Re: Need help with IP Masquerading

["Johannes Ullrich" <jullrich iname com>]

>I've had IP Masquerading running under 4.2 for three or four months now.
>However, in the process of trying to work with X Windows, I wound up hosing
>my machine and reinstalling with 5.0, and I can't get masquerading to work.
>My four computers can all see and ping each other on their network
>(192.168.1.x), including the Linux machine.  Linux can ping to the
Internet,
>but no Windows or Macs can... pings just time out.  I think I may be using
>ipfwadm incorrectly... I remember it being ridiculously easy when I set it
>up, but now I have no idea which way to go... for one thing, I've got
>sources that conflict on the proper order of the lines:
>
>ipfwadm -F -p deny
>ipfwadm -F -a m -S xxx.xxx.xxx.xxx/y -D 0.0.0.0/0
>
>That, and I'm not sure which address to use for xxx.xxx.xxx.xxx  Do I want
>the IP of the linux box, or 192.168.1.0 for the whole network, or my
>Internet address, or multiple lines for each machine or???
>

I did use the following lines:

/sbin/ipfwadm -F -p deny
/sbin/ipfwadm -F -a m -S 192.168.1.0/255.255.255.0 -D 0.0.0.0/0 -V
192.168.1.1

the -V is optional but it prevents IP spoofers from entering your
masquerading machine from the wrong side.


----- Johannes Ullrich ----------------------------------------
home: jullrich iname com    home.nycap.rr.com/jullrich
work: jullrich xos com  www.xos.com
ICQ: 4660479
-----Original Message-----
From: John Oliver <joliver home com>
To: redhat-list redhat com <redhat-list redhat com>;
redhat-install-list redhat com <redhat-install-list redhat com>
Date: Tuesday, December 09, 1997 1:16 AM
Subject: Need help with IP Masquerading