Okay, this works...however, after a bit of inativity on the users' part, i have to 
reissue both commands:

)/sbin/ipfwadm -F -p deny
/sbin/ipfwadm -F -a m -S (your-network-ip(zzz.xxx.ddd.vvv))/netmask -D  0.0.0.0/0
and then it works again.

What am i doing wrong?


Jann Linder
Web Developer/CH2M Hill - SFO
[EMAIL PROTECTED]
Home Page:
     http://www.jann.com/
CalendarPlus Web Site:
     http://www.calendarplus.com/


-----Original Message-----
From:   mel kravitz [SMTP:[EMAIL PROTECTED]]
Sent:   Thursday, May 28, 1998 1:15 PM
To:     [EMAIL PROTECTED]
Subject:        Re: ip masquerading

Jann Linder wrote:
> 
> I have redhat v5...
> 
> I have an internal network setup on 192.168.1.x and am wanting my other
> linux machines to be on the net through 192.168.1.10 which is redhat v5
> (kernal 2.0.x)
> 
> I can surf through a ppp setup on 192.168.1.10 but wish to connect the
> others using it as a gateway.
> 
> I am wondering if i still have to recompile the kernal to use nettools 1.2
> to enable ip masquerading...?  (ps: if it is an indicator, ip forwarding v4
> is reported as  disabled on this machine during bootup.)
> 
> newbie at tcpip configuring...so please bear with me.
> 
> Jann Linder
> Web Developer/CH2M Hill - SFO
> [EMAIL PROTECTED]
> Home Page:
>      http://www.jann.com/
> CalendarPlus Web Site:
>      http://www.calendarplus.com/
> 
> -
> To unsubscribe from this list: send the line "unsubscribe linux-net" in
> the body of a message to [EMAIL PROTECTED]
No-ipfwadm is enabled you need to turn on ipv4 forwarding can be done
in netcfg panel `Routing` -enable ipv4-check box and save-
test linux box by (as root)/sbin/ipfwadm -F -p deny
/sbin/ipfwadm -F -a m -S (your-network-ip(zzz.xxx.ddd.vvv))/netmask -D
0.0.0.0/0
this will allow all ethernet machines that have there default gw route
set to the linux box to browse the internet( http,smtp sevices).
mel
to the linux
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]

Reply via email to