/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
>With that setting my client is able to connect to the www and irc, but
>in a few days, the connection seems to move slower, and the other thing
>i have to retype the :
>ipchains -A -s 192.168.0.0/28 -d 0/0 -j MASQ everytime i reboot my
>server, if not my client wont be able to connect to the irc.
How are you loading your various IPCHAINS rulesets?
You should at least be doing it via a script loaded from
/etc/rc.d/rc.local.
What generated all this? It might be a lot more than
you need. Also, you should read the IP MASQ HOWTO
and TrinityOS as well.
--David
>And this is a few of my rc.config setting:
>
>#
># IP Adresses
>#
>IPADDR_0="192.168.0.1"
>IPADDR_1=""
>IPADDR_2=""
>IPADDR_3=""
>
>#
># network device names (e.g. "eth0")
>#
>NETDEV_0="eth0"
>NETDEV_1="ppp0"
>NETDEV_2=""
>NETDEV_3=""
>
>#
># parameteres for ifconfig, if you put "bootp" into it, bootp will
># be used to configure it
># sample entry for ethernet:
># IFCONFIG_0="192.168.81.38 broadcast 192.168.81.63 netmask
>255.255.255.224"
>#
>IFCONFIG_0="192.168.0.1 broadcast 192.168.0.15 netmask 255.255.255.240
>up"
>IFCONFIG_1=""
>IFCONFIG_2=""
>IFCONFIG_3=""
>
>#
># Firewall settings - See /usr/doc/packages/firewall
># for a detailed description
>#
>FW_START="yes"
>FW_LOCALNETS="192.168.0.0/28"
>FW_FTPSERVER=""
>FW_WWWSERVER=""
>FW_SSLSERVER=""
>FW_SSLPORT="443"
>FW_MAILSERVER=""
>FW_DNSSERVER=""
>FW_NNTPSERVER=""
>FW_NEWSFEED=""
>FW_WORLD_DEV="ppp0"
>FW_INT_DEV="eth0"
>FW_LOG_ACCEPT="no"
>FW_LOG_DENY="yes"
>FW_ROUTER=""
>FW_FRIENDS="no"
>FW_INOUT="no"
>FW_SSH="no"
>FW_TRANSPROXY_OUT=""
>FW_TRANSPROXY_IN=""
>FW_REDIRECT=""
>FW_TCP_LOCKED_PORTS="1:1023"
>FW_UDP_LOCKED_PORTS="1:1023"
>
>#
># Masquerading settings - See /usr/doc/packages/firewall
># for a detailed description
>#
>MSQ_START="yes"
>MSQ_NETWORKS="192.168.0.0/28"
>MSQ_DEV="eth0"
>MSQ_MODULES="ip_masq_cuseeme ip_masq_ftp ip_masq_irc ip_masq_quake
>ip_masq_raudio ip_masq_vdolive ip_masq_mfw $
>#
.----------------------------------------------------------------------------.
| David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] |
!---- ----!
`----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----'
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
