I have a linux box (Redhat 8.0) with two ethernet cards.
eth0 is connected to the internet and eth1 is used for local lan connection. After running dhcp daemon, everything works fine except for web surfing from client side. When I command "ipconfig" in windows machine, it got dynamic ip address from dhcp server. but, I cannot connect any website such as, www.hotmail.com from windows machine. pls, help me out !!
/etc/dhcp.conf and my simple firewall file are as follow.
#/etc/dhcp.conf
ddns-update-style interim;
subnet 128.0.0.0 netmask 255.0.0.0 {
not authoritative;
}
ignore client-updates;subnet 192.168.1.0 netmask 255.255.255.0 {
# --- default gateway
option routers 192.168.1.1;
option subnet-mask 255.255.255.0;
option nis-domain "domain.org";
option domain-name "domain.org";
option domain-name-servers 192.168.1.1;
option time-offset -18000; # Eastern Standard Time
range dynamic-bootp 192.168.1.2 192.168.1.60;
default-lease-time 21600;
max-lease-time 43200;
}#/rc.firewall #1)Flush the rule tables. /sbin/iptables -F input /sbin/iptables -F forward /sbin/iptables -F output #2) Set the MASQ timing and allow packets in for DHCP configuration /sbin/iptables -M -S 7200 10 60 /sbin/iptables -A input -j ACCEPT -i eth0 -s 0/0 68 -d 0/0 67 -p udp #3)Deny all forwarding packets except those from local network # Masquerage those /sbin/iptables -P forward DENy /sbin/iptables -A forward -s 192.168.1.0/24 -j MASQ # 4) Load forwarding modules for special services. /sbin/modprobe ip_masq_ftp /sbin/modprobe ip_masq_raudio
Thanks.
_________________________________________________________________
책상위에 다리 올리고 느긋하게 즐긴다... MSN 온라인 상영관 http://vod.msn.co.kr
-- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
