I've read through the IP masquerading mini-howto
quite a few time and am still lost because well,
it doesn't work.  My setup goes like so. (incoming
bad ascii art!)


|internet|--(eth0)|linux box|(eth1)--|hub|--|win95
box|


The plan is to have the win95 box use the linux
box's internet connection (cable modem, yes I know
I'm lucky) to do whatever...surf the web and
whatnot.

Here's what I have going on so far on the linux
box.
------
in /etc/rc.d/rc.local  down at the bottom

ipfwadm -F -p deny
ipfwadm -F -a m -S 192.168.1.2/24 -D 0.0.0.0/0 -W
eth1

------
/sbin/ifconfig


lo        Link encap:Local Loopback
          inet addr:127.0.0.1 
Bcast:127.255.255.255  Mask:255.0.0.0
          UP BROADCAST LOOPBACK RUNNING  MTU:3584 
Metric:1
          RX packets:312 errors:0 dropped:0
overruns:0
          TX packets:312 errors:0 dropped:0
overruns:0

eth0      Link encap:Ethernet  HWaddr
00:20:78:12:8E:E0
          inet addr:24.3.23.151 
Bcast:24.3.23.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST 
MTU:1500  Metric:1
          RX packets:33446 errors:0 dropped:0
overruns:0
          TX packets:37528 errors:0 dropped:0
overruns:0
          Interrupt:10 Base address:0xff40

eth1      Link encap:Ethernet  HWaddr
00:20:78:12:C1:25
          inet addr:192.168.1.1 
Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST 
MTU:1500  Metric:1
          RX packets:2427 errors:0 dropped:0
overruns:0
          TX packets:3486 errors:0 dropped:0
overruns:0
          Interrupt:9 Base address:0xfec0

------
/sbin/route -n

Kernel IP routing table
Destination     Gateway         Genmask        
Flags Metric Ref    Use Iface
24.3.23.0       0.0.0.0         255.255.255.0  
U     0      0        1 eth0
192.168.1.0     0.0.0.0         255.255.255.0  
U     0      0        2 eth1
127.0.0.0       0.0.0.0         255.0.0.0      
U     0      0        5 lo
0.0.0.0         24.3.23.1       0.0.0.0        
UG    0      0      848 eth0

------
/usr/src/linux/.config  (I'm running 2.0.35 btw)

#
# Networking options
#
CONFIG_FIREWALL=y
CONFIG_NET_ALIAS=y
CONFIG_INET=y
CONFIG_IP_FORWARD=y
# CONFIG_IP_MULTICAST is not set
CONFIG_SYN_COOKIES=y
CONFIG_IP_FIREWALL=y
CONFIG_IP_FIREWALL_VERBOSE=y
CONFIG_IP_MASQUERADE=y
CONFIG_IP_MASQUERADE_IPAUTOFW=y
CONFIG_IP_MASQUERADE_ICMP=y
# CONFIG_IP_TRANSPARENT_PROXY is not set
CONFIG_IP_ALWAYS_DEFRAG=y
CONFIG_IP_ACCT=y
# CONFIG_IP_ROUTER is not set
# CONFIG_NET_IPIP is not set
CONFIG_IP_ALIAS=y
# CONFIG_INET_PCTCP is not set
# CONFIG_INET_RARP is not set
# CONFIG_NO_PATH_MTU_DISCOVERY is not set
CONFIG_IP_NOSR=y
CONFIG_SKB_LARGE=y
# CONFIG_IPX is not set
# CONFIG_ATALK is not set    
# CONFIG_AX25 is not set
# CONFIG_BRIDGE is not set   
# CONFIG_NETLINK is not set

-----
As far as those "support" modules, I haven't
touched them yet.  I'll worry about being able to
play quake and get on irc as soon as I can surf on
over to www.linux.org :)


On the win95 machine (with ip of 192.168.1.2) the
gateway is set to 192.168.1.1, dns servers are
same as linux machine, netmask is 255.255.255.0,
and it can sucessfully ping, the linux box (and
vice versa)


So as far as I can tell, everything is just dandy
and setup like the howto says.  I do however have
a finger to point.

VFS: Mounted root (ext2 filesystem) readonly.
Adding Swap: 7996k swap-space (priority -1)
Adding Swap: 7996k swap-space (priority -2)
Adding Swap: 7996k swap-space (priority -3)
sysctl: ip forwarding off
VFS: Disk change detected on device 02:00
hdd : tray open or drive not ready

That's a blurb from the dmesg command.  I'm kinda
a newbie at the whole linux thing and don't know
if that sysctl:ipforwarding off line is something
from the kernel, or if it's in refrence to this
strange "Network Packet Forwarding (IPv4)" dialog
button which I don't have enabled.

If anyone is running Redhat 5.1 (or maybe it'll
work for 5.0) just type in 'control-panel' in that
spiffy nxterm window while in X and as root then
click on network configuration (4th one down) and
then click on routing, you'll see it there at the
top.

So that's all the detail I can think of giving. 
Any help would be greatly appreciated.

Thanks in advance,
Kevin
:)
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]

Reply via email to