
tulip
ip_masq_ftp
ip_masq_raudio
ip_masq_irc
ip_masq_cuseeme
ip_masq_vdolive
ip_masq_quake


Ben Pfaff wrote:
 
  I'm currently connecting to the internet from the Debian/Linux
  box.  I'd like to know how would I go about access the internet
  from other PCs (windows/nt) which are on the same network as my
  Linux box.
 
 You should probably mention whether you are accessing the internet
 through PPP dialup or through Ethernet.  Once you tell us, we can help
 you a lot more readily.
 
 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

-- 
Timothy C. Phan
Intelligence Quest Research, INC.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread Paul Guidera

-Original Message-
From: iquest [EMAIL PROTECTED]
To: [EMAIL PROTECTED] [EMAIL PROTECTED]
Cc: Debian User debian-user@lists.debian.org
Date: Tuesday, 5 May 1998 10:09
Subject: Re: Internet from Windows/NT thru Linux


Hi,

  I'm connecting to internet through PPP dialup.

  I've recompiled the kernel with all IP-Masquerade and configured
  one of my NT4.0 box as described in the IP-Masquerade Mini-HOWTO
  and it did not work.

  My Linux box has the IP address: 192.168.188.2
  My NT4.0 has IP address: 192.168.188.4

  I can ping/ftp between machines without any problem.



Have you :

1) entered the ipfwadm commands as described in the mini-howto?
2) done a :
/sbin/modprobe -a
/sbin/modprobe ip_masq_ftp
etc?

Regards,

Paul.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread Alain Toussaint
 Hi,
 
   I'm connecting to internet through PPP dialup.
 
   I've recompiled the kernel with all IP-Masquerade and configured
   one of my NT4.0 box as described in the IP-Masquerade Mini-HOWTO
   and it did not work.
 
   My Linux box has the IP address: 192.168.188.2
   My NT4.0 has IP address: 192.168.188.4
 
   I can ping/ftp between machines without any problem.

do you have a nameserver on your linux box (or is one configured in NT
either your provider DNS server or one you have) ???

Alain



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread Florian Attenberger


Hi, 

I did this thing with one linux box and two win95 boxes and ISDN-dialup.
winNT/95: Add the IP of the linux-box as Gateway.
  Nameserver etc. have to be entered, too.
linux   : routing should be ok without doing anything.
  kernel should be compiled with ip_forward enabled.

  I think, you have a simple ISP-account. In this case
  add to /etc/init.d/network:
  ipfwadm -F -p deny
  ipfwadm -F -a m -S 192.168.2.0/24 -D 0.0.0.0/0.
 
  192.168.2.0 is my local network. The rest is generic.

hope it helps,

cu

florian attenberger

 




On Mon, 4 May 1998, iquest wrote:

 Hi,
 
   I'm currently connecting to the internet from the Debian/Linux
   box.  I'd like to know how would I go about access the internet
   from other PCs (windows/nt) which are on the same network as my
   Linux box.
 
   Thanks!
 -- 
 Timothy C. Phan
 Intelligence Quest Research, INC.
 
 
 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
 
 


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread iquest
Hi All,

  I'm jumping ahead of myself.  I thought the ipfwadm command 
  was just some monitoring utilitiy and I was certainly wrong.

  After entering all the ipfwadm commands,  everything works
  as expected.  I, however, still have some question on where
  to put these ipfwadm commands so when I reboot the system, these
  commands will be automatically executed.

  Thank.

Paul Guidera wrote:
 Have you :
 
 1) entered the ipfwadm commands as described in the mini-howto?
 2) done a :
 /sbin/modprobe -a
 /sbin/modprobe ip_masq_ftp
 etc?
 
 Regards,
 
 Paul.
 
 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

-- 
Timothy C. Phan
Intelligence Quest Research, INC.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread Bill Leach
The file '/etc/init.d/netbase' has the commands for setting up you
IP-Masquerading.  The defaults that I have seen are always to deny.
I have looked and not found any reference to a configuration tool so
I just added the necessary commands directly to the file.

In any event, check what you currently permit with
'ipfwadm -l -F' (also -I and -O)


On Mon, May 04, 1998 at 11:46:29PM +, iquest wrote:
 Hi,
 
   I'm connecting to internet through PPP dialup.
 
