[Cooker-firewall] Internet Connection Sharing and Shorewall

2002-09-30 Thread Sebastian Djupsjbacka

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello!

I have found a strange problem with Internet Connection Sharing in Dolphin. My 
hardware configuration is two 10 Mbit NIC's, one connected to my local LAN 
and one to the campus LAN. ICS worked beatifully straight out of the box in 
8.2 so I was suprised when I ran into these problems in 9.0

1) I started ICS and configured it in the same manner as in previous versions. 
It did not work, even though all packages got installed and shorewall was 
running. When I digged a little I noticed that the ICS tool had not made the 
needed changes to the /etc/shorewall/masq file. It read only eth0 when it 
should have been eth0   eth1. With this manual change I got it up and 
running.

2) Then I tried to browse samba from computers in my own LAN. No response from 
the server. After a little thought and reading the logs I came to the 
conclusion that the firewall ate the packets. I turned it off in the Control 
Center, or rather made it pass all packets.

3) To my great surprise this also turned off the IP masquerading. 'iptables 
- -L' was totally empty and no packets from my computers behind the firewall 
were forwarded anywhere.

I want IP masquerading but I do not need a firewall as the university LAN 
already is behind one. At the moment this can't be done with the ICS tool in 
the Control Center. As the previous versions of Mandrake had this 
functinality I can only consider this a bug. One that hopefully will be 
squashed soon. I'm not very happy with switching iptables rules every time I 
want to access my documents on the file server.

Regards,
Sebastian

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9mA7T5q3krQALKugRAq0JAJ9JIV2eTMAJr5dnHWjlokKgbcy09QCeNZI7
H2KLDX9+JZ045ZMjn7IRcds=
=dyli
-END PGP SIGNATURE-





Re: [Cooker-firewall] shorewall

2002-09-30 Thread Emiliano 'AlberT' Gabrielli

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Alle 15:07, venerdì 27 settembre 2002, hai scritto:
  
  PS: may I contribute in some way ?

 sure, with pleasure, do you speak XML/XSLT ?

not at the same level of PHP, I just had played with XML. But I understand it 
quiet well  

- -- 
?php  echo   Emiliano `AlberT` Gabrielli  \n,
E-Mail:\t\t  [EMAIL PROTECTED]  \n, \t\t [EMAIL PROTECTED] \n,
Web:\t\t http://SuperAlberT.it \n\t\t http://www.totocom.net \n,
IRC: \t\t #php,#AES     irc.azzurra.com \n ICQ UIN: \t\t 158591185;  ?
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9mIbZHT7fKa+io+URAmHcAJ0Zu3shD/H0EDyPwEGEBI/V+y55ZwCeNh0x
XA6okVn6OmX46qkaXk4nfpw=
=Wac3
-END PGP SIGNATURE-