i am having a strange (or not?) problem with ip masquerading. i have
read thru the HOWTO and tried to scan the maillist archives, so i am
sorry if this is one of those "oh asking THAT question again!" cases...
i got ip masquerading set up and *kind of* working. from the
internal (192.168.1.10) machine, i can see/get to:
a) the masq machine, both eth0 and eth1 (eth0 goes to a lan, which
is connected to the net via dsl; eth1 is the masq nic).
b) outside machines (including our nameserver, which is outside of
our lan), such as metalab.unc.edu, etc.
BUT, i cannot get to any machines that are on our lan (i.e., that
dont get sent thru the dsl gateway).
for example, if i have x.x.x.a, x.x.x.b, x.x.x.c on our lan, with
x.x.x.a being the masq machine: from 192.168.1.10 (one of the internal
masq'ed machines), i *can* see x.x.x.a, but *NOT* x.x.x.b or x.x.x.c.
(i also can, of course see x.x.x.a as 192.168.1.1). and, like i said,
i can see beyond these out into the world (!?).
i am running kernel 2.2.5 and i *think* i have all the kernel
compile options set correctly, but i noticed a little straying
from the settings the faq described, such as i did not see an
option for me to set:
* IP: always defragment (required for masquerading)
(CONFIG_IP_ALWAYS_DEFRAG) [Y/n/?]
- YES: This feature is REQUIRED to get asked about
enabling the IP Masquerade and/or
Transparent Proxying features. This feature also
optimizes IP MASQ connections.
(as described in the faq for 2.2.x kernels). so, maybe there
is something amiss in my kernel; but, it seems weird that it is
working in this strange way. (hey, but i am a newbie at this! haha)
i have seen some people (on the list archives) having some
problems with 2.2.5 or 2.2.7 kernels. could this be my problem?
THANKS,
-jon
__________________________________________________________________________
"Opinions are my own; they do not represent those of KZSU nor Stanford U."
[EMAIL PROTECTED] [230 days left!] http://kzsu.stanford.edu/jon.html
Art is Art is Nothing is Life. Who cares? Where is the free food?
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
