Mailinglist Archive: opensuse (1377 mails)

[cjtan@xxxxxxx (C. J. Kenneth Tan)]

This is my current configuration at home: a machine (call it 'abox')
connected to the Net using cable modem, on eth0.  On eth1 (also on abox),
is connected to a hub, to which a print server (call it 'pserv') is
connect to also. I am now trying to use IP masquerading to allow my print
server to be able to reach the outside world.  eth0 has the IP
24.64.69.114 and eth1 has the IP 192.168.1.1 .  pserv's IP is 192.168.1.2
.  I have already compiled the kernel, with firewall, IP masquerading, IP
forwading, ICMP masquerading, and IP always defragment compiled.  As
before, I can ping pserv, and I can print to it from abox.  From pserv, I
can also ping abox.  But I can't ping any machine on the Net from pserv.
I am lost as to where to start poking at.  This is what my /etc/route.conf
looks like:

24.64.69.0		0.0.0.0		255.255.255.0           eth0
default			24.64.69.1
192.168.1.0		0.0.0.0		255.255.255.0		eth1

The entries for firewall and IP masquerading from /etc/rc.config are as
below.  I have disabled firewall in /etc/rc.config .  Do I need it for IP
masquerading?  I have also removed all the IP masquerading modules that I
don't need, like the IRC stuff.

#
# Firewall settings - See /usr/doc/packages/firewall
#                     for a detailed description
#
FW_START="no"
FW_LOCALNETS=""
FW_FTPSERVER=""
FW_WWWSERVER=""
FW_SSLSERVER=""
FW_SSLPORT="443"
FW_MAILSERVER=""
FW_DNSSERVER=""
FW_NNTPSERVER=""
FW_NEWSFEED=""
FW_WORLD_DEV="eth0"
FW_INT_DEV="eth1"
FW_LOG_ACCEPT="no"
FW_LOG_DENY="yes"
FW_ROUTER=""
FW_FRIENDS="no"
FW_INOUT="no"
FW_SSH="no"
FW_TRANSPROXY_OUT=""
FW_TRANSPROXY_IN=""
FW_REDIRECT=""
FW_TCP_LOCKED_PORTS="1:1023"
FW_UDP_LOCKED_PORTS="1:1023"
#
# Masquerading settings - See /usr/doc/packages/firewall
#                         for a detailed description
#
MSQ_START="yes"
MSQ_NETWORKS="192.168.0.0/255.255.255.0"
MSQ_DEV="eth1"
MSQ_MODULES="ip_masq_ftp"

Any help will be greatly appreciated.

Thanks.

Regards,
Kenneth Tan
------------------------------------------------------------------------------
C. J. Kenneth Tan
E-mail: cjtan@xxxxxxx                   Telephone: 1-403-220-8038 
        cjtan@xxxxxxxx                             1-403-606-4257 
URL: <A HREF="http://www.cuug.ab.ca/~tanc";><A HREF="http://www.cuug.ab.ca/~tanc</A">http://www.cuug.ab.ca/~tanc</A</A>>        Facsimile: 1-403-284-1980

            "An engineer made programmer is one 
                who attempts to solve a problem,
              A programmer made engineer is one 
                who knows how to solve a problem."
------------------------------------------------------------------------------

-
To get out of this list, please send email to majordomo@xxxxxxxx with
this text in its body: unsubscribe suse-linux-e