[SuSE Linux] masquerade ability lost
hi all I upgraded my router-486 linux box from SuSE 5.3 to 6.0 and I have lost my masquerading ability. The network between my three PCs works great, and the router box is still the default gateway for the other two. I used to get masquerading started by doing ipfwadm -F -p deny ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0 in my boot.local, but boot.local got overwritten in the upgrade with no backup in /var/adm/backup. So, I'm trying to execute the above two comands on the command line of the router, but packets never get through from my workstations to the internet. I've never gotten YaST to configure my firewall/masq setup properly, but I'd like to have another go at it. Here's what I think I should have, but it doesn't work; someone set me straight! FW_START="yes" FW_LOCALNETS="192.168.1.0/24" FW_FTPSERVER="" FW_WWWSERVER="" FW_SSLSERVER="" FW_SSLPORT="443" FW_MAILSERVER="" FW_DNSSERVER="" FW_NNTPSERVER="" FW_NEWSFEED="" FW_WORLD_DEV="ppp0" FW_INT_DEV="eth0" FW_LOG_ACCEPT="no" FW_LOG_DENY="yes" FW_ROUTER="" FW_FRIENDS="no" FW_INOUT="no" FW_SSH="no" FW_TRANSPROXY_OUT="" FW_TRANSPROXY_IN="" FW_REDIRECT="" FW_TCP_LOCKED_PORTS="1:1023" FW_UDP_LOCKED_PORTS="1:1023" # # Masquerading settings - See /usr/doc/packages/firewall # for a detailed description # MSQ_START="yes" MSQ_NETWORKS="192.168.1.0/24" MSQ_DEV="eth0" MSQ_MODULES="ip_masq_ftp ip_masq_quake ip_masq_raudio" - To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archive at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>
Andy, Maby you are using a 2.2.x kernel ? Do you get error messages when you start ipfwadm? If so, did you install the ipchains pakkage with SuSE 6.0. Kernel 2.2.x doesn't support ipfwadm annymore. Hope this helps, Erland. Andy Ford wrote:
hi all I upgraded my router-486 linux box from SuSE 5.3 to 6.0 and I have lost my masquerading ability. The network between my three PCs works great, and the router box is still the default gateway for the other two. I used to get masquerading started by doing ipfwadm -F -p deny ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0 in my boot.local, but boot.local got overwritten in the upgrade with no backup in /var/adm/backup. So, I'm trying to execute the above two comands on the command line of the router, but packets never get through from my workstations to the internet. I've never gotten YaST to configure my firewall/masq setup properly, but I'd like to have another go at it. Here's what I think I should have, but it doesn't work; someone set me straight! </PRE>
<PRE> begin:vcard n:Moller;Erland tel;cell:+32 495 571 115 x-mozilla-html:FALSE adr:;;;;;; version:2.1 email;internet:erland@pandora.be x-mozilla-cpt:;-4000 fn:Erland Moller end:vcard
participants (2)
-
andyford@nothnbut.net
-
erland@pandora.be