[masq] Ugh... Ipcahins

[kbaker3]

I've had my router masqing for quite some time now with ipchains.  I
however just started to run into problems.  I am trying to add a subnet
onto the masqed network.  I am only doing the because my laptop has no
network card so it is running plip to another host on the network.
192.168.1.0 is my ethernet and 192.168.2.0 is the plip network.  right now
routing works fine from the laptop over the plip link and onto the
network.  I have three hosts on the 192.168.1.0 network all but the
masqing box will respond to the laptop...  I think my chains are messed
up...  Here is my policy...  I know its messy but I needed to get it up to
do homework...
Chain input (policy reject)

ACCEPT ALL - 192.168.1.0/24 ANYWHEREN/A
ACCEPT all  --  anywhere  st131140.ithaca.edu   n/a
ACCEPT all  --  anywhere  anywhere  n/a

Chain forward (policy REJECT):
MASQ   all  --  192.168.1.0/24anywhere  n/a
MASQ   all  --  anywhere  192.168.1.0/24n/a

Chain output (policy REJECT):
ACCEPT all  --  anywhere  192.168.1.0/24n/a
ACCEPT all  --  st131140.ithaca.edu   anywhere  n/a
ACCEPT all  --  anywhere  anywhere  n/a


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]

Re: [masq] Ugh... Ipcahins

[David A. Ranch]

You can't have the same network on multiple interfaces unless
you do bridging.  Since bridging is BAD.. You need to add
another network address.  ie:

Linux Ethernet: MASQ'ed Ethernet:
192.168.0.1 192.168.0.[2-254]

Linux PLIP: MASQ'ed PLIP:
192.168.1.1 192.168.1.2


After you get that working, you'll need to:

1) add another IPCHAINS Masq line to support MASQing 
   on the 192.168.1.x network 
2) Add forward lines to able to forward packets back 
   and forth from the 192.168.0.x and 192.168.1.x networks.

--David


I have three hosts on the 192.168.1.0 network all but the masqing box 
will respond to the laptop...  I think my chains are messed
up...  Here is my policy...  I know its messy but I needed to get it up to
do homework...
Chain input (policy reject)

ACCEPT ALL - 192.168.1.0/24ANYWHEREN/A
ACCEPT all  --  anywhere  st131140.ithaca.edu   n/a
ACCEPT all  --  anywhere  anywhere  n/a

Chain forward (policy REJECT):
MASQ   all  --  192.168.1.0/24anywhere  n/a
MASQ   all  --  anywhere  192.168.1.0/24n/a

Chain output (policy REJECT):
ACCEPT all  --  anywhere  192.168.1.0/24n/a
ACCEPT all  --  st131140.ithaca.edu   anywhere  n/a
ACCEPT all  --  anywhere  anywhere  n/a

..
|  David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED]  |
!!
`- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -'
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]