Re: Problem viewing some web pages
my IP is 10.0.2.1 for the server and 10.0.2.10 for the host.
Here are my ipchains rules
:input ACCEPT
:forward DENY
:output ACCEPT
-A forward -s 10.0.2.0/255.255.255.0 -d 0.0.0.0/0.0.0.0 -i ppp0 -j MASQ
And here is my options are
ip_forward=yes
spoofprotect=no
syncookies=no
(I have tried spoofprotect=yes and syncookies=yes, but doesn't resolve the pb)
All seems to be OK, but I can't see the content of SOME web site.
www.freshmeat.com works
www.google.com works
but www.club-internet.fr does not ! It does only if I get it from the server it
self ...
And it sometimes works on the host (1 out of 100 tries...)
I'm gonna be crazy !
On Wed, 7 Feb 2001 21:48:23 +0100, Bart van Dommelen said:
>Hi,
>
> I also have ipforwarding enabled in /etc/network/options,
> first line must be: ip_forward=yes. Furthermore , I have a dialup
> connection and when PPP is up, these masquerading rules are
> applied:
>
> ipchains -D forward -j DENY
> ipchains -A forward -j MASQ -s 192.168.10.0/24 -d0.0.0.0/0
>
> These will enable masquerading from any member from the domain
> 192.168.10 to the outside. Don't forget to delete them when the
> connection is down.
>
>
> Hope this will help you.
>
>
>
> On 7 Feb 2001, at 19:27, snx@ifrance.com wrote:
>
> Date forwarded: Wed, 7 Feb 2001 20:23:50 +0100
> To: <debian-firewall@lists.debian.org>
> Subject: Problem viewing some web pages
> From: <snx@ifrance.com>
> Date sent: Wed, 7 Feb 2001 19:27:59 GMT
> Forwarded by: debian-firewall@lists.debian.org
>
> > Hi,
> >
> > I have a PC with woody as firewall with kernel 2.2.14
> > I use masquarading.
> > My host machine is a woody to with kernel 2.4.0
> > I've noticed that some web site like
> > www.club-internet.fr
> > is not viewable from the host machine.
> > If I ssh to my firewall machine and launch lynx
> > http://www.club-internet.fr/ the content of the site
> > is shown.
> > But doing the same on the host => host contacted
> > waiting for reply. But the reply never comes !
> > This happens with some other sites.
> > I've tried with windows on the host machine => the
> > same.
> > Does someone know the solution ?
> > Thnx forward
> > bye
> >
> >
> > ______________________________________________________________________________
> > ifrance.com, l'email gratuit le plus complet de l'Internet !
> > vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP...
> > http://www.ifrance.com/_reloc/email.emailif
> >
> >
> >
> > --
> > To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> > with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> >
>
>
> Kind regards,
>
> Bart van Dommelen
>
> **********************************************************************/
> "Pursuant to US Code, Title 47, Chapter 5, Subchapter II, '227, any and all
> unsolicited commercial E-mail sent to this address
> is subject to a download and archival fee in the amount of $500 US.
> E-mailing denotes acceptance of these terms."
>
--
====================================
SnAKes
NGUYEN DINH Quoc Huy
http://snakes.fr.st/
snakes@fr.st
ICQ UIN 3398187
====================================
Reply to: