On 05/10/2007, Hans-Werner Hilse <[EMAIL PROTECTED]> wrote: > Hi, > > On Fri, 5 Oct 2007 10:42:42 -0500 > "Walter Willis" <[EMAIL PROTECTED]> wrote: > > > I have modem asdl zyxel 660 and activate loopback with command: "ip nat > > loopback on" > > Where do you enter that and why? What is the thing _you_ call a > loopback? On what device or machine does it exist? You don't seem to be > talking about the "ifup" tool (since you talk about "ip", which however > does not know the "nat" mode?!?), and you don't seem to be talking > about the lo device either. > > > the ask is: > > it is into gentoo linux with iptables ? > > Errm, again: What? Setting up you loopback device on gentoo is done > automatically by /etc/init.d/net.lo. Should be run on bootup by rc, > check "rc-update show". > > Setting up NAT works using a sysctl (or the procfs). Restricting the > NAT works using iptables. > > > the compiler module especial for function? > > Errrr.... Again, not sure what you are asking here... Yes, you need > kernel modules for both NAT to work and as well netfilter modules for > the chains and targets and matches you want to use with iptables. They > don't really have to be modules, you can compile them statically into > the kernel as well. > > If unsure, rephrase your question -- and be a bit more verbose on what > you intend to do... A bit more information might as well cure lack of > proper vocabulary... Give examples, try to describe the setting.
My telepathic abilities are getting rusty these days, but if guessing is allowed I think that the OP wanted to set up gentoo so that he could access the Zyxel router's firewall and modify its rules, from the Gentoo desktop. Either that, or he's thinking of building an embedded image for Zyxel?! More info would no doubt help. If not anything else, tell us what Zyxel can and cannot do - if it allows ssh access to its OS, then you may be able to set up firewall builder on the Gentoo box and use that to access/setup the Zyxel firewall. If you are running OpenWRT (not sure if this would run on Zyxel, but just don't stop me guessing now) you should be able to cook something so that firewall builder could hook into it. Best of luck, -- Regards, Mick -- [EMAIL PROTECTED] mailing list
