[H-GEN] if I can't get this to work my boss will ....

[Willie Yeo]

[ Humbug *General* list - semi-serious discussions about Humbug and
Unix-related topics. ]

On Tue, 5 Oct 1999 staeci at yahoo.com wrote:

> [ Humbug *General* list - semi-serious discussions about Humbug and
> Unix-related topics. ]

> heres my current rules (second is irrelevent I think)...
> 
> /sbin/ipchains -P forward DENY
> #/sbin/ipchains -A forward -j MASQ -s 192.168.0.0/24 -d 0.0.0.0/0

	This looks right to me.

> I'm not too good at this and I thought maybe..
> but it doesn't work.

	Sounds like either : the kernel you compiled did not have the IP
firewalls compiled correctly, or the options to compile the IP Masqurading
not added into the kernel.

==> From my "make menuconfig" in Networking Options -->

<*> Packet socket
[ ] Kernel/User netlink socket
[*] Network firewalls
[ ] Socket Filtering
<*> Unix domain sockets
[*] TCP/IP networking
[*] IP: multicasting    *****(This is optional)*****
[ ] IP: advanced router
[ ] IP: kernel level autoconfiguration
[*] IP: firewalling
[*] IP: always defragment (required for masquerading)
[ ] IP: transparent proxy support
[*] IP: masquerading
--- Protocol-specific masquerading support will be built as modules.
[*] IP: ICMP masquerading
--- Protocol-specific masquerading support will be built as modules.
[ ] IP: optimize as router not host
< > IP: tunneling
< > IP: GRE tunnels over IP
[ ] IP: multicast routing
[*] IP: aliasing support
[ ] IP: TCP syncookie support (not enabled per default)

> Seriously if I can't get this to work by tomorrow afternoon my boss will
> make me use windows98 2nd edition to provide access for the network and I
> would rather have rabid rats gnaw at my scrotum for the rest of eternity.

	Other things to look is, what are the IP addresses given to your
workstations, as well as the default gateway IP.

:----------------------------------------------------------------------:
 Willie Yeo                      |
 CNA, BIT-in-progress            |  :                                :
 Network / Systems Administrator |         This space for hire !
 Saint Stephen's College         |            > VERY CHEAP <
 Coomera, Gold Coast,            |  :                                :
 AUSTRALIA                       |


--
This is list (humbug) general handled by majordomo at lists.humbug.org.au .
Postings only from subscribed addresses of lists general or general-post.