Setting up Masquerading on Debian machines.

[Rob Browning <osiris@cs.utexas.edu>]

Is there any reason that msquerading wouldn't work right using the
current (unstable) debian packages?

I tried to set up a simple net, following the instructions in the
IP-Masquerade mini-HOWTO, and have had no success.  Here's some info
if it's helpful:

I tried kernels 2.0.27 and 2.1.17.  I compiled all the features into
the kernels that the HOWTO suggests (I think).

I set up the host (the one actually connected to the internet via ppp)
with the following network related commands (in addition to a ppp
defaultroute):

  ifconfig lo 127.0.0.1
  route -add net 127.0.0.0 dev lo

  ifconfig eth0 192.168.1.1 netmask 255.255.255.0
  route -add net 192.168.1.0 dev eth0
  
  ipfwadm -F -p deny
  ipfwadm -F -a accept -m -S 192.168.1.0/24 -D 0.0.0.0/0 -W eth0

And I set up the client machine (connected via ethernet to the host)
with the following commands:

  ifconfig lo 127.0.0.1
  route -add net 127.0.0.0 dev lo

  ifconfig eth0 192.168.1.2 netmask 255.255.255.0 broadcast 192.168.1.255
  route add -net 192.168.1.0 netmask 255.255.255.0
  route add default gw 192.168.1.1 metric 1

This doesn't work.  I can ping the host from the client, and the
host can reach the internet via it's pppd defaultroute, but the client
cannot reach the internet, so the host is not forwarding the
masqueraded packets.

Is there some way to see what the host is doing with the packets?

Thanks for any help.
--
Rob


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com