/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */ >I'm just getting around to implement the strong IP Chains rulesets and >noticed that the "Dynamic IP users:" section which does an "echo "1" > >/proc/sys/net/ipv4/ip_dynaddr" is omited in the example (6.5 in the howto.) Fixed. >What does the "/proc/sys/net/ipv4/ip_dynaddr" do anyway? "Read the docs Luke!" /usr/src/linux/Documentation/networking/ip_dynaddr.txt -- This stuff allows diald ONESHOT connections to get established by dynamically changing packet source address (and socket's if local procs). It is implemented for TCP diald-box connections(1) and IP_MASQuerading(2). If enabled[*] and forwarding interface address has changed: 1) Socket (and packet) source address is rewritten ON RETRANSMISSIONS while in SYN_SENT state (diald-box processes). 2) Out-bounded MASQueraded source address changes ON OUTPUT (when internal host does retransmission) until a packet from outside is received by the tunnel. This is specially helpful for auto dialup links (diald), where the ``actual'' outgoing address is unknown at the moment the link is going up. So, the *same* (local AND masqueraded) connections requests that bring the link up will be able to get established. -- .----------------------------------------------------------------------------. | David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] | !---- ----! `----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----' _______________________________________________ Masq maillist - [EMAIL PROTECTED] Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING! or email to [EMAIL PROTECTED] PLEASE read the HOWTO and search the archives before posting. You can start your search at http://www.indyramp.com/masq/ Please keep general linux/unix/pc/internet questions off the list.
