[EMAIL PROTECTED] wrote:
> 
> I'm actually looking for help with IP Masquerading, so i read this mail carefully.
> 
> But in 3), you said
> configure IP Masquerading via linuxconf, but i haven't see any fields talking
> about firewall or ip masquerading in Linuxconf. I tried ipfwadm -F -l and
> i got : IP firewall forward rules, default policy: accept . So i don't know if my
> linuxconf is an old
> version or something like that. This Linuxconf version comes from Redhat 5.2
> standard installation.

Im sorry, I assumed you where trying to do it via linuxconf (since this
is the linuxconf list :-)

One "hidden" feature of linuxconf is that it can use linuxconf modules,
which is included in the RedHat (and other) distributions but they are
not activated by default (because they are not supported by redhat).
This modules are very powerful for server and ISP use, but are not
tested as much as the core linuxconf, but I think most people on this
list will agree they are most useful (if you need them).

You activate a module by entering linuxconf->control files and
system->linuxconf modules, and typing the wanted modulname in a empty
field. Then you restart linuxconf, and the new module is activated and
available.

The module you need is called "firewall", and after you activate it, you
will see the new firewall menu I was refering to in the Network section
og linuxconf.

If you want to look at the other "hidden" modules you can find their
names in 
/usr/lib/linuxconf/modules, and their helpfiles in
/usr/lib/linuxconf/help.eng

To activate ipmasquerading without linuxconf you may do it manually with
this commands (put them in rc.local when they work):

# This is optional 
/sbin/modprobe ip_masq_ftp
/sbin/modprobe ip_masq_raudio
/sbin/modprobe ip_masq_irc

# Deny all by default
/sbin/ipfwadm -F -p deny
# Activate masqurading from network 192.168.0.0
/sbin/ipfwadm -F -a m -S 192.168.0.0/16 -D 0.0.0.0/0

---
You are currently subscribed to linuxconf as: [[email protected]]
To unsubscribe, forward this message to [EMAIL PROTECTED]

Reply via email to