>But, since I have a dynamic IP address on ppp0, I don't know what to put
>in for the ipportfw redirection.
Use the "ppp_up" one-line script from the strong IPFWADM ruleset in the
IP-MASQ-HOWTO.
ppp_ip = "`/sbin/ifconfig ppp0 | grep 'inet addr' | awk '{print $2}' | sed -e
's/.*://'`"
>Would it be possible to modify the ipportfw program to accept an
>interface rather than an address?
Why? the Internet works off of IP addresses. Just use the line above.
>On a slight tangent, is it recommended to specify the interface or the
>address with ipfwadm?
Use the interface name since the IP address system has been phased out
with IPCHAINS.
> 1) modify the script to get the inet addr for ppp0 from the output of
> ifconfig
Correct.
> 2) run the ipportfw rules along with the firewall rules at ip-up time.
You have to do that anyway.
>The problem with 1) is that once the ppp link times out, the forwarding
>is no longer valid, meaning that the Windows client will have to run the
>messaging every time they want to play, and (possibly) leaving stale
>forwarding entries in the table from old IP addresses.
Thats not true. If you execute your rulesets including the IPPORTFW
stuff from the /etc/ppp/ip-up file, this won't be an issue.
--David
.----------------------------------------------------------------------------.
| David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] |
!---- ----!
`----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----'
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
