Re: Idle Time (ssh, or telnet)

[Security <security@mail.decorah.net>]

>	That sounds very possible, the network at home is masqueraded by a
>little 486 router I have setup, (ipchains). and the workstation at work has
>a real IP. It'd be great if you could dig out that info and let me know.
>
Nick;

Here is my /etc/ppp/ip-up.d/00ipmasq which I use on my ppp connected gateway:

##########Begin####
#!/bin/sh
#
# ipmasq.ip-up  Reinitializes the ipmasq settings when PPP comes up
#
# v1.0  19 July 1998
#####

test -x /sbin/ipmasq || exit 0

if [ -e /etc/ipmasq/ppp ]; then
/sbin/modprobe ip_masq_ftp.o
/sbin/modprobe ip_masq_raudio.o
/sbin/modprobe ip_masq_irc.o
/sbin/modprobe ip_masq_cuseeme.o
/sbin/modprobe ip_masq_vdolive.o
/sbin/modprobe ip_masq_quake.o
/sbin/ipfwadm -F -a masquerade -P all -S 192.168.1.95/24 -D 0.0.0.0/0
/sbin/ipfwadm -F -p deny
/sbin/ipfwadm -M -s 100000 100000 100000
   /sbin/ipmasq
fi

##END####

I believe that the /sbin/ipfwadm -M -s 100000 100000 100000 is the
pertinent line.

Note: this machine is a 2.0.37 kernel on Debian 2.1. I am not sure of the
equivalent ipchains incantation.  Maybe someone else on the list can toss
it out here.


I am no masqquerading or Linux guru. I have used Linux since '95 and seem
to have forgotten more than I remember.

Hope it helps...

Tom