Messages in this thread | | | Date | Mon, 23 Mar 1998 07:07:19 -0500 (EST) | From | root <> | Subject | IP Masq Under 2.1.88+ |
| |
Under 2.0.33 my Masq functions without error. However, from the subjet you might guess, I am having problems under 2.1.88+ (I haven't tried anything else). Under the tcp/ip section in make config, this is what is compiled
TCP/IP networking (CONFIG_INET) [Y/n/?] IP: multicasting (CONFIG_IP_MULTICAST) [N/y/?] IP: advanced router (CONFIG_IP_ADVANCED_ROUTER) [N/y/?] IP: kernel level autoconfiguration (CONFIG_IP_PNP) [N/y/?] IP: firewalling (CONFIG_IP_FIREWALL) [Y/n/?] IP: firewall packet netlink device (CONFIG_IP_FIREWALL_NETLINK) [N/y/?] IP: firewall packet logging (CONFIG_IP_FIREWALL_VERBOSE) [Y/n/?] IP: transparent proxy support (CONFIG_IP_TRANSPARENT_PROXY) [N/y/?] IP: always defragment (CONFIG_IP_ALWAYS_DEFRAG) [Y/n/?] IP: accounting (CONFIG_IP_ACCT) [Y/n/?] IP: masquerading (CONFIG_IP_MASQUERADE) [Y/n/?] * * Protocol-specific masquerading support will be built as modules. * IP: ICMP masquerading (CONFIG_IP_MASQUERADE_ICMP) [Y/n/?] * * Protocol-specific masquerading support will be built as modules. * IP: ipautofw masq support (EXPERIMENTAL) (CONFIG_IP_MASQUERADE_IPAUTOFW) [N/y/m/?] IP: ipportfw masq support (EXPERIMENTAL) (CONFIG_IP_MASQUERADE_IPPORTFW) [N/y/m/?] IP: optimize as router not host (CONFIG_IP_ROUTER) [N/y/?] IP: tunneling (CONFIG_NET_IPIP) [N/y/m/?] IP: GRE tunnels over IP (CONFIG_NET_IPGRE) [N/y/m/?] IP: aliasing support (CONFIG_IP_ALIAS) [N/y/?] IP: ARP daemon support (EXPERIMENTAL) (CONFIG_ARPD) [N/y/?] IP: TCP syncookie support (not enabled per default) (CONFIG_SYN_COOKIES) [Y/n/?] * * (it is safe to leave these untouched) * IP: Reverse ARP (CONFIG_INET_RARP) [N/y/m/?] IP: Drop source routed frames (CONFIG_IP_NOSR) [Y/n/?] IP: Allow large windows (not recommended if <16Mb of memory) (CONFIG_SKB_LARGE)[Y/n/?] The IPv6 protocol (EXPERIMENTAL) (CONFIG_IPV6) [N/y/m/?]
This is what I have under my script that is executed at boot time to enable the IP Masq fwadmin rules
#!/bin/sh /sbin/depmod -a /sbin/modprobe ip_masq_ftp /sbin/modprobe ip_masq_raudio /sbin/modprobe ip_masq_irc ipfwadm -F -p deny ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0
Any suggestions?
-root@hill-b-73.resnet.purdue.edu
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu
| |