Whoops, looks like you do learn somthing new every day, I just copied them
straight out of a linux network server book, wasn't familiar with the
implications of  the # , I'll fix that up.

rob


-----Original Message-----
From: Alexander Else [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, 12 January 2000 12:25 pm
To: [EMAIL PROTECTED]
Subject: Re: [SLUG] IP MASQ advice needed


are you intentionally commenting out the masquerading rules here?  as for
pinging out, you should make sure you have icmp masquerading in the kernel
(either built in or as a module).  and you'll need to have a rule to masq
icmp.

"ipchains -A forward -s 192.168.1.0/24 -j MASQ" will masq everything from
your LAN.

Alternatively I'm not understanding what the issue is.

>echo 1 > /proc/sys/net/ipv4/ip_forward
>#ipchains -P forward DENY
>#ipchains -A forward -p tcp -s 192.168.1.0/24 -j MASQ
>#ipchains -A forward -p udp -s 192.168.1.0/24 -j MASQ    

Alexander Else
Internet Operations Technician
OzEmail / UUNET Asia Pacific Operations

--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text

Reply via email to