On Thu, 20 Jul 2000 [EMAIL PROTECTED] wrote:
> I've been given the great task of building and configuring a linux system to
> do IP masquerading and mail forwarding to our exchange server.

For mail forwarding, is sounds like you're using sendmail.  I'd recommend
qmail for that function, instead.  It's generally trusted more than
sendmail, and is definitely faster than sendmail.  It's also dead easy to
set up mail forwarding using qmail:
echo ':<ip_of_exchange_host>' > /etc/qmail/control/smtproutes

> I've got two
> network cards in my linux box with addresses on different networks and I'm
> trying to set them up to forward packets to each other. On the one side,
> I've got my LAN, on the other, I've got another linux box I'm using for
> testing purposes to get sendmail to forward from one network to another. My
> multi-homed system can ping anything on either subnet. My other linux system
> can ping both network cards in the multi-homed system, but nothing beyond
> that.

That's probably normal.  If you plan to masquerade the LAN, nothing will
be able to establish a connection in, directly.

> Any other system on the LAN can ping both cards in the multi-homed
> system, but not the linux system on the other subnet.

That means that forwarding/masquerading hasn't been enabled.  To turn it
on using Red Hat 6.2, you should:

echo 'net.ipv4.ip_forward = 1' >> /etc/sysctl.conf
echo 'net.ipv4.ip_always_defrag = 1' >> /etc/sysctl.conf
/sbin/sysctl -p /etc/sysctl.conf

It will work proplerly immediately after the above commands, and after
future reboots, assuming you have the correct firewalling rules set up
(using ipchains).  If you haven't set up ipchains, you could try using the
script at ftp://duke.eburg.com/pub/linux/init.firewall (as someone else
already mentioned).

MSG



-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to