1) RedHat 6.0 does ship with forwarding/firewalling code in place (no custom
kernel need be compiled - though I run a more recent version myself).

You do however need to enable forwarding which is turned off by default as a
security precaution.

In case you missed this step either edit /etc/sysconfig/network and change
'IPFORWARD_IPV=false' to 'IPFORWARD_IPV=true' or use linuxconf to edit this
file for you (Config, Networking, Client tasks, Routing and gateways,
Defaults, [X] Enable routing).

2) You should have set up the Windows machines to use your linux box as the
gateway and you need to enable DNS on all these machines as well (DNS can be
local or at your ISP).  DUN connections on those machines will place the
dialup connections DNS settings and default gateway ahead of your local
network settings - so you can shift back and forth.

3) You MAY need to make sure that your diald filter setting will accept DNS
requests to start the connection (since most transactions start with a DNS
name query).  If your DNS is set for a server on the net this is not likely
to be your problem.  If you are using a local DNS server it could be the
source of your difficulty.  (Note: bind 8 and newer no longer default to
sending outgoing DNS requests out via port 53, it uses a random high port.)

The filter file I started with ignored DNS to DNS queries so by running a
local caching DNS server I could not auto-dial out unless the address was
already in the cache.  (This is intended to safeguard against diald calling
out every time the DNS cache has an item that is about to time out.)
Commenting out 'ignore upd udp.dest=udp.domain,udp.source=upd.domain' in the
filter file enabled dialouts to happen automatically though I do get
occassional spurious dials (of 30-45 seconds in duration).

I also changed the tcp.domain rules to no longer ignore transfers so my
monthly dns update script would not die half way through the dig request to
upgrade the hints file.  (I set the timeout to 30 seconds so it's not adding
much time to the connection.)  If you are paying per dial you may be better
off leaving the ignore commands in place but changing any update script to
have the logic to only run when already connected but be force the
connection up until the script has completed.

Hope this gives you come clues,

Lourdes


-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]

Reply via email to