here is also a log of the ipchains output if it helps. thanks for any
responses.
I think the problem is ipchains is sending to ppp2 not ppp1?
how do i change this in my ipchians rules?

May 27 00:25:26 arakasi kernel: Packet log: forward MASQ ppp2 PROTO=1
203.56.97.150:8 203.4.212.10:0 L=60 S=0x00 I=37582 F=0x0000 T=31
May 27 00:25:27 arakasi kernel: Packet log: forward MASQ ppp2 PROTO=1
203.56.97.150:8 203.4.212.10:0 L=60 S=0x00 I=40398 F=0x0000 T=31
May 27 00:25:28 arakasi kernel: Packet log: forward MASQ ppp2 PROTO=1
203.56.97.150:8 203.4.212.10:0 L=60 S=0x00 I=50638 F=0x0000 T=31
May 27 00:25:29 arakasi kernel: Packet log: forward MASQ ppp2 PROTO=1
203.56.97.150:8 203.4.212.10:0 L=60 S=0x00 I=3279 F=0x0000 T=31


>Hi
>Having problems getting ipmasq going on 2.2 kernel. Was going with my
>ipchains rules with a 2.1.x kernel. This is a paste of some relevant
>information, my 10.0.0.x equivalent is 203.56.97.x
>
>arakasi:/usr/src/linux# ipchains -L
>Chain input (policy ACCEPT):
>Chain forward (policy ACCEPT):
>target     prot opt     source                destination           ports
>-          all  ------  203.56.97.0/24        203.56.97.0/24        n/a
>MASQ       all  ----l-  203.56.97.0/24        anywhere              n/a
>Chain output (policy ACCEPT):
>Chain acctin (0 references):
>Chain acctout (0 references):
>Chain acctboth (0 references):
>Chain inp (0 references):
>Chain out (0 references):
>Chain fwd (0 references):
>Chain IpFwAdM! (0 references):
>
>
>arakasi:/proc# cat /proc//sys/net/ipv4/ip_forward
>1
>arakasi:~# ifconfig
>eth0      Link encap:Ethernet  HWaddr 00:A0:24:CB:BE:A0
>          inet addr:203.56.97.151  Bcast:203.56.97.255
Mask:255.255.255.128
>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>          RX packets:253529 errors:2 dropped:2 overruns:0 frame:4
>          TX packets:312862 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:33297 txqueuelen:100
>          Interrupt:11 Base address:0x6800
>lo        Link encap:Local Loopback
>          inet addr:127.0.0.1  Mask:255.0.0.0
>          UP LOOPBACK RUNNING  MTU:3924  Metric:1
>          RX packets:33107 errors:0 dropped:0 overruns:0 frame:0
>          TX packets:33107 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:0
>ppp1      Link encap:Point-to-Point Protocol
>          inet addr:202.61.197.252  P-t-P:202.61.197.254
>Mask:255.255.255.255
>          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
>          RX packets:183 errors:0 dropped:0 overruns:0 frame:0
>          TX packets:273 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:10
>arakasi:~# route
>Kernel IP routing table
>Destination     Gateway         Genmask         Flags Metric Ref    Use
>Iface
>202.61.197.254  *               255.255.255.255 UH    0      0        0
ppp1
>localnet        *               255.255.255.128 U     0      0        0
eth0
>default         *               0.0.0.0         U     0      0        0
ppp1
>arakasi:~# ipchains -L
>Chain input (policy ACCEPT):
>Chain forward (policy ACCEPT):
>target     prot opt     source                destination           ports
>MASQ       all  ----l-  203.56.97.0/24        anywhere              n/a
>Chain output (policy ACCEPT):
>Chain acctin (0 references):
>Chain acctout (0 references):
>Chain acctboth (0 references):
>Chain inp (0 references):
>Chain out (0 references):
>Chain fwd (0 references):
>Chain IpFwAdM! (0 references):
>arakasi:~#
>
>
>when i do ipchains -M -L after i have pinged from a masqed host to an
>external ip address i sometimes see that an ipchains entry in the -M -L
list
>is created ipchains logging of this, but it does not seem able to recieve
>data back through this. other times this entry does not occur at all. could
>someone help? my system is presently a debian 2.1/2.2 system.
>



_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]

Reply via email to