Re: [gentoo-user] gentoo as a router

2003-12-15 Thread Timo Boettcher
Hi Oliver, * Oliver Lange [EMAIL PROTECTED], Friday, December 12, 2003, 10:18:14 PM: Hello everyone, And again i can't find the solution for a trivial task such as setting up my gentoo box as a simple router for my home LAN. Just for the record (I saw you got your solution) there is also

Re: [gentoo-user] gentoo as a router

2003-12-15 Thread Oliver Lange
Timo Boettcher wrote: Just for the record (I saw you got your solution) there is also the Gentoo-Router-Howto on the wiki of the Gentoo-Server-Project http://www.subverted.net/wakka/wakka.php?wakka=RouterHowto The site was down over the last few days, so I couldn't give you the link earlier. Yep,

Re: [gentoo-user] gentoo as a router

2003-12-15 Thread Joshua Banks
--- Oliver Lange [EMAIL PROTECTED] wrote: Timo Boettcher wrote: Just for the record (I saw you got your solution) there is also the Gentoo-Router-Howto on the wiki of the Gentoo-Server-Project http://www.subverted.net/wakka/wakka.php?wakka=RouterHowto The site was down over the last

Re: [gentoo-user] gentoo as a router

2003-12-15 Thread Oliver Lange
Joshua Banks wrote: And what was the final solution Oliver? I must of missed one of your postings. Only one word: shorewall. Configuring that thing was done in 30 minutes, incl. reading the quick setup guide, configuring routing, policies/rules and port forwarding. It's so easy that even me myself

Re: [gentoo-user] gentoo as a router

2003-12-15 Thread Joshua Banks
--- Oliver Lange [EMAIL PROTECTED] wrote: Joshua Banks wrote: And what was the final solution Oliver? I must of missed one of your postings. Only one word: shorewall. Configuring that thing was done in 30 minutes, incl. reading the quick setup guide, configuring routing,

Re: [gentoo-user] gentoo as a router

2003-12-15 Thread Oliver Lange
Joshua Banks wrote: Glad to here it. This probably saved you 5000 (kidding ofcourse) more hours of iptables how-to and routing how-to. They (Shorewall) actually have some pretty interesting stuff that goes accrosed they're email list at times. I would consider checking that out as well. Oh yeah.

Re: [gentoo-user] gentoo as a router

2003-12-15 Thread Joshua Banks
--- Oliver Lange [EMAIL PROTECTED] wrote: Oh yeah. I just got rid of documents saying 'routing is a pretty straightforward task', followed by 1 lines of text.. Errrm, wasn't it you who wrote me the long mail, offering personal help for the case I still ran into problems ? Yes I

Re: [gentoo-user] gentoo as a router

2003-12-15 Thread Joshua Banks
--- Oliver Lange [EMAIL PROTECTED] wrote: Joshua Banks wrote: I didn't see really see an answer. What I saw was you saying that you were curious now and that was it. You didn't say one way or another that you wanted or needed any help. So I left it alone. Sometimes people react weird

Re: [gentoo-user] gentoo as a router

2003-12-13 Thread Oliver Lange
Ian Truelsen wrote: Here is the netfilter section of .config . I have more compiled in here than you need, but it should get you going. CONFIG_IP_NF_TARGET_TOS=y CONFIG_IP_NF_TARGET_ECN=y CONFIG_IP_NF_TARGET_DSCP=y CONFIG_IP_NF_TARGET_MARK=y I couldn't find any of these 4 options, but i

Re: [gentoo-user] gentoo as a router

2003-12-13 Thread Joshua Banks
--- Oliver Lange [EMAIL PROTECTED] wrote: Dennis Freise wrote: # emerge shorewall Setting up masquerading is a piece of a cake with shorewall. And you definitly _want_ a firewall sooner or later, so go grab it, don't mess with iptables itself (you can, but why, if there are

Re: [gentoo-user] gentoo as a router

2003-12-13 Thread Oliver Lange
Joshua Banks wrote: That should do it. Have fun if I don't here from you. You will. Thanks alot for that detailed help. Now you made me really curious.. :) -- [EMAIL PROTECTED] mailing list

[gentoo-user] gentoo as a router

2003-12-12 Thread Oliver Lange
Hello everyone, And again i can't find the solution for a trivial task such as setting up my gentoo box as a simple router for my home LAN. Ok here's my situation: I'm running rp-pppoe on a gentoo box that shall act as router. Everything runs well, but the other boxes can't ping outside the LAN.

