Re: [gentoo-user] loopback into gentoo iptables
On 05/10/2007, Hans-Werner Hilse <[EMAIL PROTECTED]> wrote: > Hi, > > On Fri, 5 Oct 2007 10:42:42 -0500 > "Walter Willis" <[EMAIL PROTECTED]> wrote: > > > I have modem asdl zyxel 660 and activate loopback with command: "ip nat > > loopback on" > > Where do you enter that and why? What is the thing _you_ call a > loopback? On what device or machine does it exist? You don't seem to be > talking about the "ifup" tool (since you talk about "ip", which however > does not know the "nat" mode?!?), and you don't seem to be talking > about the lo device either. > > > the ask is: > > it is into gentoo linux with iptables ? > > Errm, again: What? Setting up you loopback device on gentoo is done > automatically by /etc/init.d/net.lo. Should be run on bootup by rc, > check "rc-update show". > > Setting up NAT works using a sysctl (or the procfs). Restricting the > NAT works using iptables. > > > the compiler module especial for function? > > E Again, not sure what you are asking here... Yes, you need > kernel modules for both NAT to work and as well netfilter modules for > the chains and targets and matches you want to use with iptables. They > don't really have to be modules, you can compile them statically into > the kernel as well. > > If unsure, rephrase your question -- and be a bit more verbose on what > you intend to do... A bit more information might as well cure lack of > proper vocabulary... Give examples, try to describe the setting. My telepathic abilities are getting rusty these days, but if guessing is allowed I think that the OP wanted to set up gentoo so that he could access the Zyxel router's firewall and modify its rules, from the Gentoo desktop. Either that, or he's thinking of building an embedded image for Zyxel?! More info would no doubt help. If not anything else, tell us what Zyxel can and cannot do - if it allows ssh access to its OS, then you may be able to set up firewall builder on the Gentoo box and use that to access/setup the Zyxel firewall. If you are running OpenWRT (not sure if this would run on Zyxel, but just don't stop me guessing now) you should be able to cook something so that firewall builder could hook into it. Best of luck, -- Regards, Mick -- [EMAIL PROTECTED] mailing list
Re: [gentoo-user] loopback into gentoo iptables
Hi, On Fri, 5 Oct 2007 17:23:38 -0500 Dan Farrell <[EMAIL PROTECTED]> wrote: > > Setting up NAT works using a sysctl (or the procfs). Restricting the > > NAT works using iptables. > > I don't think that's quite right. Correct me if i'm wrong (please) but > this should read, > > "Setting up forwarding works using a sysctl... and configuring > and restricting the NAT works using iptables" > > Network Address Translation is taken care of by iptables itself, not > just firewalled that way. Thanks, I missed that, of course you're right! NAT would be masquerading, and that's in fact netfilter/iptables' job. I was probably just thinking about routing/forwarding in general... -hwh -- [EMAIL PROTECTED] mailing list
Re: [gentoo-user] loopback into gentoo iptables
On Fri, 5 Oct 2007 18:00:56 +0200 Hans-Werner Hilse <[EMAIL PROTECTED]> wrote: > Setting up NAT works using a sysctl (or the procfs). Restricting the > NAT works using iptables. I don't think that's quite right. Correct me if i'm wrong (please) but this should read, "Setting up forwarding works using a sysctl... and configuring and restricting the NAT works using iptables" Network Address Translation is taken care of by iptables itself, not just firewalled that way. -- [EMAIL PROTECTED] mailing list
Re: [gentoo-user] loopback into gentoo iptables
Hi, On Fri, 5 Oct 2007 10:42:42 -0500 "Walter Willis" <[EMAIL PROTECTED]> wrote: > I have modem asdl zyxel 660 and activate loopback with command: "ip nat > loopback on" Where do you enter that and why? What is the thing _you_ call a loopback? On what device or machine does it exist? You don't seem to be talking about the "ifup" tool (since you talk about "ip", which however does not know the "nat" mode?!?), and you don't seem to be talking about the lo device either. > the ask is: > it is into gentoo linux with iptables ? Errm, again: What? Setting up you loopback device on gentoo is done automatically by /etc/init.d/net.lo. Should be run on bootup by rc, check "rc-update show". Setting up NAT works using a sysctl (or the procfs). Restricting the NAT works using iptables. > the compiler module especial for function? E Again, not sure what you are asking here... Yes, you need kernel modules for both NAT to work and as well netfilter modules for the chains and targets and matches you want to use with iptables. They don't really have to be modules, you can compile them statically into the kernel as well. If unsure, rephrase your question -- and be a bit more verbose on what you intend to do... A bit more information might as well cure lack of proper vocabulary... Give examples, try to describe the setting. -hwh -- [EMAIL PROTECTED] mailing list
[gentoo-user] loopback into gentoo iptables
I have modem asdl zyxel 660 and activate loopback with command: "ip nat loopback on" the ask is: it is into gentoo linux with iptables ? the compiler module especial for function? Thanks !!!
