You might want to try:
echo 1 /proc/sys/net/ipv4/ip_forward
Also I noticed that the routing for eth0 is in the routing table twice,
this seems a bit weird. If the above command doesn't fix it, try taking
down the card (ifdown eth0) and bring it back up (ifup eth0) to see if
this clears up
Sheridan,
Thanks, I'll look at linuxdoc.org. I've downloaded Seattle Firewall as well and am
looking at that.
Thanks again,
Jon
*** REPLY SEPARATOR ***
On 11/2/00 at 3:08 PM Sheridan Hawken wrote:
Hi Jon,
I would use port forwarding. The rule in ipchains looks like
rd -i $EXTERNAL_INTERFACE -s $INTERNAL_NETWORK -j MASQ
end
mail main at : [EMAIL PROTECTED]
web f51.w3.to
linux project LinuxMelayu.w3.to
web mail f51.i-p.com
icq #781787
-Original Message-
From: "[EMAIL PROTECTED]"
[EMAIL PROTECTED] on behalf of"Sheridan Hawken"
Hi Jon,
I would use port forwarding. The rule in ipchains looks like this:
/usr/sbin/ipmasqadm portfw -a -p tcp -L InternetIP Port -R InternalIP Port
/usr/sbin/ipmasqadm portfw -a -p tcp -L xxx.xxx.xxx.xxx 80 -R xxx.xxx.xxx.xxx 80 (
this allows http through to an internal machine )
There
On Sun, Apr 16, 2000 at 05:13:38PM -0400, Stephen F. Bosch wrote:
- "Eric L. Brine" wrote:
-
- Even if masquerading works in this situation, you STILL have packets
- with 192.168.0 headers going out onto the local subnet, and if your ISP
- notices this, you're going to get your wrists
Charles Curley wrote:
- Ultimately the ISP has to block these packets at their routers, or they
- get into trouble, so it's not a huge problem -- but all you need is for
- two people on the same subnet to make the same mistake, and you've got
- trouble.
No, read the extract from the RFC
Boy it shure looks like folks need a lesson in basic networking. i cant
imagin the problems if some just happens to duplicate an IP addy of a
system down the pipe. Someone would be very upset when there machine
droped off the network. I know I would be extreemly ticked off.
On Sun, 16 Apr 2000,
"Eric L. Brine" wrote:
Even if masquerading works in this situation, you STILL have packets
with 192.168.0 headers going out onto the local subnet, and if your ISP
notices this, you're going to get your wrists slapped.
I don't believe that's the problem. The problems are
David Nordlund wrote:
Hi, I've got a system arrangement that goes something like this.
I have computer A(Mandrake 7) and computer B(Corel 1) connected to a hub.
Also connected to the hub is a cable modem, C. C is good friends with
A, but isn't really on speaking terms with B.
(The
On Fri, Apr 14, 2000 at 11:21:55PM -0300, David Nordlund wrote:
-
- Hi, I've got a system arrangement that goes something like this.
- I have computer A(Mandrake 7) and computer B(Corel 1) connected to a hub.
- Also connected to the hub is a cable modem, C. C is good friends with
- A, but
On Fri, 14 Apr 2000, you wrote:
Hi, I've got a system arrangement that goes something like this.
I have computer A(Mandrake 7) and computer B(Corel 1) connected to a hub.
Also connected to the hub is a cable modem, C. C is good friends with
A, but isn't really on speaking terms with B.
(The
John:
I have the same setup as you, somewhat. I have a hub, 2 computers and a DSL
modem. Computer A is my mandrake server, B is a win98 client, and the DSL
modem connected to the hub. Computer A is setup with the static ip address i
was assigned for my net connection, with an alias ip of
kNIGits wrote:
G'day from Australia!
Me too.
Can someone tell me if the stock standard Mandrake 6.0 kernel can do IP
masquerading?
Yup. Here's the script I use:
#!/bin/sh
echo 1 /proc/sys/net/ipv4/ip_forward
ipchains -P forward DENY
ipchains -A forward -s 10.0.0.0/8 -j MASQ
This sets
Thanks very much! All my other settings were as per the IP-MASQ HOWTO,
but it still didn't work. This was the final setting I needed!
Now, to figure out how to run it on bootup
Tony.
Civileme wrote:
G'day from the arctic.
Try ipchains There is a HOWTO at
Mine does IP Masq out of the box. Make you install the ipchains package.
For info on how to set it up see the ipchains howto.
At 12:29 AM 8/14/99 +, kNIGits wrote:
G'day from Australia!
Can someone tell me if the stock standard Mandrake 6.0 kernel can do IP
masquerading? I haven't been
G'day from the arctic.
Try ipchains There is a HOWTO at http://metalab.unc.edu/LDP/HOWTO/IPCHAINS-HOWTO-3.html#ss3.1
ipfwadm remained behind with release 2.0 .xx . ipchains is now the way
to do masquerading and a LOTof other stuff. Iuse it to
avoid adforce.imgis.com and doubleclick.net
IIRC, it's not called "masquerading" in Linux anymore...it's called "IP
Chaining." *shrug* I have no idea whether it's included "out-of-the-box"
tho but at least it's a place to start looking. :-)
- Original Message -
From: kNIGits [EMAIL PROTECTED]
To: Mandrake Expert List [EMAIL
17 matches
Mail list logo
