well, i got everything up and running with one minor hitch... i cannot 
get it to authenticate with a user that i create manually. if i allow 
root to login on ttys0, then i can dialin with the root username and 
password, and it will dialin fine, but the internet will still not work. 
the ip address is being properly assigned, as is evidence by the syslog 
entry:

Jun 27 14:05:21 firewall pppd[1739]: pppd 2.4.1 started by mike, uid 99
Jun 27 14:05:21 firewall pppd[1739]: using channel 1
Jun 27 14:05:21 firewall pppd[1739]: Using interface ppp0
Jun 27 14:05:21 firewall pppd[1739]: Connect: ppp0 <--> /dev/ttyS0
Jun 27 14:05:24 firewall pppd[1739]: user root logged in
Jun 27 14:05:24 firewall pppd[1739]: found interface eth0 for proxy arp
Jun 27 14:05:24 firewall pppd[1739]: local  IP address 192.0.1.7
Jun 27 14:05:24 firewall pppd[1739]: remote IP address 192.0.1.60


after dialing in and authenticating, if i bring up a command prompt and 
ping an external (internet) ip, i get the following: "reply from 
192.0.1.7: destination port unreachable" 192.0.1.7 being the LRP's IP 
address. in /var/log/syslog, i get the following message (repeated a few 
hundred times) (note: 65.121.99.12 is a dns server for the external 
interface on the lrp):

Jun 27 14:06:02 firewall kernel: Shorewall:all2all:REJECT:IN=ppp0 
OUT=eth1 SRC=192.0.1.60 DST=65.121.99.12 LEN=60 TOS=0x00 PREC=0x00 
TTL=127 ID=65 PROTO=ICMP TYPE=8 CODE=0 ID=1536 SEQ=512


now since 192.0.1.x is my internal network, there shouldn't be any 
issues of proper masqing since i assign the dialin client a 192.0.1.x 
number, correct? or are there additional parameters required to masq the 
ppp0 interface?


one more caveat that i remembered while i was configuring the LRP for 
PPP was that i had no /var/lib/dialer directory, as the directions state:
/var/lib/dialer/dialer.conf:
Change LEASE to YES

/var/lib/dialer/ppp-on:
I commented out everything from "cat" on - prevents use of multiple
lines

where do i change these variables in bering?


thank you for the continued help.
-matt russell



-------------------------------------------------------
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to