/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */ Unfortunately my LUG couldn't help... perhaps you guys can. I think the main problem is that the packets output on PPP0 aren't having their IP changed, and I don't understand why. Simon Wood > -----Original Message----- > From: simon wood [SMTP:[EMAIL PROTECTED]] > Sent: Saturday, June 03, 2000 8:20 PM > To: [EMAIL PROTECTED] > Subject: [Wylug-help] Masq problems with SuSE 6.2 and 2.2.14 > > Hello all, > I'm having difficultly setting up Masquerading on my machine (SuSE 6.2 > with > 2.2.14 kernel). I think that I've done it right but it still doesn't work > - > Bummer!!. > > Anyone out there see what is wrong? > > The kernel seems to route packets from the internal nethwork (eth0) out to > the > modem (I can see the send light flash) but I don't get anything coming > back... > using 'tcpdump' the outgoing packets on ppp0 don't seem to be MASQ'ed > properly > as they have the original IP (192.168.1.2). What's going on... > > Simon Wood. > > Here's how I setting up Masq and firewall: > root@frostie:/home/simon > /etc/rc.d/firewall start > Turning on packet filtering:Setting policy for `input'. > Setting policy for `forward'. > Setting policy for `output'. > /sbin/ipchains -A input -s 0.0.0.0/0.0.0.0 -d 0.0.0.0/0.0.0.0 -i ppp+ -j > ppp-in > /sbin/ipchains -A forward -s 192.168.1.0/255.255.255.0 -d 0.0.0.0/0.0.0.0 > -j MASQ > /sbin/ipchains -A ppp-in -s 192.168.1.0/255.255.255.0 -d 0.0.0.0/0.0.0.0 > -j DENY -l > /sbin/ipchains -A ppp-in -s 0.0.0.0/0.0.0.0 -d 0.0.0.0/0.0.0.0 -p 6 -j > DENY -y > root@frostie:/home/simon > ipchains -L > Chain input (policy ACCEPT): > target prot opt source destination ports > ppp-in all ------ anywhere anywhere n/a > ppp-in all ------ anywhere anywhere n/a > Chain forward (policy DENY): > target prot opt source destination ports > MASQ all ------ 192.168.1.0/24 anywhere n/a > MASQ all ------ 192.168.1.0/24 anywhere n/a > MASQ all ------ 192.168.1.0/24 anywhere n/a > Chain output (policy ACCEPT): > Chain ppp-in (2 references): > target prot opt source destination ports > DENY all ----l- 192.168.1.0/24 anywhere n/a > DENY tcp -y---- anywhere anywhere any -> > any > root@frostie:/home/simon > > > pinging my ISP's DNS from connected machine (192.168.1.1): > root@frostie:/home/simon > tcpdump -n -t -v -i ppp0 > tcpdump: listening on ppp0 > 212.1.140.104 > 212.1.130.10: icmp: echo request (ttl 64, id 1341) > 212.1.130.10 > 212.1.140.104: icmp: echo reply (ttl 252, id 25211) > 212.1.140.104 > 212.1.130.10: icmp: echo request (ttl 64, id 1342) > 212.1.130.10 > 212.1.140.104: icmp: echo reply (ttl 252, id 25226) > 212.1.140.104 > 212.1.130.10: icmp: echo request (ttl 64, id 1343) > 212.1.130.10 > 212.1.140.104: icmp: echo reply (ttl 252, id 25249) > > pinging from MASQ'ed machine on eth0 internal network (192.168.1.2): > tcpdump: listening on ppp0 > 192.168.1.2 > 212.1.130.10: icmp: echo request (ttl 31, id 5633) > 192.168.1.2 > 212.1.130.10: icmp: echo request (ttl 31, id 5889) > 192.168.1.2 > 212.1.130.10: icmp: echo request (ttl 31, id 6145) > 192.168.1.2 > 212.1.130.10: icmp: echo request (ttl 31, id 6401) > > _______________________________________________ > Wylug-help mailing list > [EMAIL PROTECTED] > http://list.wylug.org.uk/mailman/listinfo/wylug-help _______________________________________________ Masq maillist - [EMAIL PROTECTED] Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING! or email to [EMAIL PROTECTED] PLEASE read the HOWTO and search the archives before posting. You can start your search at http://www.indyramp.com/masq/ Please keep general linux/unix/pc/internet questions off the list.