   I've recompiled the kernel with all IP-Masquerade and configured
   one of my NT4.0 box as described in the IP-Masquerade Mini-HOWTO
   and it did not work.
 
   My Linux box has the IP address: 192.168.188.2
   My NT4.0 has IP address: 192.168.188.4
 
   I can ping/ftp between machines without any problem.
 
   Here is an ls /proc/net on my linux box
 
 -r--r--r--   1 root root0 May  4 23:21 arp
 -r--r--r--   1 root root0 May  4 23:43 dev
 -r--r--r--   1 root root0 May  4 23:21 igmp
 -r--r--r--   1 root root0 May  4 23:21 ip_autofw
 -rw-r--r--   1 root root0 May  4 23:21 ip_forward
 -rw-r--r--   1 root root0 May  4 23:21 ip_input
 -r--r--r--   1 root root0 May  4 23:21 ip_masq_app
 -r--r--r--   1 root root0 May  4 23:21 ip_masquerade
 -rw-r--r--   1 root root0 May  4 23:21 ip_output
 -r--r--r--   1 root root0 May  4 23:21 raw
 -r--r--r--   1 root root0 May  4 23:21 route
 -r--r--r--   1 root root0 May  4 23:21 rt_cache
 -r--r--r--   1 root root0 May  4 23:21 snmp
 -r--r--r--   1 root root0 May  4 23:21 sockstat
 -r--r--r--   1 root root0 May  4 23:21 tcp
 -r--r--r--   1 root root0 May  4 23:21 udp
 -r--r--r--   1 root root0 May  4 23:21 unix
 -r--r--r--   1 root root0 May  4 23:21 wireless
   
   My /etc/modules
 ntfs
 tulip
 ip_masq_ftp
 ip_masq_raudio
 ip_masq_irc
 ip_masq_cuseeme
 ip_masq_vdolive
 ip_masq_quake
 
 
 Ben Pfaff wrote:
  
   I'm currently connecting to the internet from the Debian/Linux
   box.  I'd like to know how would I go about access the internet
   from other PCs (windows/nt) which are on the same network as my
   Linux box.
  
  You should probably mention whether you are accessing the internet
  through PPP dialup or through Ethernet.  Once you tell us, we can help
  you a lot more readily.
  
  --
  To UNSUBSCRIBE, email to [EMAIL PROTECTED]
  with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
 
 -- 
 Timothy C. Phan
 Intelligence Quest Research, INC.
 
 
 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
 
 

-- 
best,
-bill
[EMAIL PROTECTED]
   [EMAIL PROTECTED]  [EMAIL PROTECTED]
from a 1996 Micro$loth ad campaign:
The less you know about computers the more you want Micro$oft!
 See!  They do get some things right!


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread Rick Macdonald
Bill Leach wrote:
 
 The file '/etc/init.d/netbase' has the commands for setting up you
 IP-Masquerading.  The defaults that I have seen are always to deny.
 I have looked and not found any reference to a configuration tool so
 I just added the necessary commands directly to the file.

admin/dotfile-ipfwadm_0.23b3-4.deb

It's in hamm but it runs OK on bo.

-- 
...RickM...


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread Hamish Moffatt
On Tue, May 05, 1998 at 09:44:56AM -0400, Bill Leach wrote:
 The file '/etc/init.d/netbase' has the commands for setting up you
 IP-Masquerading.  The defaults that I have seen are always to deny.
  ^^^

No, they don't. There are some firewall setup commands only:

# deny incoming packets pretending to be from 127.0.0.1
ipfwadm -I -d deny -o -P all -S 127.0.0.0/8 -W eth0 -D 0/0 2/dev/null 
|| true
ipfwadm -I -d deny -o -P all -S 127.0.0.0/8 -W eth1 -D 0/0 2/dev/null 
|| true
ipfwadm -I -i deny -o -P all -S 127.0.0.0/8 -W eth0 -D 0/0 /dev/null
ipfwadm -I -i deny -o -P all -S 127.0.0.0/8 -W eth1 -D 0/0 /dev/null

There are only these commands, and a few others, to prevent IP spoofing.
This seems to be a common misconception.


