[S.u.S.E. Linux] IP masquerading, routing
This is my current configuration at home: a machine (call it 'abox') connected to the Net using cable modem, on eth0. On eth1 (also on abox), is connected to a hub, to which a print server (call it 'pserv') is connect to also. I am now trying to use IP masquerading to allow my print server to be able to reach the outside world. eth0 has the IP 24.64.69.114 and eth1 has the IP 192.168.1.1 . pserv's IP is 192.168.1.2 . I have already compiled the kernel, with firewall, IP masquerading, IP forwading, ICMP masquerading, and IP always defragment compiled. As before, I can ping pserv, and I can print to it from abox. From pserv, I can also ping abox. But I can't ping any machine on the Net from pserv. I am lost as to where to start poking at. This is what my /etc/route.conf looks like: 24.64.69.0 0.0.0.0 255.255.255.0 eth0 default 24.64.69.1 192.168.1.0 0.0.0.0 255.255.255.0 eth1 The entries for firewall and IP masquerading from /etc/rc.config are as below. I have disabled firewall in /etc/rc.config . Do I need it for IP masquerading? I have also removed all the IP masquerading modules that I don't need, like the IRC stuff. # # Firewall settings - See /usr/doc/packages/firewall # for a detailed description # FW_START="no" FW_LOCALNETS="" FW_FTPSERVER="" FW_WWWSERVER="" FW_SSLSERVER="" FW_SSLPORT="443" FW_MAILSERVER="" FW_DNSSERVER="" FW_NNTPSERVER="" FW_NEWSFEED="" FW_WORLD_DEV="eth0" FW_INT_DEV="eth1" FW_LOG_ACCEPT="no" FW_LOG_DENY="yes" FW_ROUTER="" FW_FRIENDS="no" FW_INOUT="no" FW_SSH="no" FW_TRANSPROXY_OUT="" FW_TRANSPROXY_IN="" FW_REDIRECT="" FW_TCP_LOCKED_PORTS="1:1023" FW_UDP_LOCKED_PORTS="1:1023" # # Masquerading settings - See /usr/doc/packages/firewall # for a detailed description # MSQ_START="yes" MSQ_NETWORKS="192.168.0.0/255.255.255.0" MSQ_DEV="eth1" MSQ_MODULES="ip_masq_ftp" Any help will be greatly appreciated. Thanks. Regards, Kenneth Tan ------------------------------------------------------------------------------ C. J. Kenneth Tan E-mail: cjtan@acm.org Telephone: 1-403-220-8038 cjtan@ieee.org 1-403-606-4257 URL: <A HREF="http://www.cuug.ab.ca/~tanc"><A HREF="http://www.cuug.ab.ca/~tanc</A">http://www.cuug.ab.ca/~tanc</A</A>> Facsimile: 1-403-284-1980 "An engineer made programmer is one who attempts to solve a problem, A programmer made engineer is one who knows how to solve a problem." ------------------------------------------------------------------------------ - To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e
I've got this problem solved already. But I don't know exactly what I did, though. All that I remember is that I have changed a whole bunch of things around, compiled the kernel once more and everything was fine. I know this is probably not a very helpful post, but I'm just telling those who tried to help, that I've got the problem solved. :-) Thanks. Regards, Kenneth Tan ------------------------------------------------------------------------------ C. J. Kenneth Tan E-mail: cjtan@acm.org Telephone: 1-403-220-8038 cjtan@ieee.org 1-403-606-4257 URL: <A HREF="http://www.cuug.ab.ca/~tanc"><A HREF="http://www.cuug.ab.ca/~tanc</A">http://www.cuug.ab.ca/~tanc</A</A>> Facsimile: 1-403-284-1980 "An engineer made programmer is one who attempts to solve a problem, A programmer made engineer is one who knows how to solve a problem." ------------------------------------------------------------------------------ On Sat, 1 Aug 1998, C. J. Kenneth Tan wrote:
This is my current configuration at home: a machine (call it 'abox') connected to the Net using cable modem, on eth0. On eth1 (also on abox), is connected to a hub, to which a print server (call it 'pserv') is connect to also. I am now trying to use IP masquerading to allow my print server to be able to reach the outside world. eth0 has the IP 24.64.69.114 and eth1 has the IP 192.168.1.1 . pserv's IP is 192.168.1.2 . I have already compiled the kernel, with firewall, IP masquerading, IP forwading, ICMP masquerading, and IP always defragment compiled. As before, I can ping pserv, and I can print to it from abox. From pserv, I can also ping abox. But I can't ping any machine on the Net from pserv. I am lost as to where to start poking at. This is what my /etc/route.conf looks like:
24.64.69.0 0.0.0.0 255.255.255.0 eth0 default 24.64.69.1 192.168.1.0 0.0.0.0 255.255.255.0 eth1
The entries for firewall and IP masquerading from /etc/rc.config are as below. I have disabled firewall in /etc/rc.config . Do I need it for IP masquerading? I have also removed all the IP masquerading modules that I don't need, like the IRC stuff.
# # Firewall settings - See /usr/doc/packages/firewall # for a detailed description # FW_START="no" FW_LOCALNETS="" FW_FTPSERVER="" FW_WWWSERVER="" FW_SSLSERVER="" FW_SSLPORT="443" FW_MAILSERVER="" FW_DNSSERVER="" FW_NNTPSERVER="" FW_NEWSFEED="" FW_WORLD_DEV="eth0" FW_INT_DEV="eth1" FW_LOG_ACCEPT="no" FW_LOG_DENY="yes" FW_ROUTER="" FW_FRIENDS="no" FW_INOUT="no" FW_SSH="no" FW_TRANSPROXY_OUT="" FW_TRANSPROXY_IN="" FW_REDIRECT="" FW_TCP_LOCKED_PORTS="1:1023" FW_UDP_LOCKED_PORTS="1:1023" # # Masquerading settings - See /usr/doc/packages/firewall # for a detailed description # MSQ_START="yes" MSQ_NETWORKS="192.168.0.0/255.255.255.0" MSQ_DEV="eth1" MSQ_MODULES="ip_masq_ftp"
Any help will be greatly appreciated.
Thanks.
Regards, Kenneth Tan ------------------------------------------------------------------------------ C. J. Kenneth Tan E-mail: cjtan@acm.org Telephone: 1-403-220-8038 cjtan@ieee.org 1-403-606-4257 URL: <A HREF="http://www.cuug.ab.ca/~tanc"><A HREF="http://www.cuug.ab.ca/~tanc</A">http://www.cuug.ab.ca/~tanc</A</A>> Facsimile: 1-403-284-1980
"An engineer made programmer is one who attempts to solve a problem, A programmer made engineer is one who knows how to solve a problem." ------------------------------------------------------------------------------
- To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e
- To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e
participants (1)
-
cjtan＠acm.org