Re: [gentoo-user] gentoo as a router

2003-12-12 Thread brett holcomb
Go to /usr/src/linux and run make menuconfig. Under networking somewhere there are items that deal with routing. On Fri, 12 Dec 2003 22:18:14 +0100 Oliver Lange [EMAIL PROTECTED] wrote: Hello everyone, And again i can't find the solution for a trivial task such as setting up my gentoo box

Re: [gentoo-user] gentoo as a router

2003-12-12 Thread Alberto Garcia Hierro
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You also need to setup iptables properly. Something similar to this should work: iptables -t nat -A POSTROUTING -o inet_iface -j MASQUERADE Anyway, I strongly recommend you to read Iptables HOWTO. El Viernes, 12 de

Re: [gentoo-user] gentoo as a router

2003-12-12 Thread Brian Downey
Here's my routing table (the router LAN IP is 192.168.88.101): Destination Gateway Genmask Flags Metric RefUse Iface 217.5.98.87 * 255.255.255.255 UH0 00 ppp0 192.168.88.0* 255.255.255.0 U 0 00

RE: [gentoo-user] gentoo as a router

2003-12-12 Thread Brenden Walker
PROTECTED] Sent: Friday, December 12, 2003 4:18 PM To: [EMAIL PROTECTED] Subject: [gentoo-user] gentoo as a router Hello everyone, And again i can't find the solution for a trivial task such as setting up my gentoo box as a simple router for my home LAN. Ok here's my situation: I'm

Re: [gentoo-user] gentoo as a router

2003-12-12 Thread Oliver Lange
Alberto Garcia Hierro wrote: You also need to setup iptables properly. Something similar to this should work: iptables -t nat -A POSTROUTING -o inet_iface -j MASQUERADE I thought iptables is required for firewalling ? Lets assume that i don't want to setup a firewall yet. -- [EMAIL PROTECTED]

Re: [gentoo-user] gentoo as a router

2003-12-12 Thread Oliver Lange
Brian Downey wrote: You have a default gateway configured, but it's pointing to the IP address of your PPP interface, not the upstream router (usually something ending in .1 (eg 217.5.98.1). That would explain why your boxes could not get off your subnet. If i only understood Let me say it

Re: [gentoo-user] gentoo as a router

2003-12-12 Thread Alberto Garcia Hierro
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 El Viernes, 12 de Diciembre de 2003 22:35, Oliver Lange escribió: Alberto Garcia Hierro wrote: You also need to setup iptables properly. Something similar to this should work: iptables -t nat -A POSTROUTING -o inet_iface -j MASQUERADE

Re: [gentoo-user] gentoo as a router

2003-12-12 Thread Fabian Braennstroem
Hello, On Fri, 2003-12-12 at 22:40, Alberto Garcia Hierro wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 El Viernes, 12 de Diciembre de 2003 22:35, Oliver Lange escribió: Alberto Garcia Hierro wrote: You also need to setup iptables properly. Something similar to this should

Re: [gentoo-user] gentoo as a router

2003-12-12 Thread Ian Truelsen
On Fri, 12 Dec 2003 22:39:32 +0100 Oliver Lange [EMAIL PROTECTED] wrote: Brian Downey wrote: Since that time, i never had anything to do with linux networking, and i don't know anything about. I guess i need a pro sitting in front of my monitor to get the problem solved.. You don't need a

Re: [gentoo-user] gentoo as a router

2003-12-12 Thread Oliver Lange
Ian Truelsen wrote: You don't need a pro to deal with this. You will need to enable iptables in the kernel on your router box, as described in a previous response. You will also have to enable NAT, again in another response. In the netfilter section, i've enabled 'connection tracking', 'iptables

Re: [gentoo-user] gentoo as a router

2003-12-12 Thread Ian Truelsen
On Sat, 13 Dec 2003 01:13:50 +0100 Oliver Lange [EMAIL PROTECTED] wrote: In the netfilter section, i've enabled 'connection tracking', 'iptables support' and now I also enabled 'full nat' and 'full nat - masquerade target support', but without success. I couldn't find a 'nat' option (only

Re: [gentoo-user] gentoo as a router

2003-12-12 Thread Dennis Freise
On Sat, 13 Dec 2003 01:13:50 +0100 Oliver Lange [EMAIL PROTECTED] wrote: In the netfilter section, i've enabled 'connection tracking', 'iptables support' and now I also enabled 'full nat' and 'full nat - masquerade target support', but without success. I couldn't find a 'nat' option (only