Hamish
-- 
Hamish Moffatt, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
Latest Debian packages at ftp://ftp.rising.com.au/pub/hamish. PGP#EFA6B9D5
CCs of replies from mailing lists are welcome.   http://hamish.home.ml.org


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread Steve Mayer
Paul,

  I created a shell script and put it in the /etc/rc.boot directory. 
Works for me.

Steve Mayer
[EMAIL PROTECTED]

iquest wrote:
 
 Hi All,
 
   I'm jumping ahead of myself.  I thought the ipfwadm command
   was just some monitoring utilitiy and I was certainly wrong.
 
   After entering all the ipfwadm commands,  everything works
   as expected.  I, however, still have some question on where
   to put these ipfwadm commands so when I reboot the system, these
   commands will be automatically executed.
 
   Thank.
 
 Paul Guidera wrote:
  Have you :
 
  1) entered the ipfwadm commands as described in the mini-howto?
  2) done a :
  /sbin/modprobe -a
  /sbin/modprobe ip_masq_ftp
  etc?
 
  Regards,
 
  Paul.
 
  --
  To UNSUBSCRIBE, email to [EMAIL PROTECTED]
  with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
 
 --
 Timothy C. Phan
 Intelligence Quest Research, INC.
 
 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread Bill Leach
Correction...

I have not found any reference to a configuration tool that would work
on my system!

I did try 'dotfile ipfwadm' a couple of time but it did not work for
me and I have not yet attempted to find out why not.


On Tue, May 05, 1998 at 08:01:00AM -0600, Rick Macdonald wrote:
 Bill Leach wrote:
  
  The file '/etc/init.d/netbase' has the commands for setting up you
  IP-Masquerading.  The defaults that I have seen are always to deny.
  I have looked and not found any reference to a configuration tool so
  I just added the necessary commands directly to the file.
 
 admin/dotfile-ipfwadm_0.23b3-4.deb
 
 It's in hamm but it runs OK on bo.
 
 -- 
 ...RickM...

-- 
best,
-bill
[EMAIL PROTECTED]
   [EMAIL PROTECTED]  [EMAIL PROTECTED]
from a 1996 Micro$loth ad campaign:
The less you know about computers the more you want Micro$oft!
 See!  They do get some things right!


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Internet from Windows/NT thru Linux

1998-05-05 Thread Bill Leach
Hummm, not sure what to say.  Yes, I knew that these were to prevent
spoofing and since I could not find any other place where ipfwadm
commands were issued, the defaults for ipfwadm appeared to be 'deny'
(which of course makes sense).

It further seemd to me that /etc/netbase is the logical location
for the additional rules.

If not, I'd rather like to know why not as well as where they should 
be placed.


On Wed, May 06, 1998 at 12:11:14AM +1000, Hamish Moffatt wrote:
 On Tue, May 05, 1998 at 09:44:56AM -0400, Bill Leach wrote:
  The file '/etc/init.d/netbase' has the commands for setting up you
  IP-Masquerading.  The defaults that I have seen are always to deny.
   ^^^
 
 No, they don't. There are some firewall setup commands only:
 
   # deny incoming packets pretending to be from 127.0.0.1
 ipfwadm -I -d deny -o -P all -S 127.0.0.0/8 -W eth0 -D 0/0 
 2/dev/null || true
 ipfwadm -I -d deny -o -P all -S 127.0.0.0/8 -W eth1 -D 0/0 
 2/dev/null || true
 ipfwadm -I -i deny -o -P all -S 127.0.0.0/8 -W eth0 -D 0/0 /dev/null
 ipfwadm -I -i deny -o -P all -S 127.0.0.0/8 -W eth1 -D 0/0 /dev/null
 
 There are only these commands, and a few others, to prevent IP spoofing.
 This seems to be a common misconception.
 
 
 Hamish
 -- 
 Hamish Moffatt, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
 Latest Debian packages at ftp://ftp.rising.com.au/pub/hamish. PGP#EFA6B9D5
 CCs of replies from mailing lists are welcome.   http://hamish.home.ml.org
 
 

-- 
best,
-bill
[EMAIL PROTECTED]
   [EMAIL PROTECTED]  [EMAIL PROTECTED]
from a 1996 Micro$loth ad campaign:
The less you know about computers the more you want Micro$oft!
 See!  They do get some things right!


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]