> > # ACCEPT the packet first
> > /sbin/ipchains -A forward -s 192.168.66.0/24 -d 0.0.0.0/0 -j ACCEPT
> >
> > # then MASQ it
> > /sbin/ipchains -A forward -s 192.168.66.0/24 -d 0.0.0.0/0 -j MASQ
>
> Here's where you're going wrong. The first rule that matches is
> acted on, then it doesn't go any further. Leave the MASQ entry
> and remove the ACCEPT.
i've found that 'ipchains -I input 1 -s 192.168.66.0/24 -d 0/0 -j ACCEPT'
might also be needed if some w9x machines are masq'd under linux.
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text