Re: ipchains, must be asked millions of time, but i'm lost

[Jule Slootbeek <jslootbeek@clarku.edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I don't think i gave enough information on my situation.

i can ping the client from the server and vise versa, i can ping static 
external IP addresses from the server, but not from the client. and i cannot 
ping the server's external address from the client.

the server is on subnet 192.168.123.0
and the client is on 192.168.0.0
the layout is kinda like this

cable modem
   |
router (192.168.123.0)
   |
server eth0:(192.168.123.0)
          eth1:(192.168.0.0)
   |
client eth0:(192.168.0.100)

Jule

On Monday 16 June 2003 21:18, Jule Slootbeek wrote:
> Hi everybody,
>
> i installed Debian 3.0r1 on a box with two ethernet cards a while back and
> i've been trying to get ipforwarding etc. to work. I followed all the
> walkthroughs, all the howto's all the tips on lists etc. but i still cannot
> seem to get it to work.
>
> i've gotten a DHCP server running on the server, and the client is
> connected to it with DHCP, which works fine, i can ssh from the client to
> the server and i can go online with the server, but with the client i can't
> go online through the server. I've setup ipchains with the folowing basic
> rules
>
> ipchains -P forward DENY
> ipchains -A forward -i eth0 -j MASQ
> and i've enabled ip_forwarding using
> echo 1 > /proc/sys/net/ipv4/ip_forward
>
> then i type ipchains-save to see what gets in and this is printed:
> (from the top of my head, but the one rule is how it is)
>
> incoming: ACCEPT
> forward: DENY
> incoming: ACCEPT
> -A forward -s 0.0.0.0/0.0.0.0 -d 0.0.0.0/0.0.0.0 -i eth0 -j MASQ
>
> shouldn't there be some kind of numbers? my subnet forinstance? in stead of
> 0.0.0.0 four times?
>  i'm not sure where to go from now.
> any help would be appreciated
> --
> Jule Slootbeek
> jslootbeek@clarku.edu
> 617 901 6958

- -- 
Jule Slootbeek
jslootbeek@clarku.edu
617 901 6958
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE+7pAFQkskRvXpytsRAvtvAKCJl4KDJvRwbQxi8lCnpj01Rot1IwCgh5hW
dSQ7713LkuGq/jnwD57Xtmw=
=HBNB
-----END PGP SIGNATURE-----