Hi!

I have a couple of problems...

I have this setup:

   ISP
    | isdn
 ___+____ 
| Router | 181.100.100.100
    |
    |
 ___+___  181.100.100.99            ___________
| Linux |-----------------modem----| PPP Win95 | 10.0.0.10
    |    10.0.0.1
    |      ____________
    +-----| NT4 server | 10.0.0.2
    |      _______
    +-----| Win95 | 10.0.0.3
    |      _______
    +-----| Win95 | 10.0.0.4

ifconfig eth0 10.0.0.1 nm 255.255.255.0
ifconfig eth1 181.100.100.100 nm 255.255.0.0
route add -net 10.0.0.0 nm 255.255.255.0 dev eth0
route add -net 181.100.0.0 nm 255.255.0.0 dev eth1
route add default gw 181.100.100.99 nm 255.255.0.0


Doing:
  ipfwadm -F -a m -S 10.0.0.0/24 -D 0.0.0.0
makes the WinX machines as well as ppp-connected ping, http, telnet etc,
the Internet through the router OK.

BUT, when a WinX uses NetBeui/NetBIOS, their broadcasts goes out to the router.
I do not want to forward/masquerade NetBeui/NetBIOS traffic.
The router uses ISDN an it cost everytime it connects, just to find out
that NetBxxx is not served by the ISP...!

Tried:
  ipfwadm -F -a deny -P tcp -S 0.0.0.0/0 137:139
  ipfwadm -F -a deny -P udp -S 0.0.0.0/0 137:139
or
  ipfwadm -F -a deny -P tcp -S 10.0.0.0/24 -D 0.0.0.0/0 137:139
  ipfwadm -F -a deny -P udp -S 10.0.0.0/24 -D 0.0.0.0/0 137:139
and some others, but still, linux forwards it..

Also tried the -O and -I rules but I can't get it right..

-------------------
Another question:
How can I let Windows connected through modem/ppp access the NetBeui/NetBIOS
functions on the network?

I run samba, and accessing the linux shares through ppp works fine,
but the other shares on the network on the nw cannot be seen..
And I cannot "Logon to NT domain" either..

Can 'ipfwadm' help me with this?

------------------
Is there any other ipfwadm doc's than the HOWTO and the man pages?
(Well this list of course.. ;)


        Martin/
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]

Reply via email to