/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
Try adding the option -i eth0 (or external-assigned NIC).
Tom Steele
IT Support
Children's Hospital
> -----Original Message-----
> From: Marcos Pinto [SMTP:[EMAIL PROTECTED]]
> Sent: Tuesday, January 18, 2000 4:47 AM
> To: [EMAIL PROTECTED]
> Subject: [Masq] Masquerading ICMP works but IP doesn't ...
>
> /* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
> */
>
>
> Hi all,
>
> We're installing a Linux server to be a Internet
> gateway/firewall and replace a Windows NT/Proxy Server
> in our computer lab. The setup is as follows:
>
> Livingstone
> Portmaster --- > Internet
> |
> |
> --------------------------- 200.250.x.x network
> | connected to the Internet
> |
> Linux server (Redhat 6.2, kernel 2.2.12-20)
> | with 2 nics
> |
> --------------------------- 192.168.1.x network
> | | | internal network
> | | |
> Windows 95/98 clients
>
> The problem is that the Windows clients are not being
> able to use any ip service (like web, telnet, ftp
> ...). We've followed the instructions in the
> ip-masquerading faq and other sources, and used the
> following commands to enable it:
>
> /sbin/ipchains -P forward DENY
> /sbin/ipchains -A forward -s 192.168.1.0/24 -j MASQ
>
> However, the ping command does work to reach any
> Internet address from the Windows hosts. There's also
> a strange detail: the traceroute output from the
> Windows clients shows no response from the Portmaster.
> I think this has something to do with the problem but
> I didn't get the relation.
>
> Does anybody have an idea on what could be the problem
> ? We're really stuck here.
>
> Thanks in advance,
>
> Marcos C.O.Pinto
>
> __________________________________________________
> Do You Yahoo!?
> Talk to your friends online with Yahoo! Messenger.
> http://im.yahoo.com
>
> _______________________________________________
> Masq maillist - [EMAIL PROTECTED]
> Admin requests can be handled at http://www.indyramp.com/masq-list/ --
> THIS INCLUDES UNSUBSCRIBING!
> or email to [EMAIL PROTECTED]
>
> PLEASE read the HOWTO and search the archives before posting.
> You can start your search at http://www.indyramp.com/masq/
> Please keep general linux/unix/pc/internet questions off the list.
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
