>"Allen Umlas" wrote: 
>
> yup i have added a rule in my ipchains to route at assigned ip:
> ipchains -A input -s 0/0 -d 0/0 -i ppp0 -j ACCEPT

be sure that the ppp0 interface is up _before_ you run the above rule. else, ipchains 
won't be able to apply the rule because the interface is non-existent.

> and had this line also
> -A forward -i ppp0 -s 0/0 -j MASQ

you need to forward your packets to the external/live interface (the one connected to 
the Internet), like so:

ipchains -A forward -i <internet_interface> -s 0/0 -j MASQ

>> "/etc/ppp/ip-up.local" file:
>> #/bin/bash
>> route add -host <client_ip> dev ppp0

you may or may not need to add the route entry above if your proxyarp is working. 
that's trial and error on your part.

>> /sbin/ipchains -A input -i ppp0 -s <client_ip> -j ACCEPT
> do i have to put this at pppd configuration? It exist at my firewall

ipchains won't apply a rule to a non-existent interface. hence, you'll need that 
script to allow ppp0 to accept packets from the <client_ip>
 
> >"/etc/ppp/ip-down.local" file:
> >#/bin/bash
> >route del -host <client_ip> dev ppp0
> >/sbin/ipchains -D input -i ppp0 -s <client_ip> -j ACCEPT
> and also this one...

...yep, you need the above to "undo" what you did to the table and firewall rules when 
pppd started.

> What would be the gateway on my remote station dialing? Ang lumabas kasi na 
> default gateway ng remote worstation ko, yong assigned ip address

you get that when your routing table is not set-up properly, which shows that your 
proxyarp is not working (as i've guessed) and which is why you need to run the "route 
..." scripts in your ip-up/-down.local files.

> What would be the gateway of remote client? Do i have to manual config or 
> automatically assigned whe it dial.?

pppd will automatically assign the <server_ip> in your options.ttyS0 file as the 
gateway. just remember that your <server_ip> should be bound to an existing interface 
in your server (e.g., either your external interface, LAN interface, etc.)

hope you can make it work this time. and if it does, you owe me a pizza :b

regards,
dan


_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph

To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
[EMAIL PROTECTED]

Reply via email to