You might want to try:
echo 1 > /proc/sys/net/ipv4/ip_forward
Also I noticed that the routing for eth0 is in the routing table twice,
this seems a bit weird. If the above command doesn't fix it, try taking
down the card (ifdown eth0) and bring it back up (ifup eth0) to see if
this clears up
#
$IPCHAINS -A forward -i $EXTERNAL_INTERFACE -s $INTERNAL_NETWORK -j MASQ
<<< end
mail main at : [EMAIL PROTECTED]
web f51.w3.to
linux project LinuxMelayu.w3.to
web mail f51.i-p.com
icq #781787
-Original Message-
From: "[EMAIL PROTECTED]"
<[EMAIL PR
Sheridan,
Thanks, I'll look at linuxdoc.org. I've downloaded Seattle Firewall as well and am
looking at that.
Thanks again,
Jon
*** REPLY SEPARATOR ***
On 11/2/00 at 3:08 PM Sheridan Hawken wrote:
>Hi Jon,
>
>I would use port forwarding. The rule in ipchains looks like th
Hi Jon,
I would use port forwarding. The rule in ipchains looks like this:
/usr/sbin/ipmasqadm portfw -a -p tcp -L InternetIP Port -R InternalIP Port
/usr/sbin/ipmasqadm portfw -a -p tcp -L xxx.xxx.xxx.xxx 80 -R xxx.xxx.xxx.xxx 80 (
this allows http through to an internal machine )
There ar
Charles Curley wrote:
>
> -> Ultimately the ISP has to block these packets at their routers, or they
> -> get into trouble, so it's not a huge problem -- but all you need is for
> -> two people on the same subnet to make the same mistake, and you've got
> -> trouble.
>
> No, read the extract fro
On Sun, Apr 16, 2000 at 05:13:38PM -0400, Stephen F. Bosch wrote:
-> "Eric L. Brine" wrote:
-> >
-> > > Even if masquerading works in this situation, you STILL have packets
-> > > with 192.168.0 headers going out onto the local subnet, and if your ISP
-> > > notices this, you're going to get your
"Eric L. Brine" wrote:
>
> > Even if masquerading works in this situation, you STILL have packets
> > with 192.168.0 headers going out onto the local subnet, and if your ISP
> > notices this, you're going to get your wrists slapped.
>
> I don't believe that's the problem. The problems are securi
Boy it shure looks like folks need a lesson in basic networking. i cant
imagin the problems if some just happens to duplicate an IP addy of a
system down the pipe. Someone would be very upset when there machine
droped off the network. I know I would be extreemly ticked off.
On Sun, 16 Apr 2000,
> This is really bad, folks -- if I understand you correctly, you're
> (both) sending private IP packets onto the local subnet!
I concur.
> Even if masquerading works in this situation, you STILL have packets
> with 192.168.0 headers going out onto the local subnet, and if your ISP
> notices th
David Nordlund wrote:
>
> ...An alias IP? Sounds like that might do the trick. How does one create
> an alias IP?
>
> On Sat, 15 Apr 2000, Lisa Mountjoy wrote:
> > John:
> >
> > I have the same setup as you, somewhat. I have a hub, 2 computers and a DSL
> > modem. Computer A is my mandrake s
...An alias IP? Sounds like that might do the trick. How does one create
an alias IP?
On Sat, 15 Apr 2000, Lisa Mountjoy wrote:
> John:
>
> I have the same setup as you, somewhat. I have a hub, 2 computers and a DSL
> modem. Computer A is my mandrake server, B is a win98 client, and the DS
John:
I have the same setup as you, somewhat. I have a hub, 2 computers and a DSL
modem. Computer A is my mandrake server, B is a win98 client, and the DSL
modem connected to the hub. Computer A is setup with the static ip address i
was assigned for my net connection, with an alias ip of 192.1
On Fri, 14 Apr 2000, you wrote:
> Hi, I've got a system arrangement that goes something like this.
> I have computer A(Mandrake 7) and computer B(Corel 1) connected to a hub.
> Also connected to the hub is a cable modem, C. C is good friends with
> A, but isn't really on speaking terms with B.
> (
On Fri, Apr 14, 2000 at 11:21:55PM -0300, David Nordlund wrote:
->
-> Hi, I've got a system arrangement that goes something like this.
-> I have computer A(Mandrake 7) and computer B(Corel 1) connected to a hub.
-> Also connected to the hub is a cable modem, C. C is good friends with
-> A, bu
David Nordlund wrote:
>
> Hi, I've got a system arrangement that goes something like this.
> I have computer A(Mandrake 7) and computer B(Corel 1) connected to a hub.
> Also connected to the hub is a cable modem, C. C is good friends with
> A, but isn't really on speaking terms with B.
>
On Mon, 16 Aug 1999, you wrote:
> diald woks nicely and I understand that the current incarnation of ppp has a
>dial-on-demand feature.
Anyone heard of masqdailer?
I think it's website is at http://cpwright.villagenet.com/mserver/ I couldn't
get it working... but I'd rather use that if I can g
On Mon, 16 Aug 1999, you wrote:
> This sets my net-connected Linux box (10.0.0.x) up to do forwarding to
> LAN-connected windows clients. On the Windows box you should edit the
> network settings so that your Linux box is the default gateway.
> Configure the Windows DNS servers straight out of /
Thanks very much! All my other settings were as per the IP-MASQ HOWTO,
but it still didn't work. This was the final setting I needed!
Now, to figure out how to run it on bootup
Tony.
Civileme wrote:
>
> G'day from the arctic.
>
> Try ipchains There is a HOWTO at
> http://metalab.un
- Original Message -
From: Bruce Endries <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, August 15, 1999 8:14 PM
Subject: [expert] IP Masquerading
> As a side note, I have been successful at getting the IP masq to
> work, but have never been able to figure out how to make th
kNIGits wrote:
>
> G'day from Australia!
Me too.
> Can someone tell me if the stock standard Mandrake 6.0 kernel can do IP
> masquerading?
Yup. Here's the script I use:
#!/bin/sh
echo 1 > /proc/sys/net/ipv4/ip_forward
ipchains -P forward DENY
ipchains -A forward -s 10.0.0.0/8 -j MASQ
This s
You've probably got it working - you just need to enable ip FORWARDING ... -
i always forgot to start it till i stuck it in the init process =]
Zak
- Original Message -
From: kNIGits <[EMAIL PROTECTED]>
To: Mandrake Expert List <[EMAIL PROTECTED]>
Sent: Saturday, August 14, 1999 10:29 AM
IIRC, it's not called "masquerading" in Linux anymore...it's called "IP
Chaining." *shrug* I have no idea whether it's included "out-of-the-box"
tho but at least it's a place to start looking. :-)
- Original Message -
From: kNIGits <[EMAIL PROTECTED]>
To: Mandrake Expert List <[EMAIL P
G'day from the arctic.
Try ipchains There is a HOWTO at http://metalab.unc.edu/LDP/HOWTO/IPCHAINS-HOWTO-3.html#ss3.1
ipfwadm remained behind with release 2.0 .xx . ipchains is now the way
to do masquerading and a LOT of other stuff. I use it to
avoid adforce.imgis.com and doubleclick.net po
Mine does IP Masq out of the box. Make you install the ipchains package.
For info on how to set it up see the ipchains howto.
At 12:29 AM 8/14/99 +, kNIGits wrote:
>G'day from Australia!
>
>Can someone tell me if the stock standard Mandrake 6.0 kernel can do IP
>masquerading? I haven't been
24 matches
Mail list logo
