Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-29 Thread Adam Mercer
On Sun, Sep 28, 2003 at 10:48:37AM +0200, Paidhi wrote: I'm doing this using Shorewall, DHCP and dnsmasq. One PC with one interface to the internet and the second one on a little switch. A notebook and another PC connected to the switch. All of them use the internet. My internet connection

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-28 Thread Adam Mercer
On Sun, Sep 28, 2003 at 04:57:28AM +0300, Sami N??t?nen wrote: Do you have DNS in the nat firewall? If you do, you don't allow these queries to come in to it. But you should see these in your log. Thats one thing that someone on the netfilter list has suggest, that my firewall isn't letting

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-28 Thread Paidhi
Hi, I'm doing this using Shorewall, DHCP and dnsmasq. One PC with one interface to the internet and the second one on a little switch. A notebook and another PC connected to the switch. All of them use the internet. My internet connection has a fixed IP. Just install Shorewall and follow the

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-28 Thread aeriksson
[EMAIL PROTECTED] said: iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE doesn't work, where eth0 is the connection to the outside world. using ethereal it appears that packets are being received at eth1, the local network, but eth1 is not transmitting these packets. I know that the card

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-28 Thread Adam Mercer
On Sun, Sep 28, 2003 at 11:32:31AM +0200, [EMAIL PROTECTED] wrote: iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE doesn't work, where eth0 is the connection to the outside world. using ethereal it appears that packets are being received at eth1, the local network, but eth1 is not

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-28 Thread Adam Mercer
On Sun, Sep 28, 2003 at 10:48:37AM +0200, Paidhi wrote: I'm doing this using Shorewall, DHCP and dnsmasq. One PC with one interface to the internet and the second one on a little switch. A notebook and another PC connected to the switch. All of them use the internet. My internet connection

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-28 Thread Jason Stubbs
On Sunday 28 September 2003 18:32, [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] said: iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE doesn't work, where eth0 is the connection to the outside world. using ethereal it appears that packets are being received at eth1, the local network,

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-28 Thread Adam Mercer
On Sun, Sep 28, 2003 at 07:13:15PM +0900, Jason Stubbs wrote: You've just reminded me that I'm having the same problem. I very rarely need to nat on my box so I just forgot... What kernel are you running? vanilla 2.4.22 I'm running 2.6.0-test5 and am unable to nat at all. My rules worked

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-27 Thread Adam Mercer
On Mon, Sep 22, 2003 at 09:43:37AM +0900, Jason Stubbs wrote: I want to setup a DHCP server on my desktop machine so that I can plug my laptop into my second network port and then access the internet through my desktop using NAT. However I can't get it too work. I've followed as much of

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-27 Thread Adam Mercer
On Sat, Sep 27, 2003 at 07:39:20AM +0100, Adam Mercer wrote: I've attached my firewall script... This time really attached Cheers Adam #!/sbin/runscript IPTABLES=/sbin/iptables IPTABLESSAVE=/sbin/iptables-save IPTABLESRESTORE=/sbin/iptables-restore FIREWALL=/etc/firewall.rules opts=${opts}

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-27 Thread Mojo B. Nichols
Adam == Adam Mercer [EMAIL PROTECTED] writes: On Mon, Sep 22, 2003 at 09:43:37AM +0900, Jason Stubbs wrote: Well I've followed the NAT HOWTO and I still can't get it working. I have managed to get a DHCP server running, it gives an IP address out in the range 10.0.0.0 to 10.0.0.100 - this

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-27 Thread Adam Mercer
On Sat, Sep 27, 2003 at 07:28:23AM -0500, Mojo B. Nichols wrote: I'm not sure I know what your problem is, but this may help. # basic nat on extrenal device. iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE I've already got this rule in my firewall This should get your nating working.

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-27 Thread Jason Stubbs
On Saturday 27 September 2003 21:58, Adam Mercer wrote: (B On Sat, Sep 27, 2003 at 07:28:23AM -0500, Mojo B. Nichols wrote: (B I'm not sure I know what your problem is, but this may help. (B (B # basic nat on extrenal device. (B iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE (B (B

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-27 Thread Adam Mercer
On Sat, Sep 27, 2003 at 10:28:49PM +0900, Jason Stubbs wrote: Excerpt from your script: start() { ebegin Starting firewall if [ -e ${FIREWALL} ]; then restore else einfo ${FIREWALL} does not exists. Using default rules. rules fi eend $? }

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-27 Thread Andrew Gaffney
Adam Mercer wrote: rules() { stop # insert connection tracking modules modprobe ip_tables modprobe iptable_filter modprobe ip_conntrack modprobe ip_conntrack_ftp modprobe ipt_state modprobe ipt_LOG modprobe iptable_nat # allow local-only connections

