You might want to try:
echo 1 /proc/sys/net/ipv4/ip_forward
Also I noticed that the routing for eth0 is in the routing table twice,
this seems a bit weird. If the above command doesn't fix it, try taking
down the card (ifdown eth0) and bring it back up (ifup eth0) to see if
this clears up
After reformatting my system and upgrading to Linux Mandrake 8.0 from
7.2, I am unable to get IP masquerading to function. I was able to get
it working with 7.2 and with Redhat 7.0 and earlier, with the same
hardware configuration and client configuration I am using now. I am
using kernel 2.2.19
Sheridan,
Thanks, I'll look at linuxdoc.org. I've downloaded Seattle Firewall as well and am
looking at that.
Thanks again,
Jon
*** REPLY SEPARATOR ***
On 11/2/00 at 3:08 PM Sheridan Hawken wrote:
Hi Jon,
I would use port forwarding. The rule in ipchains looks like
rd -i $EXTERNAL_INTERFACE -s $INTERNAL_NETWORK -j MASQ
end
mail main at : [EMAIL PROTECTED]
web f51.w3.to
linux project LinuxMelayu.w3.to
web mail f51.i-p.com
icq #781787
-Original Message-
From: "[EMAIL PROTECTED]"
[EMAIL PROTECTED] on behalf of"Sheridan Hawken"
I'm a linux newbie. I've set up a machine with Mandrake 7.1 that I'm about to convert
to 7.2. I want to use it as a firewall between my internal network and my outside T1.
I've got a firewall script set up using IPChains that seems to work pretty well. I
created and used internal network
Hi Jon,
I would use port forwarding. The rule in ipchains looks like this:
/usr/sbin/ipmasqadm portfw -a -p tcp -L InternetIP Port -R InternalIP Port
/usr/sbin/ipmasqadm portfw -a -p tcp -L xxx.xxx.xxx.xxx 80 -R xxx.xxx.xxx.xxx 80 (
this allows http through to an internal machine )
There
On Sun, Apr 16, 2000 at 05:13:38PM -0400, Stephen F. Bosch wrote:
- "Eric L. Brine" wrote:
-
- Even if masquerading works in this situation, you STILL have packets
- with 192.168.0 headers going out onto the local subnet, and if your ISP
- notices this, you're going to get your wrists
Charles Curley wrote:
- Ultimately the ISP has to block these packets at their routers, or they
- get into trouble, so it's not a huge problem -- but all you need is for
- two people on the same subnet to make the same mistake, and you've got
- trouble.
No, read the extract from the RFC
Boy it shure looks like folks need a lesson in basic networking. i cant
imagin the problems if some just happens to duplicate an IP addy of a
system down the pipe. Someone would be very upset when there machine
droped off the network. I know I would be extreemly ticked off.
On Sun, 16 Apr 2000,
"Eric L. Brine" wrote:
Even if masquerading works in this situation, you STILL have packets
with 192.168.0 headers going out onto the local subnet, and if your ISP
notices this, you're going to get your wrists slapped.
I don't believe that's the problem. The problems are
David Nordlund wrote:
Hi, I've got a system arrangement that goes something like this.
I have computer A(Mandrake 7) and computer B(Corel 1) connected to a hub.
Also connected to the hub is a cable modem, C. C is good friends with
A, but isn't really on speaking terms with B.
(The
On Fri, Apr 14, 2000 at 11:21:55PM -0300, David Nordlund wrote:
-
- Hi, I've got a system arrangement that goes something like this.
- I have computer A(Mandrake 7) and computer B(Corel 1) connected to a hub.
- Also connected to the hub is a cable modem, C. C is good friends with
- A, but
On Fri, 14 Apr 2000, you wrote:
Hi, I've got a system arrangement that goes something like this.
I have computer A(Mandrake 7) and computer B(Corel 1) connected to a hub.
Also connected to the hub is a cable modem, C. C is good friends with
A, but isn't really on speaking terms with B.
(The
John:
I have the same setup as you, somewhat. I have a hub, 2 computers and a DSL
modem. Computer A is my mandrake server, B is a win98 client, and the DSL
modem connected to the hub. Computer A is setup with the static ip address i
was assigned for my net connection, with an alias ip of
Hi, I've got a system arrangement that goes something like this.
I have computer A(Mandrake 7) and computer B(Corel 1) connected to a hub.
Also connected to the hub is a cable modem, C. C is good friends with
A, but isn't really on speaking terms with B.
(The cable modem is set up for
kNIGits wrote:
G'day from Australia!
Me too.
Can someone tell me if the stock standard Mandrake 6.0 kernel can do IP
masquerading?
Yup. Here's the script I use:
#!/bin/sh
echo 1 /proc/sys/net/ipv4/ip_forward
ipchains -P forward DENY
ipchains -A forward -s 10.0.0.0/8 -j MASQ
This sets
Date sent: Sun, 15 Aug 1999 15:08:50 +
From: "Andrew Morton" [EMAIL PROTECTED]
Organization: Nortel Networks (via modem)
To: [EMAIL PROTECTED]
Subject: Re: [expert] IP Masquerading
Send reply to:
Thanks very much! All my other settings were as per the IP-MASQ HOWTO,
but it still didn't work. This was the final setting I needed!
Now, to figure out how to run it on bootup
Tony.
Civileme wrote:
G'day from the arctic.
Try ipchains There is a HOWTO at
G'day from Australia!
Can someone tell me if the stock standard Mandrake 6.0 kernel can do IP
masquerading? I haven't been able to get it working yet.
If it does support IP Masq out of the box, can someone explain to this
dummy why he can't get it to work?
Tony
Melbourne
Australia
--
Is
Mine does IP Masq out of the box. Make you install the ipchains package.
For info on how to set it up see the ipchains howto.
At 12:29 AM 8/14/99 +, kNIGits wrote:
G'day from Australia!
Can someone tell me if the stock standard Mandrake 6.0 kernel can do IP
masquerading? I haven't been
G'day from the arctic.
Try ipchains There is a HOWTO at http://metalab.unc.edu/LDP/HOWTO/IPCHAINS-HOWTO-3.html#ss3.1
ipfwadm remained behind with release 2.0 .xx . ipchains is now the way
to do masquerading and a LOTof other stuff. Iuse it to
avoid adforce.imgis.com and doubleclick.net
o: Mandrake Expert List [EMAIL PROTECTED]
Sent: Friday, August 13, 1999 8:29 PM
Subject: [expert] IP Masquerading
G'day from Australia!
Can someone tell me if the stock standard Mandrake 6.0 kernel can do IP
masquerading? I haven't been able to get it working yet.
If it does support IP Ma
22 matches
Mail list logo
