I'm having a bit of difficulty getting 1 box on my 3 computer home network working with IP masquerading. Here's what I have going: Three boxes 192.168.1.1, 192.168.1.2, and 192.168.1.3 1.1 has the cable modem talking to it. The thing here is that my ISP will only allow 1 ip address to be doled out via dhcp. So dhcpcd gives me my 204.xxx.xxx.xxx address and assigns that to eth0. The 192.168.1.1 address is assigned the the eth0:0 adapter via ipaliasing. The other boxes are pretty plain...eth0 with 192.168.1.1 as the default route/gateway. This box is a dual Pentium II with an Intel EtherExpress Pro 10/100+, running redhat 6.0. The 1.2 box is a k6-2 at 333MHz with redhat 6.0 and a 3COM 3C900 (The PCI 10MBps card). The one works flawlessly in windows 95 and in linux. The 1.3 box is a dual pentium II with an EtherExpress Pro 10/100+ PCI card running redhat 6.0. The ip masquerading thing works flawlessly for both the 1.2 and 1.3 boxes in windows. Web pages, ftp, telnet, ping, etc...works great. In linux, only the 1.2 box works, but it works just as well as it does in windows. The problem is that the 1.3 box absolutely refuses to work in linux. It functions perfectly to all boxes on the local lan with ftp, telnet, ping, etc. but when it trys to telnet to something outside the local lan, ping for instance, only 1 packet gets returned and then no more. Give ping the ctrl-c and then redo it nothing is returned. If the interface is brought down and reestablished a ping will return only 1 packet and then no more...as before. I cannot seem to figure this out. At first I had a NetGear FA310TX in there but some IRC fellows said that that card could be the troubles. So I went out and purchased the eepro100 card in hopes that that was the issue. Apparently is was not. Here's the commands I'm using for the ipaliasing business and the ipchains options. IP-aliasing is done first. /sbin/dhcpcd /sbin/ifconfig eth0:0 192.168.1.1 netmask 255.255.255.0 up /sbin/route add 192.168.1.1 eth0:0 IP-masquerading is next. ipchains -P forward DENY ipchains -A forward -s 192.168.1.3/32 -j MASQ ipchains -A forward -s 192.168.1.2/32 -j MASQ I got those from the HOWTO and I believe I'm doing it right...can anyone please please please let me know what I'm doing wrong, and if I'm not doing anything wrong, what the problem is? [root@ysgrathe /root]# ipchains -L Chain input (policy ACCEPT): Chain forward (policy DENY): target prot opt source destination ports MASQ all ------ loki anywhere n/a MASQ all ------ xylocon anywhere n/a Chain output (policy ACCEPT): That's the output if an ipchains -L Thank you for your time, Gary Wolfe [EMAIL PROTECTED] _______________________________________________ Masq maillist - [EMAIL PROTECTED] http://tiffany.indyramp.com/mailman/listinfo/masq Admin requests can be handled by web (above) or [EMAIL PROTECTED]