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-27 Thread Adam Mercer
On Sat, Sep 27, 2003 at 11:17:52AM -0500, Andrew Gaffney wrote: This line here is your problem. You need to either change it to: ${IPTABLES} -P FORWARD ACCEPT -or- ${IPTABLES} -A FORWARD -s 10.0.0.0/24 -j ACCEPT rules are now # allow local-only connections ${IPTABLES} -A INPUT -i

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-27 Thread Andrew Gaffney
Adam Mercer wrote: On Sat, Sep 27, 2003 at 11:17:52AM -0500, Andrew Gaffney wrote: This line here is your problem. You need to either change it to: ${IPTABLES} -P FORWARD ACCEPT -or- ${IPTABLES} -A FORWARD -s 10.0.0.0/24 -j ACCEPT rules are now # allow local-only connections

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-27 Thread Adam Mercer
On Sat, Sep 27, 2003 at 01:24:18PM -0500, Andrew Gaffney wrote: How are you testing that it is working? Try 'ping 195.66.242.4' to test it out. If this works, then you either need to setup a DNS server on the NAT box, or have DHCP give the inside box the IP to a real DNS server. I've been on

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-27 Thread Sami Näätänen
On Saturday 27 September 2003 21:42, Adam Mercer wrote: On Sat, Sep 27, 2003 at 01:24:18PM -0500, Andrew Gaffney wrote: How are you testing that it is working? Try 'ping 195.66.242.4' to test it out. If this works, then you either need to setup a DNS server on the NAT box, or have DHCP give

[gentoo-user] Idiots guide to NAT and DHCP

2003-09-21 Thread Adam Mercer
Hi I want to setup a DHCP server on my desktop machine so that I can plug my laptop into my second network port and then access the internet through my desktop using NAT. However I can't get it too work. I've followed as much of the NAT and DHCP howtos that I can but can't get it too work. Does

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-21 Thread Andrew Gaffney
Adam Mercer wrote: Hi I want to setup a DHCP server on my desktop machine so that I can plug my laptop into my second network port and then access the internet through my desktop using NAT. However I can't get it too work. I've followed as much of the NAT and DHCP howtos that I can but can't get

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-21 Thread Jason Stubbs
I want to setup a DHCP server on my desktop machine so that I can plug my laptop into my second network port and then access the internet through my desktop using NAT. However I can't get it too work. I've followed as much of the NAT and DHCP howtos that I can but can't get it too work.

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-21 Thread Jason Stubbs
, but with teachers who cannot, and you have a metaphor of the Information Age in which we live. - Peter Cochrane From: Andrew Gaffney [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: [gentoo-user] Idiots guide to NAT and DHCP Date: Sun, 21 Sep 2003 19:40

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-21 Thread bob bob
Occums Razor? Imagine a school with children that can read and write, but with teachers who cannot, and you have a metaphor of the Information Age in which we live.   - Peter Cochrane _ Add photos to your messages with MSN 8. Get

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-21 Thread David Mallwitz
On Sunday 21 September 2003 07:43 pm, Jason Stubbs wrote: I want to setup a DHCP server on my desktop machine so that I can plug my laptop into my second network port and then access the internet through my desktop using NAT. However I can't get it too work. I've followed as much of the

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-21 Thread Adam Mercer
On Mon, Sep 22, 2003 at 10:34:43AM +0900, Jason Stubbs wrote: On Monday 22 September 2003 09:44, bob bob wrote: It appears that he's running two nic's, in which case he'll need a cross over cable or to go and buy a hub/switch.. thats the case Cheers Adam -- [EMAIL PROTECTED] mailing list

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-21 Thread Adam Mercer
On Mon, Sep 22, 2003 at 09:43:37AM +0900, Jason Stubbs wrote: I want to setup a DHCP server on my desktop machine so that I can plug my laptop into my second network port and then access the internet through my desktop using NAT. However I can't get it too work. I've followed as much of

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-21 Thread bob bob
of the Information Age in which we live.   - Peter Cochrane From: Adam Mercer [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: [gentoo-user] Idiots guide to NAT and DHCP Date: Mon, 22 Sep 2003 05:24:21 +0100 MIME-Version: 1.0 Received: from gentoo.org ([204.126.2.42]) by mc2

Re: [gentoo-user] Idiots guide to NAT and DHCP

2003-09-21 Thread Jason Stubbs
On Monday 22 September 2003 13:25, Adam Mercer wrote: On Mon, Sep 22, 2003 at 09:43:37AM +0900, Jason Stubbs wrote: I want to setup a DHCP server on my desktop machine so that I can plug my laptop into my second network port and then access the internet through my desktop using NAT.